Blame - tests/opt-testcases/tls13-compat.sh - mirror/mbed-tls

blob: 31a79e7481e7103cd60cd94fa80df9cc49ca0621 [file] [log] [blame]

XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1	#!/bin/sh
				2
				3	# tls13-compat.sh
				4	#
				5	# Copyright The Mbed TLS Contributors
				6	# SPDX-License-Identifier: Apache-2.0
				7	#
				8	# Licensed under the Apache License, Version 2.0 (the "License"); you may
				9	# not use this file except in compliance with the License.
				10	# You may obtain a copy of the License at
				11	#
				12	# http://www.apache.org/licenses/LICENSE-2.0
				13	#
				14	# Unless required by applicable law or agreed to in writing, software
				15	# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
				16	# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
				17	# See the License for the specific language governing permissions and
				18	# limitations under the License.
				19	#
				20	# Purpose
				21	#
				22	# List TLS1.3 compat test cases. They are generated by
Ronald Cron	bc5adf4	2022-10-04 11:06:14 +0200	[diff] [blame]	23	# `./tests/scripts/generate_tls13_compat_tests.py -a -o ./tests/opt-testcases/tls13-compat.sh`.
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24	#
				25	# PLEASE DO NOT EDIT THIS FILE. IF NEEDED, PLEASE MODIFY `generate_tls13_compat_tests.py`
				26	# AND REGENERATE THIS FILE.
				27	#
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	28	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	29	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	30	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	31	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				32	requires_openssl_tls1_3
				33	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	34	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	35	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	36	0 \
				37	-s "Protocol is TLSv1.3" \
				38	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				39	-s "received signature algorithm: 0x403" \
				40	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	41	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	42	-C "received HelloRetryRequest message"
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	43
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	44	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	45	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	46	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	47	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				48	requires_openssl_tls1_3
				49	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	50	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	51	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	52	0 \
				53	-s "Protocol is TLSv1.3" \
				54	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				55	-s "received signature algorithm: 0x503" \
				56	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	57	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	58	-C "received HelloRetryRequest message"
				59
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	60	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	61	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	62	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	63	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				64	requires_openssl_tls1_3
				65	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	66	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	67	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	68	0 \
				69	-s "Protocol is TLSv1.3" \
				70	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				71	-s "received signature algorithm: 0x603" \
				72	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	73	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	74	-C "received HelloRetryRequest message"
				75
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	76	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	77	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	78	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	79	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				80	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				81	requires_openssl_tls1_3
				82	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	83	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	84	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	85	0 \
				86	-s "Protocol is TLSv1.3" \
				87	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				88	-s "received signature algorithm: 0x804" \
				89	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	90	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	91	-C "received HelloRetryRequest message"
				92
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	93	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	94	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	95	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	96	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				97	requires_openssl_tls1_3
				98	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	99	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	100	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	101	0 \
				102	-s "Protocol is TLSv1.3" \
				103	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				104	-s "received signature algorithm: 0x403" \
				105	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	106	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	107	-C "received HelloRetryRequest message"
				108
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	109	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	110	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	111	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	112	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				113	requires_openssl_tls1_3
				114	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	115	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	116	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	117	0 \
				118	-s "Protocol is TLSv1.3" \
				119	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				120	-s "received signature algorithm: 0x503" \
				121	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	122	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	123	-C "received HelloRetryRequest message"
				124
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	125	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	126	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	127	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	128	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				129	requires_openssl_tls1_3
				130	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	131	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	132	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	133	0 \
				134	-s "Protocol is TLSv1.3" \
				135	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				136	-s "received signature algorithm: 0x603" \
				137	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	138	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	139	-C "received HelloRetryRequest message"
				140
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	141	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	142	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	143	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	144	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				145	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				146	requires_openssl_tls1_3
				147	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	148	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	149	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	150	0 \
				151	-s "Protocol is TLSv1.3" \
				152	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				153	-s "received signature algorithm: 0x804" \
				154	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	155	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	156	-C "received HelloRetryRequest message"
				157
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	158	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	159	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	160	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	161	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				162	requires_openssl_tls1_3
				163	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	164	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	165	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	166	0 \
				167	-s "Protocol is TLSv1.3" \
				168	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				169	-s "received signature algorithm: 0x403" \
				170	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	171	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	172	-C "received HelloRetryRequest message"
				173
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	174	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	175	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	176	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	177	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				178	requires_openssl_tls1_3
				179	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	180	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	181	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	182	0 \
				183	-s "Protocol is TLSv1.3" \
				184	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				185	-s "received signature algorithm: 0x503" \
				186	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	187	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	188	-C "received HelloRetryRequest message"
				189
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	190	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	191	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	192	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	193	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				194	requires_openssl_tls1_3
				195	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	196	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	197	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	198	0 \
				199	-s "Protocol is TLSv1.3" \
				200	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				201	-s "received signature algorithm: 0x603" \
				202	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	203	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	204	-C "received HelloRetryRequest message"
				205
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	206	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	207	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	208	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	209	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				210	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				211	requires_openssl_tls1_3
				212	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	213	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	214	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	215	0 \
				216	-s "Protocol is TLSv1.3" \
				217	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				218	-s "received signature algorithm: 0x804" \
				219	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	220	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	221	-C "received HelloRetryRequest message"
				222
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	223	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	224	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	225	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	226	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				227	requires_openssl_tls1_3
				228	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	229	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	230	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	231	0 \
				232	-s "Protocol is TLSv1.3" \
				233	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				234	-s "received signature algorithm: 0x403" \
				235	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	236	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	237	-C "received HelloRetryRequest message"
				238
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	239	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	240	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	241	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	242	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				243	requires_openssl_tls1_3
				244	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	245	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	246	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	247	0 \
				248	-s "Protocol is TLSv1.3" \
				249	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				250	-s "received signature algorithm: 0x503" \
				251	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	252	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	253	-C "received HelloRetryRequest message"
				254
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	255	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	256	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	257	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	258	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				259	requires_openssl_tls1_3
				260	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	261	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	262	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	263	0 \
				264	-s "Protocol is TLSv1.3" \
				265	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				266	-s "received signature algorithm: 0x603" \
				267	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	268	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	269	-C "received HelloRetryRequest message"
				270
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	271	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	272	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	273	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	274	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				275	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				276	requires_openssl_tls1_3
				277	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	278	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	279	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	280	0 \
				281	-s "Protocol is TLSv1.3" \
				282	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				283	-s "received signature algorithm: 0x804" \
				284	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	285	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	286	-C "received HelloRetryRequest message"
				287
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	288	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	289	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	290	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	291	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				292	requires_openssl_tls1_3
				293	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	294	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	295	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	296	0 \
				297	-s "Protocol is TLSv1.3" \
				298	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				299	-s "received signature algorithm: 0x403" \
				300	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	301	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	302	-C "received HelloRetryRequest message"
				303
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	304	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	305	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	306	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	307	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				308	requires_openssl_tls1_3
				309	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	310	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	311	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	312	0 \
				313	-s "Protocol is TLSv1.3" \
				314	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				315	-s "received signature algorithm: 0x503" \
				316	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	317	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	318	-C "received HelloRetryRequest message"
				319
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	320	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	321	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	322	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	323	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				324	requires_openssl_tls1_3
				325	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	326	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	327	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	328	0 \
				329	-s "Protocol is TLSv1.3" \
				330	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				331	-s "received signature algorithm: 0x603" \
				332	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	333	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	334	-C "received HelloRetryRequest message"
				335
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	336	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	337	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	338	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	339	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				340	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				341	requires_openssl_tls1_3
				342	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	343	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	344	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	345	0 \
				346	-s "Protocol is TLSv1.3" \
				347	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				348	-s "received signature algorithm: 0x804" \
				349	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	350	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	351	-C "received HelloRetryRequest message"
				352
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	353	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	354	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	355	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	356	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				357	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	358	requires_openssl_3_x
				359	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				360	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				361	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
				362	0 \
				363	-s "Protocol is TLSv1.3" \
				364	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				365	-s "received signature algorithm: 0x403" \
				366	-s "got named group: ffdhe2048(0100)" \
				367	-s "Certificate verification was skipped" \
				368	-C "received HelloRetryRequest message"
				369
				370	requires_config_enabled MBEDTLS_SSL_SRV_C
				371	requires_config_enabled MBEDTLS_DEBUG_C
				372	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				373	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				374	requires_openssl_tls1_3
				375	requires_openssl_3_x
				376	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				377	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				378	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
				379	0 \
				380	-s "Protocol is TLSv1.3" \
				381	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				382	-s "received signature algorithm: 0x503" \
				383	-s "got named group: ffdhe2048(0100)" \
				384	-s "Certificate verification was skipped" \
				385	-C "received HelloRetryRequest message"
				386
				387	requires_config_enabled MBEDTLS_SSL_SRV_C
				388	requires_config_enabled MBEDTLS_DEBUG_C
				389	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				390	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				391	requires_openssl_tls1_3
				392	requires_openssl_3_x
				393	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				394	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				395	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
				396	0 \
				397	-s "Protocol is TLSv1.3" \
				398	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				399	-s "received signature algorithm: 0x603" \
				400	-s "got named group: ffdhe2048(0100)" \
				401	-s "Certificate verification was skipped" \
				402	-C "received HelloRetryRequest message"
				403
				404	requires_config_enabled MBEDTLS_SSL_SRV_C
				405	requires_config_enabled MBEDTLS_DEBUG_C
				406	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				407	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				408	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				409	requires_openssl_tls1_3
				410	requires_openssl_3_x
				411	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				412	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				413	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
				414	0 \
				415	-s "Protocol is TLSv1.3" \
				416	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				417	-s "received signature algorithm: 0x804" \
				418	-s "got named group: ffdhe2048(0100)" \
				419	-s "Certificate verification was skipped" \
				420	-C "received HelloRetryRequest message"
				421
				422	requires_config_enabled MBEDTLS_SSL_SRV_C
				423	requires_config_enabled MBEDTLS_DEBUG_C
				424	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				425	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				426	requires_openssl_tls1_3
				427	requires_openssl_3_x
				428	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				429	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				430	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3" \
				431	0 \
				432	-s "Protocol is TLSv1.3" \
				433	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				434	-s "received signature algorithm: 0x403" \
				435	-s "got named group: ffdhe3072(0101)" \
				436	-s "Certificate verification was skipped" \
				437	-C "received HelloRetryRequest message"
				438
				439	requires_config_enabled MBEDTLS_SSL_SRV_C
				440	requires_config_enabled MBEDTLS_DEBUG_C
				441	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				442	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				443	requires_openssl_tls1_3
				444	requires_openssl_3_x
				445	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				446	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				447	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3" \
				448	0 \
				449	-s "Protocol is TLSv1.3" \
				450	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				451	-s "received signature algorithm: 0x503" \
				452	-s "got named group: ffdhe3072(0101)" \
				453	-s "Certificate verification was skipped" \
				454	-C "received HelloRetryRequest message"
				455
				456	requires_config_enabled MBEDTLS_SSL_SRV_C
				457	requires_config_enabled MBEDTLS_DEBUG_C
				458	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				459	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				460	requires_openssl_tls1_3
				461	requires_openssl_3_x
				462	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				463	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				464	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3" \
				465	0 \
				466	-s "Protocol is TLSv1.3" \
				467	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				468	-s "received signature algorithm: 0x603" \
				469	-s "got named group: ffdhe3072(0101)" \
				470	-s "Certificate verification was skipped" \
				471	-C "received HelloRetryRequest message"
				472
				473	requires_config_enabled MBEDTLS_SSL_SRV_C
				474	requires_config_enabled MBEDTLS_DEBUG_C
				475	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				476	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				477	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				478	requires_openssl_tls1_3
				479	requires_openssl_3_x
				480	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				481	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				482	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3" \
				483	0 \
				484	-s "Protocol is TLSv1.3" \
				485	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				486	-s "received signature algorithm: 0x804" \
				487	-s "got named group: ffdhe3072(0101)" \
				488	-s "Certificate verification was skipped" \
				489	-C "received HelloRetryRequest message"
				490
				491	requires_config_enabled MBEDTLS_SSL_SRV_C
				492	requires_config_enabled MBEDTLS_DEBUG_C
				493	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				494	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				495	requires_openssl_tls1_3
				496	requires_openssl_3_x
				497	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				498	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				499	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3" \
				500	0 \
				501	-s "Protocol is TLSv1.3" \
				502	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				503	-s "received signature algorithm: 0x403" \
				504	-s "got named group: ffdhe4096(0102)" \
				505	-s "Certificate verification was skipped" \
				506	-C "received HelloRetryRequest message"
				507
				508	requires_config_enabled MBEDTLS_SSL_SRV_C
				509	requires_config_enabled MBEDTLS_DEBUG_C
				510	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				511	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				512	requires_openssl_tls1_3
				513	requires_openssl_3_x
				514	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				515	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				516	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3" \
				517	0 \
				518	-s "Protocol is TLSv1.3" \
				519	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				520	-s "received signature algorithm: 0x503" \
				521	-s "got named group: ffdhe4096(0102)" \
				522	-s "Certificate verification was skipped" \
				523	-C "received HelloRetryRequest message"
				524
				525	requires_config_enabled MBEDTLS_SSL_SRV_C
				526	requires_config_enabled MBEDTLS_DEBUG_C
				527	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				528	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				529	requires_openssl_tls1_3
				530	requires_openssl_3_x
				531	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				532	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				533	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3" \
				534	0 \
				535	-s "Protocol is TLSv1.3" \
				536	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				537	-s "received signature algorithm: 0x603" \
				538	-s "got named group: ffdhe4096(0102)" \
				539	-s "Certificate verification was skipped" \
				540	-C "received HelloRetryRequest message"
				541
				542	requires_config_enabled MBEDTLS_SSL_SRV_C
				543	requires_config_enabled MBEDTLS_DEBUG_C
				544	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				545	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				546	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				547	requires_openssl_tls1_3
				548	requires_openssl_3_x
				549	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				550	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				551	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3" \
				552	0 \
				553	-s "Protocol is TLSv1.3" \
				554	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				555	-s "received signature algorithm: 0x804" \
				556	-s "got named group: ffdhe4096(0102)" \
				557	-s "Certificate verification was skipped" \
				558	-C "received HelloRetryRequest message"
				559
				560	requires_config_enabled MBEDTLS_SSL_SRV_C
				561	requires_config_enabled MBEDTLS_DEBUG_C
				562	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				563	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				564	requires_openssl_tls1_3
				565	requires_openssl_3_x
				566	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				567	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				568	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3" \
				569	0 \
				570	-s "Protocol is TLSv1.3" \
				571	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				572	-s "received signature algorithm: 0x403" \
				573	-s "got named group: ffdhe6144(0103)" \
				574	-s "Certificate verification was skipped" \
				575	-C "received HelloRetryRequest message"
				576
				577	requires_config_enabled MBEDTLS_SSL_SRV_C
				578	requires_config_enabled MBEDTLS_DEBUG_C
				579	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				580	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				581	requires_openssl_tls1_3
				582	requires_openssl_3_x
				583	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				584	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				585	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3" \
				586	0 \
				587	-s "Protocol is TLSv1.3" \
				588	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				589	-s "received signature algorithm: 0x503" \
				590	-s "got named group: ffdhe6144(0103)" \
				591	-s "Certificate verification was skipped" \
				592	-C "received HelloRetryRequest message"
				593
				594	requires_config_enabled MBEDTLS_SSL_SRV_C
				595	requires_config_enabled MBEDTLS_DEBUG_C
				596	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				597	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				598	requires_openssl_tls1_3
				599	requires_openssl_3_x
				600	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				601	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				602	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3" \
				603	0 \
				604	-s "Protocol is TLSv1.3" \
				605	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				606	-s "received signature algorithm: 0x603" \
				607	-s "got named group: ffdhe6144(0103)" \
				608	-s "Certificate verification was skipped" \
				609	-C "received HelloRetryRequest message"
				610
				611	requires_config_enabled MBEDTLS_SSL_SRV_C
				612	requires_config_enabled MBEDTLS_DEBUG_C
				613	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				614	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				615	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				616	requires_openssl_tls1_3
				617	requires_openssl_3_x
				618	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				619	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				620	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3" \
				621	0 \
				622	-s "Protocol is TLSv1.3" \
				623	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				624	-s "received signature algorithm: 0x804" \
				625	-s "got named group: ffdhe6144(0103)" \
				626	-s "Certificate verification was skipped" \
				627	-C "received HelloRetryRequest message"
				628
				629	requires_config_enabled MBEDTLS_SSL_SRV_C
				630	requires_config_enabled MBEDTLS_DEBUG_C
				631	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				632	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				633	requires_openssl_tls1_3
				634	requires_openssl_3_x
				635	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				636	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				637	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3" \
				638	0 \
				639	-s "Protocol is TLSv1.3" \
				640	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				641	-s "received signature algorithm: 0x403" \
				642	-s "got named group: ffdhe8192(0104)" \
				643	-s "Certificate verification was skipped" \
				644	-C "received HelloRetryRequest message"
				645
				646	requires_config_enabled MBEDTLS_SSL_SRV_C
				647	requires_config_enabled MBEDTLS_DEBUG_C
				648	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				649	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				650	requires_openssl_tls1_3
				651	requires_openssl_3_x
				652	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				653	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				654	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3" \
				655	0 \
				656	-s "Protocol is TLSv1.3" \
				657	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				658	-s "received signature algorithm: 0x503" \
				659	-s "got named group: ffdhe8192(0104)" \
				660	-s "Certificate verification was skipped" \
				661	-C "received HelloRetryRequest message"
				662
				663	requires_config_enabled MBEDTLS_SSL_SRV_C
				664	requires_config_enabled MBEDTLS_DEBUG_C
				665	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				666	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				667	requires_openssl_tls1_3
				668	requires_openssl_3_x
				669	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				670	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				671	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3" \
				672	0 \
				673	-s "Protocol is TLSv1.3" \
				674	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				675	-s "received signature algorithm: 0x603" \
				676	-s "got named group: ffdhe8192(0104)" \
				677	-s "Certificate verification was skipped" \
				678	-C "received HelloRetryRequest message"
				679
				680	requires_config_enabled MBEDTLS_SSL_SRV_C
				681	requires_config_enabled MBEDTLS_DEBUG_C
				682	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				683	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				684	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				685	requires_openssl_tls1_3
				686	requires_openssl_3_x
				687	run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				688	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				689	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3" \
				690	0 \
				691	-s "Protocol is TLSv1.3" \
				692	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				693	-s "received signature algorithm: 0x804" \
				694	-s "got named group: ffdhe8192(0104)" \
				695	-s "Certificate verification was skipped" \
				696	-C "received HelloRetryRequest message"
				697
				698	requires_config_enabled MBEDTLS_SSL_SRV_C
				699	requires_config_enabled MBEDTLS_DEBUG_C
				700	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				701	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				702	requires_openssl_tls1_3
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	703	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	704	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	705	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	706	0 \
				707	-s "Protocol is TLSv1.3" \
				708	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				709	-s "received signature algorithm: 0x403" \
				710	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	711	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	712	-C "received HelloRetryRequest message"
				713
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	714	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	715	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	716	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	717	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				718	requires_openssl_tls1_3
				719	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	720	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	721	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	722	0 \
				723	-s "Protocol is TLSv1.3" \
				724	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				725	-s "received signature algorithm: 0x503" \
				726	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	727	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	728	-C "received HelloRetryRequest message"
				729
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	730	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	731	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	732	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	733	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				734	requires_openssl_tls1_3
				735	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	736	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	737	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	738	0 \
				739	-s "Protocol is TLSv1.3" \
				740	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				741	-s "received signature algorithm: 0x603" \
				742	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	743	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	744	-C "received HelloRetryRequest message"
				745
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	746	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	747	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	748	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	749	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				750	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				751	requires_openssl_tls1_3
				752	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	753	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	754	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	755	0 \
				756	-s "Protocol is TLSv1.3" \
				757	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				758	-s "received signature algorithm: 0x804" \
				759	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	760	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	761	-C "received HelloRetryRequest message"
				762
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	763	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	764	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	765	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	766	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				767	requires_openssl_tls1_3
				768	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	769	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	770	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	771	0 \
				772	-s "Protocol is TLSv1.3" \
				773	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				774	-s "received signature algorithm: 0x403" \
				775	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	776	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	777	-C "received HelloRetryRequest message"
				778
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	779	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	780	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	781	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	782	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				783	requires_openssl_tls1_3
				784	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	785	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	786	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	787	0 \
				788	-s "Protocol is TLSv1.3" \
				789	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				790	-s "received signature algorithm: 0x503" \
				791	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	792	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	793	-C "received HelloRetryRequest message"
				794
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	795	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	796	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	797	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	798	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				799	requires_openssl_tls1_3
				800	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	801	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	802	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	803	0 \
				804	-s "Protocol is TLSv1.3" \
				805	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				806	-s "received signature algorithm: 0x603" \
				807	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	808	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	809	-C "received HelloRetryRequest message"
				810
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	811	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	812	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	813	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	814	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				815	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				816	requires_openssl_tls1_3
				817	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	818	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	819	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	820	0 \
				821	-s "Protocol is TLSv1.3" \
				822	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				823	-s "received signature algorithm: 0x804" \
				824	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	825	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	826	-C "received HelloRetryRequest message"
				827
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	828	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	829	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	830	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	831	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				832	requires_openssl_tls1_3
				833	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	834	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	835	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	836	0 \
				837	-s "Protocol is TLSv1.3" \
				838	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				839	-s "received signature algorithm: 0x403" \
				840	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	841	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	842	-C "received HelloRetryRequest message"
				843
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	844	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	845	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	846	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	847	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				848	requires_openssl_tls1_3
				849	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	850	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	851	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	852	0 \
				853	-s "Protocol is TLSv1.3" \
				854	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				855	-s "received signature algorithm: 0x503" \
				856	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	857	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	858	-C "received HelloRetryRequest message"
				859
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	860	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	861	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	862	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	863	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				864	requires_openssl_tls1_3
				865	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	866	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	867	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	868	0 \
				869	-s "Protocol is TLSv1.3" \
				870	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				871	-s "received signature algorithm: 0x603" \
				872	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	873	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	874	-C "received HelloRetryRequest message"
				875
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	876	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	877	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	878	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	879	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				880	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				881	requires_openssl_tls1_3
				882	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	883	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	884	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	885	0 \
				886	-s "Protocol is TLSv1.3" \
				887	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				888	-s "received signature algorithm: 0x804" \
				889	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	890	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	891	-C "received HelloRetryRequest message"
				892
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	893	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	894	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	895	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	896	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				897	requires_openssl_tls1_3
				898	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	899	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	900	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	901	0 \
				902	-s "Protocol is TLSv1.3" \
				903	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				904	-s "received signature algorithm: 0x403" \
				905	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	906	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	907	-C "received HelloRetryRequest message"
				908
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	909	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	910	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	911	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	912	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				913	requires_openssl_tls1_3
				914	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	915	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	916	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	917	0 \
				918	-s "Protocol is TLSv1.3" \
				919	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				920	-s "received signature algorithm: 0x503" \
				921	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	922	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	923	-C "received HelloRetryRequest message"
				924
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	925	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	926	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	927	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	928	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				929	requires_openssl_tls1_3
				930	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	931	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	932	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	933	0 \
				934	-s "Protocol is TLSv1.3" \
				935	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				936	-s "received signature algorithm: 0x603" \
				937	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	938	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	939	-C "received HelloRetryRequest message"
				940
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	941	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	942	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	943	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	944	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				945	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				946	requires_openssl_tls1_3
				947	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	948	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	949	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	950	0 \
				951	-s "Protocol is TLSv1.3" \
				952	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				953	-s "received signature algorithm: 0x804" \
				954	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	955	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	956	-C "received HelloRetryRequest message"
				957
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	958	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	959	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	960	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	961	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				962	requires_openssl_tls1_3
				963	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	964	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	965	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	966	0 \
				967	-s "Protocol is TLSv1.3" \
				968	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				969	-s "received signature algorithm: 0x403" \
				970	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	971	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	972	-C "received HelloRetryRequest message"
				973
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	974	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	975	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	976	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	977	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				978	requires_openssl_tls1_3
				979	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	980	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	981	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	982	0 \
				983	-s "Protocol is TLSv1.3" \
				984	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				985	-s "received signature algorithm: 0x503" \
				986	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	987	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	988	-C "received HelloRetryRequest message"
				989
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	990	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	991	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	992	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	993	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				994	requires_openssl_tls1_3
				995	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	996	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	997	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	998	0 \
				999	-s "Protocol is TLSv1.3" \
				1000	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1001	-s "received signature algorithm: 0x603" \
				1002	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1003	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1004	-C "received HelloRetryRequest message"
				1005
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1006	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1007	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1008	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1009	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1010	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1011	requires_openssl_tls1_3
				1012	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1013	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1014	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1015	0 \
				1016	-s "Protocol is TLSv1.3" \
				1017	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1018	-s "received signature algorithm: 0x804" \
				1019	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1020	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1021	-C "received HelloRetryRequest message"
				1022
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1023	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1024	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1025	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1026	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1027	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	1028	requires_openssl_3_x
				1029	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
				1030	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1031	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
				1032	0 \
				1033	-s "Protocol is TLSv1.3" \
				1034	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1035	-s "received signature algorithm: 0x403" \
				1036	-s "got named group: ffdhe2048(0100)" \
				1037	-s "Certificate verification was skipped" \
				1038	-C "received HelloRetryRequest message"
				1039
				1040	requires_config_enabled MBEDTLS_SSL_SRV_C
				1041	requires_config_enabled MBEDTLS_DEBUG_C
				1042	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1043	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1044	requires_openssl_tls1_3
				1045	requires_openssl_3_x
				1046	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
				1047	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1048	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
				1049	0 \
				1050	-s "Protocol is TLSv1.3" \
				1051	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1052	-s "received signature algorithm: 0x503" \
				1053	-s "got named group: ffdhe2048(0100)" \
				1054	-s "Certificate verification was skipped" \
				1055	-C "received HelloRetryRequest message"
				1056
				1057	requires_config_enabled MBEDTLS_SSL_SRV_C
				1058	requires_config_enabled MBEDTLS_DEBUG_C
				1059	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1060	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1061	requires_openssl_tls1_3
				1062	requires_openssl_3_x
				1063	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
				1064	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1065	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
				1066	0 \
				1067	-s "Protocol is TLSv1.3" \
				1068	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1069	-s "received signature algorithm: 0x603" \
				1070	-s "got named group: ffdhe2048(0100)" \
				1071	-s "Certificate verification was skipped" \
				1072	-C "received HelloRetryRequest message"
				1073
				1074	requires_config_enabled MBEDTLS_SSL_SRV_C
				1075	requires_config_enabled MBEDTLS_DEBUG_C
				1076	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1077	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1078	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1079	requires_openssl_tls1_3
				1080	requires_openssl_3_x
				1081	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
				1082	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1083	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
				1084	0 \
				1085	-s "Protocol is TLSv1.3" \
				1086	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1087	-s "received signature algorithm: 0x804" \
				1088	-s "got named group: ffdhe2048(0100)" \
				1089	-s "Certificate verification was skipped" \
				1090	-C "received HelloRetryRequest message"
				1091
				1092	requires_config_enabled MBEDTLS_SSL_SRV_C
				1093	requires_config_enabled MBEDTLS_DEBUG_C
				1094	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1095	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1096	requires_openssl_tls1_3
				1097	requires_openssl_3_x
				1098	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp256r1_sha256" \
				1099	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1100	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3" \
				1101	0 \
				1102	-s "Protocol is TLSv1.3" \
				1103	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1104	-s "received signature algorithm: 0x403" \
				1105	-s "got named group: ffdhe3072(0101)" \
				1106	-s "Certificate verification was skipped" \
				1107	-C "received HelloRetryRequest message"
				1108
				1109	requires_config_enabled MBEDTLS_SSL_SRV_C
				1110	requires_config_enabled MBEDTLS_DEBUG_C
				1111	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1112	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1113	requires_openssl_tls1_3
				1114	requires_openssl_3_x
				1115	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp384r1_sha384" \
				1116	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1117	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3" \
				1118	0 \
				1119	-s "Protocol is TLSv1.3" \
				1120	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1121	-s "received signature algorithm: 0x503" \
				1122	-s "got named group: ffdhe3072(0101)" \
				1123	-s "Certificate verification was skipped" \
				1124	-C "received HelloRetryRequest message"
				1125
				1126	requires_config_enabled MBEDTLS_SSL_SRV_C
				1127	requires_config_enabled MBEDTLS_DEBUG_C
				1128	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1129	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1130	requires_openssl_tls1_3
				1131	requires_openssl_3_x
				1132	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp521r1_sha512" \
				1133	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1134	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3" \
				1135	0 \
				1136	-s "Protocol is TLSv1.3" \
				1137	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1138	-s "received signature algorithm: 0x603" \
				1139	-s "got named group: ffdhe3072(0101)" \
				1140	-s "Certificate verification was skipped" \
				1141	-C "received HelloRetryRequest message"
				1142
				1143	requires_config_enabled MBEDTLS_SSL_SRV_C
				1144	requires_config_enabled MBEDTLS_DEBUG_C
				1145	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1146	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1147	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1148	requires_openssl_tls1_3
				1149	requires_openssl_3_x
				1150	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe3072,rsa_pss_rsae_sha256" \
				1151	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1152	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3" \
				1153	0 \
				1154	-s "Protocol is TLSv1.3" \
				1155	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1156	-s "received signature algorithm: 0x804" \
				1157	-s "got named group: ffdhe3072(0101)" \
				1158	-s "Certificate verification was skipped" \
				1159	-C "received HelloRetryRequest message"
				1160
				1161	requires_config_enabled MBEDTLS_SSL_SRV_C
				1162	requires_config_enabled MBEDTLS_DEBUG_C
				1163	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1164	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1165	requires_openssl_tls1_3
				1166	requires_openssl_3_x
				1167	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp256r1_sha256" \
				1168	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1169	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3" \
				1170	0 \
				1171	-s "Protocol is TLSv1.3" \
				1172	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1173	-s "received signature algorithm: 0x403" \
				1174	-s "got named group: ffdhe4096(0102)" \
				1175	-s "Certificate verification was skipped" \
				1176	-C "received HelloRetryRequest message"
				1177
				1178	requires_config_enabled MBEDTLS_SSL_SRV_C
				1179	requires_config_enabled MBEDTLS_DEBUG_C
				1180	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1181	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1182	requires_openssl_tls1_3
				1183	requires_openssl_3_x
				1184	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp384r1_sha384" \
				1185	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1186	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3" \
				1187	0 \
				1188	-s "Protocol is TLSv1.3" \
				1189	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1190	-s "received signature algorithm: 0x503" \
				1191	-s "got named group: ffdhe4096(0102)" \
				1192	-s "Certificate verification was skipped" \
				1193	-C "received HelloRetryRequest message"
				1194
				1195	requires_config_enabled MBEDTLS_SSL_SRV_C
				1196	requires_config_enabled MBEDTLS_DEBUG_C
				1197	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1198	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1199	requires_openssl_tls1_3
				1200	requires_openssl_3_x
				1201	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp521r1_sha512" \
				1202	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1203	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3" \
				1204	0 \
				1205	-s "Protocol is TLSv1.3" \
				1206	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1207	-s "received signature algorithm: 0x603" \
				1208	-s "got named group: ffdhe4096(0102)" \
				1209	-s "Certificate verification was skipped" \
				1210	-C "received HelloRetryRequest message"
				1211
				1212	requires_config_enabled MBEDTLS_SSL_SRV_C
				1213	requires_config_enabled MBEDTLS_DEBUG_C
				1214	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1215	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1216	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1217	requires_openssl_tls1_3
				1218	requires_openssl_3_x
				1219	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe4096,rsa_pss_rsae_sha256" \
				1220	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1221	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3" \
				1222	0 \
				1223	-s "Protocol is TLSv1.3" \
				1224	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1225	-s "received signature algorithm: 0x804" \
				1226	-s "got named group: ffdhe4096(0102)" \
				1227	-s "Certificate verification was skipped" \
				1228	-C "received HelloRetryRequest message"
				1229
				1230	requires_config_enabled MBEDTLS_SSL_SRV_C
				1231	requires_config_enabled MBEDTLS_DEBUG_C
				1232	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1233	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1234	requires_openssl_tls1_3
				1235	requires_openssl_3_x
				1236	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp256r1_sha256" \
				1237	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1238	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3" \
				1239	0 \
				1240	-s "Protocol is TLSv1.3" \
				1241	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1242	-s "received signature algorithm: 0x403" \
				1243	-s "got named group: ffdhe6144(0103)" \
				1244	-s "Certificate verification was skipped" \
				1245	-C "received HelloRetryRequest message"
				1246
				1247	requires_config_enabled MBEDTLS_SSL_SRV_C
				1248	requires_config_enabled MBEDTLS_DEBUG_C
				1249	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1250	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1251	requires_openssl_tls1_3
				1252	requires_openssl_3_x
				1253	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp384r1_sha384" \
				1254	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1255	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3" \
				1256	0 \
				1257	-s "Protocol is TLSv1.3" \
				1258	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1259	-s "received signature algorithm: 0x503" \
				1260	-s "got named group: ffdhe6144(0103)" \
				1261	-s "Certificate verification was skipped" \
				1262	-C "received HelloRetryRequest message"
				1263
				1264	requires_config_enabled MBEDTLS_SSL_SRV_C
				1265	requires_config_enabled MBEDTLS_DEBUG_C
				1266	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1267	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1268	requires_openssl_tls1_3
				1269	requires_openssl_3_x
				1270	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp521r1_sha512" \
				1271	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1272	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3" \
				1273	0 \
				1274	-s "Protocol is TLSv1.3" \
				1275	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1276	-s "received signature algorithm: 0x603" \
				1277	-s "got named group: ffdhe6144(0103)" \
				1278	-s "Certificate verification was skipped" \
				1279	-C "received HelloRetryRequest message"
				1280
				1281	requires_config_enabled MBEDTLS_SSL_SRV_C
				1282	requires_config_enabled MBEDTLS_DEBUG_C
				1283	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1284	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1285	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1286	requires_openssl_tls1_3
				1287	requires_openssl_3_x
				1288	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe6144,rsa_pss_rsae_sha256" \
				1289	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1290	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3" \
				1291	0 \
				1292	-s "Protocol is TLSv1.3" \
				1293	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1294	-s "received signature algorithm: 0x804" \
				1295	-s "got named group: ffdhe6144(0103)" \
				1296	-s "Certificate verification was skipped" \
				1297	-C "received HelloRetryRequest message"
				1298
				1299	requires_config_enabled MBEDTLS_SSL_SRV_C
				1300	requires_config_enabled MBEDTLS_DEBUG_C
				1301	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1302	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1303	requires_openssl_tls1_3
				1304	requires_openssl_3_x
				1305	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp256r1_sha256" \
				1306	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1307	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3" \
				1308	0 \
				1309	-s "Protocol is TLSv1.3" \
				1310	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1311	-s "received signature algorithm: 0x403" \
				1312	-s "got named group: ffdhe8192(0104)" \
				1313	-s "Certificate verification was skipped" \
				1314	-C "received HelloRetryRequest message"
				1315
				1316	requires_config_enabled MBEDTLS_SSL_SRV_C
				1317	requires_config_enabled MBEDTLS_DEBUG_C
				1318	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1319	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1320	requires_openssl_tls1_3
				1321	requires_openssl_3_x
				1322	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp384r1_sha384" \
				1323	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1324	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3" \
				1325	0 \
				1326	-s "Protocol is TLSv1.3" \
				1327	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1328	-s "received signature algorithm: 0x503" \
				1329	-s "got named group: ffdhe8192(0104)" \
				1330	-s "Certificate verification was skipped" \
				1331	-C "received HelloRetryRequest message"
				1332
				1333	requires_config_enabled MBEDTLS_SSL_SRV_C
				1334	requires_config_enabled MBEDTLS_DEBUG_C
				1335	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1336	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1337	requires_openssl_tls1_3
				1338	requires_openssl_3_x
				1339	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp521r1_sha512" \
				1340	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1341	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3" \
				1342	0 \
				1343	-s "Protocol is TLSv1.3" \
				1344	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1345	-s "received signature algorithm: 0x603" \
				1346	-s "got named group: ffdhe8192(0104)" \
				1347	-s "Certificate verification was skipped" \
				1348	-C "received HelloRetryRequest message"
				1349
				1350	requires_config_enabled MBEDTLS_SSL_SRV_C
				1351	requires_config_enabled MBEDTLS_DEBUG_C
				1352	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1353	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1354	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1355	requires_openssl_tls1_3
				1356	requires_openssl_3_x
				1357	run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe8192,rsa_pss_rsae_sha256" \
				1358	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1359	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3" \
				1360	0 \
				1361	-s "Protocol is TLSv1.3" \
				1362	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				1363	-s "received signature algorithm: 0x804" \
				1364	-s "got named group: ffdhe8192(0104)" \
				1365	-s "Certificate verification was skipped" \
				1366	-C "received HelloRetryRequest message"
				1367
				1368	requires_config_enabled MBEDTLS_SSL_SRV_C
				1369	requires_config_enabled MBEDTLS_DEBUG_C
				1370	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1371	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1372	requires_openssl_tls1_3
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1373	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1374	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1375	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1376	0 \
				1377	-s "Protocol is TLSv1.3" \
				1378	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1379	-s "received signature algorithm: 0x403" \
				1380	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1381	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1382	-C "received HelloRetryRequest message"
				1383
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1384	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1385	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1386	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1387	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1388	requires_openssl_tls1_3
				1389	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1390	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1391	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1392	0 \
				1393	-s "Protocol is TLSv1.3" \
				1394	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1395	-s "received signature algorithm: 0x503" \
				1396	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1397	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1398	-C "received HelloRetryRequest message"
				1399
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1400	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1401	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1402	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1403	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1404	requires_openssl_tls1_3
				1405	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1406	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1407	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1408	0 \
				1409	-s "Protocol is TLSv1.3" \
				1410	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1411	-s "received signature algorithm: 0x603" \
				1412	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1413	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1414	-C "received HelloRetryRequest message"
				1415
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1416	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1417	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1418	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1419	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1420	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1421	requires_openssl_tls1_3
				1422	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1423	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1424	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1425	0 \
				1426	-s "Protocol is TLSv1.3" \
				1427	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1428	-s "received signature algorithm: 0x804" \
				1429	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1430	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1431	-C "received HelloRetryRequest message"
				1432
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1433	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1434	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1435	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1436	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1437	requires_openssl_tls1_3
				1438	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1439	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1440	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1441	0 \
				1442	-s "Protocol is TLSv1.3" \
				1443	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1444	-s "received signature algorithm: 0x403" \
				1445	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1446	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1447	-C "received HelloRetryRequest message"
				1448
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1449	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1450	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1451	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1452	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1453	requires_openssl_tls1_3
				1454	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1455	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1456	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1457	0 \
				1458	-s "Protocol is TLSv1.3" \
				1459	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1460	-s "received signature algorithm: 0x503" \
				1461	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1462	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1463	-C "received HelloRetryRequest message"
				1464
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1465	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1466	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1467	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1468	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1469	requires_openssl_tls1_3
				1470	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1471	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1472	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1473	0 \
				1474	-s "Protocol is TLSv1.3" \
				1475	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1476	-s "received signature algorithm: 0x603" \
				1477	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1478	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1479	-C "received HelloRetryRequest message"
				1480
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1481	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1482	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1483	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1484	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1485	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1486	requires_openssl_tls1_3
				1487	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1488	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1489	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1490	0 \
				1491	-s "Protocol is TLSv1.3" \
				1492	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1493	-s "received signature algorithm: 0x804" \
				1494	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1495	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1496	-C "received HelloRetryRequest message"
				1497
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1498	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1499	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1500	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1501	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1502	requires_openssl_tls1_3
				1503	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1504	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1505	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1506	0 \
				1507	-s "Protocol is TLSv1.3" \
				1508	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1509	-s "received signature algorithm: 0x403" \
				1510	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1511	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1512	-C "received HelloRetryRequest message"
				1513
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1514	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1515	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1516	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1517	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1518	requires_openssl_tls1_3
				1519	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1520	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1521	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1522	0 \
				1523	-s "Protocol is TLSv1.3" \
				1524	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1525	-s "received signature algorithm: 0x503" \
				1526	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1527	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1528	-C "received HelloRetryRequest message"
				1529
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1530	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1531	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1532	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1533	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1534	requires_openssl_tls1_3
				1535	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1536	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1537	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1538	0 \
				1539	-s "Protocol is TLSv1.3" \
				1540	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1541	-s "received signature algorithm: 0x603" \
				1542	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1543	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1544	-C "received HelloRetryRequest message"
				1545
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1546	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1547	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1548	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1549	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1550	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1551	requires_openssl_tls1_3
				1552	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1553	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1554	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1555	0 \
				1556	-s "Protocol is TLSv1.3" \
				1557	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1558	-s "received signature algorithm: 0x804" \
				1559	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1560	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1561	-C "received HelloRetryRequest message"
				1562
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1563	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1564	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1565	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1566	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1567	requires_openssl_tls1_3
				1568	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1569	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1570	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1571	0 \
				1572	-s "Protocol is TLSv1.3" \
				1573	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1574	-s "received signature algorithm: 0x403" \
				1575	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1576	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1577	-C "received HelloRetryRequest message"
				1578
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1579	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1580	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1581	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1582	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1583	requires_openssl_tls1_3
				1584	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1585	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1586	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1587	0 \
				1588	-s "Protocol is TLSv1.3" \
				1589	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1590	-s "received signature algorithm: 0x503" \
				1591	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1592	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1593	-C "received HelloRetryRequest message"
				1594
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1595	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1596	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1597	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1598	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1599	requires_openssl_tls1_3
				1600	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1601	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1602	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1603	0 \
				1604	-s "Protocol is TLSv1.3" \
				1605	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1606	-s "received signature algorithm: 0x603" \
				1607	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1608	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1609	-C "received HelloRetryRequest message"
				1610
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1611	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1612	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1613	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1614	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1615	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1616	requires_openssl_tls1_3
				1617	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1618	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1619	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1620	0 \
				1621	-s "Protocol is TLSv1.3" \
				1622	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1623	-s "received signature algorithm: 0x804" \
				1624	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1625	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1626	-C "received HelloRetryRequest message"
				1627
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1628	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1629	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1630	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1631	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1632	requires_openssl_tls1_3
				1633	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1634	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1635	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1636	0 \
				1637	-s "Protocol is TLSv1.3" \
				1638	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1639	-s "received signature algorithm: 0x403" \
				1640	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1641	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1642	-C "received HelloRetryRequest message"
				1643
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1644	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1645	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1646	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1647	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1648	requires_openssl_tls1_3
				1649	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1650	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1651	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1652	0 \
				1653	-s "Protocol is TLSv1.3" \
				1654	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1655	-s "received signature algorithm: 0x503" \
				1656	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1657	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1658	-C "received HelloRetryRequest message"
				1659
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1660	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1661	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1662	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1663	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1664	requires_openssl_tls1_3
				1665	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1666	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1667	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1668	0 \
				1669	-s "Protocol is TLSv1.3" \
				1670	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1671	-s "received signature algorithm: 0x603" \
				1672	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1673	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1674	-C "received HelloRetryRequest message"
				1675
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1676	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1677	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1678	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1679	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1680	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1681	requires_openssl_tls1_3
				1682	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1683	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	1684	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1685	0 \
				1686	-s "Protocol is TLSv1.3" \
				1687	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1688	-s "received signature algorithm: 0x804" \
				1689	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	1690	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1691	-C "received HelloRetryRequest message"
				1692
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	1693	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	1694	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	1695	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	1696	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1697	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	1698	requires_openssl_3_x
				1699	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				1700	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1701	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
				1702	0 \
				1703	-s "Protocol is TLSv1.3" \
				1704	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1705	-s "received signature algorithm: 0x403" \
				1706	-s "got named group: ffdhe2048(0100)" \
				1707	-s "Certificate verification was skipped" \
				1708	-C "received HelloRetryRequest message"
				1709
				1710	requires_config_enabled MBEDTLS_SSL_SRV_C
				1711	requires_config_enabled MBEDTLS_DEBUG_C
				1712	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1713	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1714	requires_openssl_tls1_3
				1715	requires_openssl_3_x
				1716	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				1717	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1718	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
				1719	0 \
				1720	-s "Protocol is TLSv1.3" \
				1721	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1722	-s "received signature algorithm: 0x503" \
				1723	-s "got named group: ffdhe2048(0100)" \
				1724	-s "Certificate verification was skipped" \
				1725	-C "received HelloRetryRequest message"
				1726
				1727	requires_config_enabled MBEDTLS_SSL_SRV_C
				1728	requires_config_enabled MBEDTLS_DEBUG_C
				1729	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1730	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1731	requires_openssl_tls1_3
				1732	requires_openssl_3_x
				1733	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				1734	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1735	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
				1736	0 \
				1737	-s "Protocol is TLSv1.3" \
				1738	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1739	-s "received signature algorithm: 0x603" \
				1740	-s "got named group: ffdhe2048(0100)" \
				1741	-s "Certificate verification was skipped" \
				1742	-C "received HelloRetryRequest message"
				1743
				1744	requires_config_enabled MBEDTLS_SSL_SRV_C
				1745	requires_config_enabled MBEDTLS_DEBUG_C
				1746	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1747	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1748	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1749	requires_openssl_tls1_3
				1750	requires_openssl_3_x
				1751	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				1752	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1753	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
				1754	0 \
				1755	-s "Protocol is TLSv1.3" \
				1756	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1757	-s "received signature algorithm: 0x804" \
				1758	-s "got named group: ffdhe2048(0100)" \
				1759	-s "Certificate verification was skipped" \
				1760	-C "received HelloRetryRequest message"
				1761
				1762	requires_config_enabled MBEDTLS_SSL_SRV_C
				1763	requires_config_enabled MBEDTLS_DEBUG_C
				1764	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1765	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1766	requires_openssl_tls1_3
				1767	requires_openssl_3_x
				1768	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				1769	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1770	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3" \
				1771	0 \
				1772	-s "Protocol is TLSv1.3" \
				1773	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1774	-s "received signature algorithm: 0x403" \
				1775	-s "got named group: ffdhe3072(0101)" \
				1776	-s "Certificate verification was skipped" \
				1777	-C "received HelloRetryRequest message"
				1778
				1779	requires_config_enabled MBEDTLS_SSL_SRV_C
				1780	requires_config_enabled MBEDTLS_DEBUG_C
				1781	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1782	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1783	requires_openssl_tls1_3
				1784	requires_openssl_3_x
				1785	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				1786	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1787	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3" \
				1788	0 \
				1789	-s "Protocol is TLSv1.3" \
				1790	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1791	-s "received signature algorithm: 0x503" \
				1792	-s "got named group: ffdhe3072(0101)" \
				1793	-s "Certificate verification was skipped" \
				1794	-C "received HelloRetryRequest message"
				1795
				1796	requires_config_enabled MBEDTLS_SSL_SRV_C
				1797	requires_config_enabled MBEDTLS_DEBUG_C
				1798	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1799	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1800	requires_openssl_tls1_3
				1801	requires_openssl_3_x
				1802	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				1803	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1804	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3" \
				1805	0 \
				1806	-s "Protocol is TLSv1.3" \
				1807	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1808	-s "received signature algorithm: 0x603" \
				1809	-s "got named group: ffdhe3072(0101)" \
				1810	-s "Certificate verification was skipped" \
				1811	-C "received HelloRetryRequest message"
				1812
				1813	requires_config_enabled MBEDTLS_SSL_SRV_C
				1814	requires_config_enabled MBEDTLS_DEBUG_C
				1815	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1816	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1817	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1818	requires_openssl_tls1_3
				1819	requires_openssl_3_x
				1820	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				1821	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1822	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3" \
				1823	0 \
				1824	-s "Protocol is TLSv1.3" \
				1825	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1826	-s "received signature algorithm: 0x804" \
				1827	-s "got named group: ffdhe3072(0101)" \
				1828	-s "Certificate verification was skipped" \
				1829	-C "received HelloRetryRequest message"
				1830
				1831	requires_config_enabled MBEDTLS_SSL_SRV_C
				1832	requires_config_enabled MBEDTLS_DEBUG_C
				1833	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1834	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1835	requires_openssl_tls1_3
				1836	requires_openssl_3_x
				1837	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				1838	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1839	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3" \
				1840	0 \
				1841	-s "Protocol is TLSv1.3" \
				1842	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1843	-s "received signature algorithm: 0x403" \
				1844	-s "got named group: ffdhe4096(0102)" \
				1845	-s "Certificate verification was skipped" \
				1846	-C "received HelloRetryRequest message"
				1847
				1848	requires_config_enabled MBEDTLS_SSL_SRV_C
				1849	requires_config_enabled MBEDTLS_DEBUG_C
				1850	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1851	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1852	requires_openssl_tls1_3
				1853	requires_openssl_3_x
				1854	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				1855	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1856	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3" \
				1857	0 \
				1858	-s "Protocol is TLSv1.3" \
				1859	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1860	-s "received signature algorithm: 0x503" \
				1861	-s "got named group: ffdhe4096(0102)" \
				1862	-s "Certificate verification was skipped" \
				1863	-C "received HelloRetryRequest message"
				1864
				1865	requires_config_enabled MBEDTLS_SSL_SRV_C
				1866	requires_config_enabled MBEDTLS_DEBUG_C
				1867	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1868	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1869	requires_openssl_tls1_3
				1870	requires_openssl_3_x
				1871	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				1872	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1873	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3" \
				1874	0 \
				1875	-s "Protocol is TLSv1.3" \
				1876	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1877	-s "received signature algorithm: 0x603" \
				1878	-s "got named group: ffdhe4096(0102)" \
				1879	-s "Certificate verification was skipped" \
				1880	-C "received HelloRetryRequest message"
				1881
				1882	requires_config_enabled MBEDTLS_SSL_SRV_C
				1883	requires_config_enabled MBEDTLS_DEBUG_C
				1884	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1885	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1886	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1887	requires_openssl_tls1_3
				1888	requires_openssl_3_x
				1889	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				1890	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1891	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3" \
				1892	0 \
				1893	-s "Protocol is TLSv1.3" \
				1894	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1895	-s "received signature algorithm: 0x804" \
				1896	-s "got named group: ffdhe4096(0102)" \
				1897	-s "Certificate verification was skipped" \
				1898	-C "received HelloRetryRequest message"
				1899
				1900	requires_config_enabled MBEDTLS_SSL_SRV_C
				1901	requires_config_enabled MBEDTLS_DEBUG_C
				1902	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1903	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1904	requires_openssl_tls1_3
				1905	requires_openssl_3_x
				1906	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				1907	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1908	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3" \
				1909	0 \
				1910	-s "Protocol is TLSv1.3" \
				1911	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1912	-s "received signature algorithm: 0x403" \
				1913	-s "got named group: ffdhe6144(0103)" \
				1914	-s "Certificate verification was skipped" \
				1915	-C "received HelloRetryRequest message"
				1916
				1917	requires_config_enabled MBEDTLS_SSL_SRV_C
				1918	requires_config_enabled MBEDTLS_DEBUG_C
				1919	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1920	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1921	requires_openssl_tls1_3
				1922	requires_openssl_3_x
				1923	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				1924	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1925	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3" \
				1926	0 \
				1927	-s "Protocol is TLSv1.3" \
				1928	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1929	-s "received signature algorithm: 0x503" \
				1930	-s "got named group: ffdhe6144(0103)" \
				1931	-s "Certificate verification was skipped" \
				1932	-C "received HelloRetryRequest message"
				1933
				1934	requires_config_enabled MBEDTLS_SSL_SRV_C
				1935	requires_config_enabled MBEDTLS_DEBUG_C
				1936	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1937	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1938	requires_openssl_tls1_3
				1939	requires_openssl_3_x
				1940	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				1941	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1942	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3" \
				1943	0 \
				1944	-s "Protocol is TLSv1.3" \
				1945	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1946	-s "received signature algorithm: 0x603" \
				1947	-s "got named group: ffdhe6144(0103)" \
				1948	-s "Certificate verification was skipped" \
				1949	-C "received HelloRetryRequest message"
				1950
				1951	requires_config_enabled MBEDTLS_SSL_SRV_C
				1952	requires_config_enabled MBEDTLS_DEBUG_C
				1953	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1954	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1955	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				1956	requires_openssl_tls1_3
				1957	requires_openssl_3_x
				1958	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				1959	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1960	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3" \
				1961	0 \
				1962	-s "Protocol is TLSv1.3" \
				1963	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1964	-s "received signature algorithm: 0x804" \
				1965	-s "got named group: ffdhe6144(0103)" \
				1966	-s "Certificate verification was skipped" \
				1967	-C "received HelloRetryRequest message"
				1968
				1969	requires_config_enabled MBEDTLS_SSL_SRV_C
				1970	requires_config_enabled MBEDTLS_DEBUG_C
				1971	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1972	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1973	requires_openssl_tls1_3
				1974	requires_openssl_3_x
				1975	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				1976	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1977	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3" \
				1978	0 \
				1979	-s "Protocol is TLSv1.3" \
				1980	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1981	-s "received signature algorithm: 0x403" \
				1982	-s "got named group: ffdhe8192(0104)" \
				1983	-s "Certificate verification was skipped" \
				1984	-C "received HelloRetryRequest message"
				1985
				1986	requires_config_enabled MBEDTLS_SSL_SRV_C
				1987	requires_config_enabled MBEDTLS_DEBUG_C
				1988	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1989	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1990	requires_openssl_tls1_3
				1991	requires_openssl_3_x
				1992	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				1993	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				1994	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3" \
				1995	0 \
				1996	-s "Protocol is TLSv1.3" \
				1997	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				1998	-s "received signature algorithm: 0x503" \
				1999	-s "got named group: ffdhe8192(0104)" \
				2000	-s "Certificate verification was skipped" \
				2001	-C "received HelloRetryRequest message"
				2002
				2003	requires_config_enabled MBEDTLS_SSL_SRV_C
				2004	requires_config_enabled MBEDTLS_DEBUG_C
				2005	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2006	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2007	requires_openssl_tls1_3
				2008	requires_openssl_3_x
				2009	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				2010	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2011	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3" \
				2012	0 \
				2013	-s "Protocol is TLSv1.3" \
				2014	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				2015	-s "received signature algorithm: 0x603" \
				2016	-s "got named group: ffdhe8192(0104)" \
				2017	-s "Certificate verification was skipped" \
				2018	-C "received HelloRetryRequest message"
				2019
				2020	requires_config_enabled MBEDTLS_SSL_SRV_C
				2021	requires_config_enabled MBEDTLS_DEBUG_C
				2022	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2023	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2024	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2025	requires_openssl_tls1_3
				2026	requires_openssl_3_x
				2027	run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				2028	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2029	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3" \
				2030	0 \
				2031	-s "Protocol is TLSv1.3" \
				2032	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				2033	-s "received signature algorithm: 0x804" \
				2034	-s "got named group: ffdhe8192(0104)" \
				2035	-s "Certificate verification was skipped" \
				2036	-C "received HelloRetryRequest message"
				2037
				2038	requires_config_enabled MBEDTLS_SSL_SRV_C
				2039	requires_config_enabled MBEDTLS_DEBUG_C
				2040	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2041	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2042	requires_openssl_tls1_3
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2043	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2044	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2045	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2046	0 \
				2047	-s "Protocol is TLSv1.3" \
				2048	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2049	-s "received signature algorithm: 0x403" \
				2050	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2051	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2052	-C "received HelloRetryRequest message"
				2053
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2054	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2055	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2056	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2057	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2058	requires_openssl_tls1_3
				2059	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2060	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2061	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2062	0 \
				2063	-s "Protocol is TLSv1.3" \
				2064	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2065	-s "received signature algorithm: 0x503" \
				2066	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2067	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2068	-C "received HelloRetryRequest message"
				2069
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2070	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2071	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2072	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2073	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2074	requires_openssl_tls1_3
				2075	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2076	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2077	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2078	0 \
				2079	-s "Protocol is TLSv1.3" \
				2080	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2081	-s "received signature algorithm: 0x603" \
				2082	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2083	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2084	-C "received HelloRetryRequest message"
				2085
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2086	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2087	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2088	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2089	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2090	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2091	requires_openssl_tls1_3
				2092	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2093	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2094	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2095	0 \
				2096	-s "Protocol is TLSv1.3" \
				2097	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2098	-s "received signature algorithm: 0x804" \
				2099	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2100	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2101	-C "received HelloRetryRequest message"
				2102
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2103	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2104	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2105	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2106	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2107	requires_openssl_tls1_3
				2108	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2109	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2110	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2111	0 \
				2112	-s "Protocol is TLSv1.3" \
				2113	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2114	-s "received signature algorithm: 0x403" \
				2115	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2116	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2117	-C "received HelloRetryRequest message"
				2118
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2119	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2120	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2121	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2122	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2123	requires_openssl_tls1_3
				2124	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2125	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2126	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2127	0 \
				2128	-s "Protocol is TLSv1.3" \
				2129	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2130	-s "received signature algorithm: 0x503" \
				2131	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2132	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2133	-C "received HelloRetryRequest message"
				2134
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2135	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2136	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2137	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2138	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2139	requires_openssl_tls1_3
				2140	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2141	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2142	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2143	0 \
				2144	-s "Protocol is TLSv1.3" \
				2145	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2146	-s "received signature algorithm: 0x603" \
				2147	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2148	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2149	-C "received HelloRetryRequest message"
				2150
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2151	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2152	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2153	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2154	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2155	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2156	requires_openssl_tls1_3
				2157	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2158	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2159	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2160	0 \
				2161	-s "Protocol is TLSv1.3" \
				2162	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2163	-s "received signature algorithm: 0x804" \
				2164	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2165	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2166	-C "received HelloRetryRequest message"
				2167
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2168	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2169	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2170	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2171	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2172	requires_openssl_tls1_3
				2173	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2174	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2175	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2176	0 \
				2177	-s "Protocol is TLSv1.3" \
				2178	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2179	-s "received signature algorithm: 0x403" \
				2180	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2181	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2182	-C "received HelloRetryRequest message"
				2183
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2184	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2185	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2186	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2187	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2188	requires_openssl_tls1_3
				2189	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2190	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2191	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2192	0 \
				2193	-s "Protocol is TLSv1.3" \
				2194	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2195	-s "received signature algorithm: 0x503" \
				2196	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2197	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2198	-C "received HelloRetryRequest message"
				2199
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2200	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2201	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2202	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2203	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2204	requires_openssl_tls1_3
				2205	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2206	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2207	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2208	0 \
				2209	-s "Protocol is TLSv1.3" \
				2210	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2211	-s "received signature algorithm: 0x603" \
				2212	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2213	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2214	-C "received HelloRetryRequest message"
				2215
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2216	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2217	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2218	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2219	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2220	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2221	requires_openssl_tls1_3
				2222	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2223	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2224	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2225	0 \
				2226	-s "Protocol is TLSv1.3" \
				2227	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2228	-s "received signature algorithm: 0x804" \
				2229	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2230	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2231	-C "received HelloRetryRequest message"
				2232
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2233	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2234	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2235	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2236	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2237	requires_openssl_tls1_3
				2238	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2239	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2240	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2241	0 \
				2242	-s "Protocol is TLSv1.3" \
				2243	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2244	-s "received signature algorithm: 0x403" \
				2245	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2246	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2247	-C "received HelloRetryRequest message"
				2248
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2249	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2250	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2251	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2252	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2253	requires_openssl_tls1_3
				2254	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2255	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2256	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2257	0 \
				2258	-s "Protocol is TLSv1.3" \
				2259	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2260	-s "received signature algorithm: 0x503" \
				2261	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2262	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2263	-C "received HelloRetryRequest message"
				2264
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2265	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2266	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2267	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2268	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2269	requires_openssl_tls1_3
				2270	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2271	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2272	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2273	0 \
				2274	-s "Protocol is TLSv1.3" \
				2275	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2276	-s "received signature algorithm: 0x603" \
				2277	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2278	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2279	-C "received HelloRetryRequest message"
				2280
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2281	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2282	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2283	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2284	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2285	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2286	requires_openssl_tls1_3
				2287	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2288	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2289	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2290	0 \
				2291	-s "Protocol is TLSv1.3" \
				2292	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2293	-s "received signature algorithm: 0x804" \
				2294	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2295	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2296	-C "received HelloRetryRequest message"
				2297
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2298	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2299	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2300	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2301	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2302	requires_openssl_tls1_3
				2303	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2304	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2305	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2306	0 \
				2307	-s "Protocol is TLSv1.3" \
				2308	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2309	-s "received signature algorithm: 0x403" \
				2310	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2311	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2312	-C "received HelloRetryRequest message"
				2313
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2314	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2315	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2316	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2317	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2318	requires_openssl_tls1_3
				2319	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2320	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2321	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2322	0 \
				2323	-s "Protocol is TLSv1.3" \
				2324	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2325	-s "received signature algorithm: 0x503" \
				2326	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2327	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2328	-C "received HelloRetryRequest message"
				2329
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2330	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2331	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2332	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2333	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2334	requires_openssl_tls1_3
				2335	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2336	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2337	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2338	0 \
				2339	-s "Protocol is TLSv1.3" \
				2340	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2341	-s "received signature algorithm: 0x603" \
				2342	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2343	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2344	-C "received HelloRetryRequest message"
				2345
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2346	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2347	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2348	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2349	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2350	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2351	requires_openssl_tls1_3
				2352	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2353	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2354	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2355	0 \
				2356	-s "Protocol is TLSv1.3" \
				2357	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2358	-s "received signature algorithm: 0x804" \
				2359	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2360	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2361	-C "received HelloRetryRequest message"
				2362
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2363	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2364	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2365	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2366	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2367	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	2368	requires_openssl_3_x
				2369	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				2370	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2371	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
				2372	0 \
				2373	-s "Protocol is TLSv1.3" \
				2374	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2375	-s "received signature algorithm: 0x403" \
				2376	-s "got named group: ffdhe2048(0100)" \
				2377	-s "Certificate verification was skipped" \
				2378	-C "received HelloRetryRequest message"
				2379
				2380	requires_config_enabled MBEDTLS_SSL_SRV_C
				2381	requires_config_enabled MBEDTLS_DEBUG_C
				2382	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2383	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2384	requires_openssl_tls1_3
				2385	requires_openssl_3_x
				2386	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				2387	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2388	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
				2389	0 \
				2390	-s "Protocol is TLSv1.3" \
				2391	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2392	-s "received signature algorithm: 0x503" \
				2393	-s "got named group: ffdhe2048(0100)" \
				2394	-s "Certificate verification was skipped" \
				2395	-C "received HelloRetryRequest message"
				2396
				2397	requires_config_enabled MBEDTLS_SSL_SRV_C
				2398	requires_config_enabled MBEDTLS_DEBUG_C
				2399	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2400	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2401	requires_openssl_tls1_3
				2402	requires_openssl_3_x
				2403	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				2404	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2405	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
				2406	0 \
				2407	-s "Protocol is TLSv1.3" \
				2408	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2409	-s "received signature algorithm: 0x603" \
				2410	-s "got named group: ffdhe2048(0100)" \
				2411	-s "Certificate verification was skipped" \
				2412	-C "received HelloRetryRequest message"
				2413
				2414	requires_config_enabled MBEDTLS_SSL_SRV_C
				2415	requires_config_enabled MBEDTLS_DEBUG_C
				2416	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2417	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2418	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2419	requires_openssl_tls1_3
				2420	requires_openssl_3_x
				2421	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				2422	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2423	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
				2424	0 \
				2425	-s "Protocol is TLSv1.3" \
				2426	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2427	-s "received signature algorithm: 0x804" \
				2428	-s "got named group: ffdhe2048(0100)" \
				2429	-s "Certificate verification was skipped" \
				2430	-C "received HelloRetryRequest message"
				2431
				2432	requires_config_enabled MBEDTLS_SSL_SRV_C
				2433	requires_config_enabled MBEDTLS_DEBUG_C
				2434	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2435	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2436	requires_openssl_tls1_3
				2437	requires_openssl_3_x
				2438	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				2439	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2440	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3" \
				2441	0 \
				2442	-s "Protocol is TLSv1.3" \
				2443	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2444	-s "received signature algorithm: 0x403" \
				2445	-s "got named group: ffdhe3072(0101)" \
				2446	-s "Certificate verification was skipped" \
				2447	-C "received HelloRetryRequest message"
				2448
				2449	requires_config_enabled MBEDTLS_SSL_SRV_C
				2450	requires_config_enabled MBEDTLS_DEBUG_C
				2451	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2452	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2453	requires_openssl_tls1_3
				2454	requires_openssl_3_x
				2455	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				2456	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2457	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3" \
				2458	0 \
				2459	-s "Protocol is TLSv1.3" \
				2460	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2461	-s "received signature algorithm: 0x503" \
				2462	-s "got named group: ffdhe3072(0101)" \
				2463	-s "Certificate verification was skipped" \
				2464	-C "received HelloRetryRequest message"
				2465
				2466	requires_config_enabled MBEDTLS_SSL_SRV_C
				2467	requires_config_enabled MBEDTLS_DEBUG_C
				2468	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2469	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2470	requires_openssl_tls1_3
				2471	requires_openssl_3_x
				2472	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				2473	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2474	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3" \
				2475	0 \
				2476	-s "Protocol is TLSv1.3" \
				2477	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2478	-s "received signature algorithm: 0x603" \
				2479	-s "got named group: ffdhe3072(0101)" \
				2480	-s "Certificate verification was skipped" \
				2481	-C "received HelloRetryRequest message"
				2482
				2483	requires_config_enabled MBEDTLS_SSL_SRV_C
				2484	requires_config_enabled MBEDTLS_DEBUG_C
				2485	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2486	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2487	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2488	requires_openssl_tls1_3
				2489	requires_openssl_3_x
				2490	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				2491	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2492	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3" \
				2493	0 \
				2494	-s "Protocol is TLSv1.3" \
				2495	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2496	-s "received signature algorithm: 0x804" \
				2497	-s "got named group: ffdhe3072(0101)" \
				2498	-s "Certificate verification was skipped" \
				2499	-C "received HelloRetryRequest message"
				2500
				2501	requires_config_enabled MBEDTLS_SSL_SRV_C
				2502	requires_config_enabled MBEDTLS_DEBUG_C
				2503	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2504	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2505	requires_openssl_tls1_3
				2506	requires_openssl_3_x
				2507	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				2508	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2509	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3" \
				2510	0 \
				2511	-s "Protocol is TLSv1.3" \
				2512	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2513	-s "received signature algorithm: 0x403" \
				2514	-s "got named group: ffdhe4096(0102)" \
				2515	-s "Certificate verification was skipped" \
				2516	-C "received HelloRetryRequest message"
				2517
				2518	requires_config_enabled MBEDTLS_SSL_SRV_C
				2519	requires_config_enabled MBEDTLS_DEBUG_C
				2520	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2521	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2522	requires_openssl_tls1_3
				2523	requires_openssl_3_x
				2524	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				2525	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2526	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3" \
				2527	0 \
				2528	-s "Protocol is TLSv1.3" \
				2529	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2530	-s "received signature algorithm: 0x503" \
				2531	-s "got named group: ffdhe4096(0102)" \
				2532	-s "Certificate verification was skipped" \
				2533	-C "received HelloRetryRequest message"
				2534
				2535	requires_config_enabled MBEDTLS_SSL_SRV_C
				2536	requires_config_enabled MBEDTLS_DEBUG_C
				2537	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2538	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2539	requires_openssl_tls1_3
				2540	requires_openssl_3_x
				2541	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				2542	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2543	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3" \
				2544	0 \
				2545	-s "Protocol is TLSv1.3" \
				2546	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2547	-s "received signature algorithm: 0x603" \
				2548	-s "got named group: ffdhe4096(0102)" \
				2549	-s "Certificate verification was skipped" \
				2550	-C "received HelloRetryRequest message"
				2551
				2552	requires_config_enabled MBEDTLS_SSL_SRV_C
				2553	requires_config_enabled MBEDTLS_DEBUG_C
				2554	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2555	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2556	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2557	requires_openssl_tls1_3
				2558	requires_openssl_3_x
				2559	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				2560	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2561	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3" \
				2562	0 \
				2563	-s "Protocol is TLSv1.3" \
				2564	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2565	-s "received signature algorithm: 0x804" \
				2566	-s "got named group: ffdhe4096(0102)" \
				2567	-s "Certificate verification was skipped" \
				2568	-C "received HelloRetryRequest message"
				2569
				2570	requires_config_enabled MBEDTLS_SSL_SRV_C
				2571	requires_config_enabled MBEDTLS_DEBUG_C
				2572	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2573	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2574	requires_openssl_tls1_3
				2575	requires_openssl_3_x
				2576	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				2577	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2578	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3" \
				2579	0 \
				2580	-s "Protocol is TLSv1.3" \
				2581	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2582	-s "received signature algorithm: 0x403" \
				2583	-s "got named group: ffdhe6144(0103)" \
				2584	-s "Certificate verification was skipped" \
				2585	-C "received HelloRetryRequest message"
				2586
				2587	requires_config_enabled MBEDTLS_SSL_SRV_C
				2588	requires_config_enabled MBEDTLS_DEBUG_C
				2589	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2590	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2591	requires_openssl_tls1_3
				2592	requires_openssl_3_x
				2593	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				2594	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2595	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3" \
				2596	0 \
				2597	-s "Protocol is TLSv1.3" \
				2598	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2599	-s "received signature algorithm: 0x503" \
				2600	-s "got named group: ffdhe6144(0103)" \
				2601	-s "Certificate verification was skipped" \
				2602	-C "received HelloRetryRequest message"
				2603
				2604	requires_config_enabled MBEDTLS_SSL_SRV_C
				2605	requires_config_enabled MBEDTLS_DEBUG_C
				2606	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2607	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2608	requires_openssl_tls1_3
				2609	requires_openssl_3_x
				2610	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				2611	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2612	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3" \
				2613	0 \
				2614	-s "Protocol is TLSv1.3" \
				2615	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2616	-s "received signature algorithm: 0x603" \
				2617	-s "got named group: ffdhe6144(0103)" \
				2618	-s "Certificate verification was skipped" \
				2619	-C "received HelloRetryRequest message"
				2620
				2621	requires_config_enabled MBEDTLS_SSL_SRV_C
				2622	requires_config_enabled MBEDTLS_DEBUG_C
				2623	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2624	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2625	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2626	requires_openssl_tls1_3
				2627	requires_openssl_3_x
				2628	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				2629	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2630	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3" \
				2631	0 \
				2632	-s "Protocol is TLSv1.3" \
				2633	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2634	-s "received signature algorithm: 0x804" \
				2635	-s "got named group: ffdhe6144(0103)" \
				2636	-s "Certificate verification was skipped" \
				2637	-C "received HelloRetryRequest message"
				2638
				2639	requires_config_enabled MBEDTLS_SSL_SRV_C
				2640	requires_config_enabled MBEDTLS_DEBUG_C
				2641	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2642	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2643	requires_openssl_tls1_3
				2644	requires_openssl_3_x
				2645	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				2646	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2647	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3" \
				2648	0 \
				2649	-s "Protocol is TLSv1.3" \
				2650	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2651	-s "received signature algorithm: 0x403" \
				2652	-s "got named group: ffdhe8192(0104)" \
				2653	-s "Certificate verification was skipped" \
				2654	-C "received HelloRetryRequest message"
				2655
				2656	requires_config_enabled MBEDTLS_SSL_SRV_C
				2657	requires_config_enabled MBEDTLS_DEBUG_C
				2658	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2659	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2660	requires_openssl_tls1_3
				2661	requires_openssl_3_x
				2662	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				2663	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2664	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3" \
				2665	0 \
				2666	-s "Protocol is TLSv1.3" \
				2667	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2668	-s "received signature algorithm: 0x503" \
				2669	-s "got named group: ffdhe8192(0104)" \
				2670	-s "Certificate verification was skipped" \
				2671	-C "received HelloRetryRequest message"
				2672
				2673	requires_config_enabled MBEDTLS_SSL_SRV_C
				2674	requires_config_enabled MBEDTLS_DEBUG_C
				2675	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2676	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2677	requires_openssl_tls1_3
				2678	requires_openssl_3_x
				2679	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				2680	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2681	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3" \
				2682	0 \
				2683	-s "Protocol is TLSv1.3" \
				2684	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2685	-s "received signature algorithm: 0x603" \
				2686	-s "got named group: ffdhe8192(0104)" \
				2687	-s "Certificate verification was skipped" \
				2688	-C "received HelloRetryRequest message"
				2689
				2690	requires_config_enabled MBEDTLS_SSL_SRV_C
				2691	requires_config_enabled MBEDTLS_DEBUG_C
				2692	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2693	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2694	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2695	requires_openssl_tls1_3
				2696	requires_openssl_3_x
				2697	run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				2698	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				2699	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3" \
				2700	0 \
				2701	-s "Protocol is TLSv1.3" \
				2702	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				2703	-s "received signature algorithm: 0x804" \
				2704	-s "got named group: ffdhe8192(0104)" \
				2705	-s "Certificate verification was skipped" \
				2706	-C "received HelloRetryRequest message"
				2707
				2708	requires_config_enabled MBEDTLS_SSL_SRV_C
				2709	requires_config_enabled MBEDTLS_DEBUG_C
				2710	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2711	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2712	requires_openssl_tls1_3
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2713	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2714	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2715	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2716	0 \
				2717	-s "Protocol is TLSv1.3" \
				2718	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2719	-s "received signature algorithm: 0x403" \
				2720	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2721	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2722	-C "received HelloRetryRequest message"
				2723
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2724	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2725	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2726	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2727	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2728	requires_openssl_tls1_3
				2729	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2730	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2731	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2732	0 \
				2733	-s "Protocol is TLSv1.3" \
				2734	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2735	-s "received signature algorithm: 0x503" \
				2736	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2737	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2738	-C "received HelloRetryRequest message"
				2739
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2740	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2741	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2742	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2743	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2744	requires_openssl_tls1_3
				2745	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2746	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2747	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2748	0 \
				2749	-s "Protocol is TLSv1.3" \
				2750	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2751	-s "received signature algorithm: 0x603" \
				2752	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2753	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2754	-C "received HelloRetryRequest message"
				2755
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2756	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2757	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2758	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2759	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2760	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2761	requires_openssl_tls1_3
				2762	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2763	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2764	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2765	0 \
				2766	-s "Protocol is TLSv1.3" \
				2767	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2768	-s "received signature algorithm: 0x804" \
				2769	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2770	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2771	-C "received HelloRetryRequest message"
				2772
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2773	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2774	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2775	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2776	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2777	requires_openssl_tls1_3
				2778	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2779	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2780	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2781	0 \
				2782	-s "Protocol is TLSv1.3" \
				2783	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2784	-s "received signature algorithm: 0x403" \
				2785	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2786	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2787	-C "received HelloRetryRequest message"
				2788
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2789	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2790	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2791	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2792	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2793	requires_openssl_tls1_3
				2794	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2795	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2796	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2797	0 \
				2798	-s "Protocol is TLSv1.3" \
				2799	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2800	-s "received signature algorithm: 0x503" \
				2801	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2802	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2803	-C "received HelloRetryRequest message"
				2804
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2805	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2806	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2807	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2808	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2809	requires_openssl_tls1_3
				2810	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2811	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2812	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2813	0 \
				2814	-s "Protocol is TLSv1.3" \
				2815	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2816	-s "received signature algorithm: 0x603" \
				2817	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2818	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2819	-C "received HelloRetryRequest message"
				2820
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2821	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2822	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2823	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2824	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2825	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2826	requires_openssl_tls1_3
				2827	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2828	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2829	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2830	0 \
				2831	-s "Protocol is TLSv1.3" \
				2832	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2833	-s "received signature algorithm: 0x804" \
				2834	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2835	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2836	-C "received HelloRetryRequest message"
				2837
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2838	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2839	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2840	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2841	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2842	requires_openssl_tls1_3
				2843	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2844	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2845	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2846	0 \
				2847	-s "Protocol is TLSv1.3" \
				2848	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2849	-s "received signature algorithm: 0x403" \
				2850	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2851	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2852	-C "received HelloRetryRequest message"
				2853
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2854	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2855	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2856	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2857	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2858	requires_openssl_tls1_3
				2859	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2860	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2861	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2862	0 \
				2863	-s "Protocol is TLSv1.3" \
				2864	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2865	-s "received signature algorithm: 0x503" \
				2866	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2867	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2868	-C "received HelloRetryRequest message"
				2869
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2870	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2871	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2872	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2873	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2874	requires_openssl_tls1_3
				2875	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2876	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2877	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2878	0 \
				2879	-s "Protocol is TLSv1.3" \
				2880	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2881	-s "received signature algorithm: 0x603" \
				2882	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2883	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2884	-C "received HelloRetryRequest message"
				2885
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2886	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2887	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2888	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2889	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2890	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2891	requires_openssl_tls1_3
				2892	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2893	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2894	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2895	0 \
				2896	-s "Protocol is TLSv1.3" \
				2897	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2898	-s "received signature algorithm: 0x804" \
				2899	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2900	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2901	-C "received HelloRetryRequest message"
				2902
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2903	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2904	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2905	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2906	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2907	requires_openssl_tls1_3
				2908	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2909	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2910	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2911	0 \
				2912	-s "Protocol is TLSv1.3" \
				2913	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2914	-s "received signature algorithm: 0x403" \
				2915	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2916	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2917	-C "received HelloRetryRequest message"
				2918
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2919	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2920	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2921	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2922	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2923	requires_openssl_tls1_3
				2924	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2925	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2926	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2927	0 \
				2928	-s "Protocol is TLSv1.3" \
				2929	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2930	-s "received signature algorithm: 0x503" \
				2931	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2932	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2933	-C "received HelloRetryRequest message"
				2934
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2935	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2936	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2937	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2938	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2939	requires_openssl_tls1_3
				2940	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2941	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2942	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2943	0 \
				2944	-s "Protocol is TLSv1.3" \
				2945	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2946	-s "received signature algorithm: 0x603" \
				2947	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2948	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2949	-C "received HelloRetryRequest message"
				2950
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2951	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2952	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2953	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2954	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2955	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				2956	requires_openssl_tls1_3
				2957	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2958	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2959	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2960	0 \
				2961	-s "Protocol is TLSv1.3" \
				2962	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2963	-s "received signature algorithm: 0x804" \
				2964	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2965	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2966	-C "received HelloRetryRequest message"
				2967
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2968	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2969	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2970	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2971	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2972	requires_openssl_tls1_3
				2973	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2974	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2975	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2976	0 \
				2977	-s "Protocol is TLSv1.3" \
				2978	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2979	-s "received signature algorithm: 0x403" \
				2980	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2981	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2982	-C "received HelloRetryRequest message"
				2983
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	2984	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	2985	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	2986	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2987	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2988	requires_openssl_tls1_3
				2989	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2990	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	2991	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2992	0 \
				2993	-s "Protocol is TLSv1.3" \
				2994	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				2995	-s "received signature algorithm: 0x503" \
				2996	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	2997	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	2998	-C "received HelloRetryRequest message"
				2999
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3000	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3001	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3002	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3003	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3004	requires_openssl_tls1_3
				3005	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3006	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3007	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3008	0 \
				3009	-s "Protocol is TLSv1.3" \
				3010	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3011	-s "received signature algorithm: 0x603" \
				3012	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3013	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3014	-C "received HelloRetryRequest message"
				3015
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3016	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3017	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3018	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3019	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3020	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3021	requires_openssl_tls1_3
				3022	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3023	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3024	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3025	0 \
				3026	-s "Protocol is TLSv1.3" \
				3027	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3028	-s "received signature algorithm: 0x804" \
				3029	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3030	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3031	-C "received HelloRetryRequest message"
				3032
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3033	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3034	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3035	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3036	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	3037	requires_openssl_tls1_3
				3038	requires_openssl_3_x
				3039	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				3040	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3041	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
				3042	0 \
				3043	-s "Protocol is TLSv1.3" \
				3044	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3045	-s "received signature algorithm: 0x403" \
				3046	-s "got named group: ffdhe2048(0100)" \
				3047	-s "Certificate verification was skipped" \
				3048	-C "received HelloRetryRequest message"
				3049
				3050	requires_config_enabled MBEDTLS_SSL_SRV_C
				3051	requires_config_enabled MBEDTLS_DEBUG_C
				3052	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3053	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3054	requires_openssl_tls1_3
				3055	requires_openssl_3_x
				3056	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				3057	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3058	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
				3059	0 \
				3060	-s "Protocol is TLSv1.3" \
				3061	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3062	-s "received signature algorithm: 0x503" \
				3063	-s "got named group: ffdhe2048(0100)" \
				3064	-s "Certificate verification was skipped" \
				3065	-C "received HelloRetryRequest message"
				3066
				3067	requires_config_enabled MBEDTLS_SSL_SRV_C
				3068	requires_config_enabled MBEDTLS_DEBUG_C
				3069	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3070	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3071	requires_openssl_tls1_3
				3072	requires_openssl_3_x
				3073	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				3074	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3075	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
				3076	0 \
				3077	-s "Protocol is TLSv1.3" \
				3078	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3079	-s "received signature algorithm: 0x603" \
				3080	-s "got named group: ffdhe2048(0100)" \
				3081	-s "Certificate verification was skipped" \
				3082	-C "received HelloRetryRequest message"
				3083
				3084	requires_config_enabled MBEDTLS_SSL_SRV_C
				3085	requires_config_enabled MBEDTLS_DEBUG_C
				3086	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3087	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3088	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3089	requires_openssl_tls1_3
				3090	requires_openssl_3_x
				3091	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				3092	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3093	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
				3094	0 \
				3095	-s "Protocol is TLSv1.3" \
				3096	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3097	-s "received signature algorithm: 0x804" \
				3098	-s "got named group: ffdhe2048(0100)" \
				3099	-s "Certificate verification was skipped" \
				3100	-C "received HelloRetryRequest message"
				3101
				3102	requires_config_enabled MBEDTLS_SSL_SRV_C
				3103	requires_config_enabled MBEDTLS_DEBUG_C
				3104	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3105	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3106	requires_openssl_tls1_3
				3107	requires_openssl_3_x
				3108	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				3109	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3110	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3" \
				3111	0 \
				3112	-s "Protocol is TLSv1.3" \
				3113	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3114	-s "received signature algorithm: 0x403" \
				3115	-s "got named group: ffdhe3072(0101)" \
				3116	-s "Certificate verification was skipped" \
				3117	-C "received HelloRetryRequest message"
				3118
				3119	requires_config_enabled MBEDTLS_SSL_SRV_C
				3120	requires_config_enabled MBEDTLS_DEBUG_C
				3121	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3122	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3123	requires_openssl_tls1_3
				3124	requires_openssl_3_x
				3125	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				3126	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3127	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3" \
				3128	0 \
				3129	-s "Protocol is TLSv1.3" \
				3130	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3131	-s "received signature algorithm: 0x503" \
				3132	-s "got named group: ffdhe3072(0101)" \
				3133	-s "Certificate verification was skipped" \
				3134	-C "received HelloRetryRequest message"
				3135
				3136	requires_config_enabled MBEDTLS_SSL_SRV_C
				3137	requires_config_enabled MBEDTLS_DEBUG_C
				3138	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3139	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3140	requires_openssl_tls1_3
				3141	requires_openssl_3_x
				3142	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				3143	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3144	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3" \
				3145	0 \
				3146	-s "Protocol is TLSv1.3" \
				3147	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3148	-s "received signature algorithm: 0x603" \
				3149	-s "got named group: ffdhe3072(0101)" \
				3150	-s "Certificate verification was skipped" \
				3151	-C "received HelloRetryRequest message"
				3152
				3153	requires_config_enabled MBEDTLS_SSL_SRV_C
				3154	requires_config_enabled MBEDTLS_DEBUG_C
				3155	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3156	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3157	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3158	requires_openssl_tls1_3
				3159	requires_openssl_3_x
				3160	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				3161	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3162	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3" \
				3163	0 \
				3164	-s "Protocol is TLSv1.3" \
				3165	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3166	-s "received signature algorithm: 0x804" \
				3167	-s "got named group: ffdhe3072(0101)" \
				3168	-s "Certificate verification was skipped" \
				3169	-C "received HelloRetryRequest message"
				3170
				3171	requires_config_enabled MBEDTLS_SSL_SRV_C
				3172	requires_config_enabled MBEDTLS_DEBUG_C
				3173	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3174	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3175	requires_openssl_tls1_3
				3176	requires_openssl_3_x
				3177	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				3178	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3179	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3" \
				3180	0 \
				3181	-s "Protocol is TLSv1.3" \
				3182	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3183	-s "received signature algorithm: 0x403" \
				3184	-s "got named group: ffdhe4096(0102)" \
				3185	-s "Certificate verification was skipped" \
				3186	-C "received HelloRetryRequest message"
				3187
				3188	requires_config_enabled MBEDTLS_SSL_SRV_C
				3189	requires_config_enabled MBEDTLS_DEBUG_C
				3190	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3191	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3192	requires_openssl_tls1_3
				3193	requires_openssl_3_x
				3194	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				3195	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3196	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3" \
				3197	0 \
				3198	-s "Protocol is TLSv1.3" \
				3199	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3200	-s "received signature algorithm: 0x503" \
				3201	-s "got named group: ffdhe4096(0102)" \
				3202	-s "Certificate verification was skipped" \
				3203	-C "received HelloRetryRequest message"
				3204
				3205	requires_config_enabled MBEDTLS_SSL_SRV_C
				3206	requires_config_enabled MBEDTLS_DEBUG_C
				3207	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3208	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3209	requires_openssl_tls1_3
				3210	requires_openssl_3_x
				3211	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				3212	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3213	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3" \
				3214	0 \
				3215	-s "Protocol is TLSv1.3" \
				3216	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3217	-s "received signature algorithm: 0x603" \
				3218	-s "got named group: ffdhe4096(0102)" \
				3219	-s "Certificate verification was skipped" \
				3220	-C "received HelloRetryRequest message"
				3221
				3222	requires_config_enabled MBEDTLS_SSL_SRV_C
				3223	requires_config_enabled MBEDTLS_DEBUG_C
				3224	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3225	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3226	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3227	requires_openssl_tls1_3
				3228	requires_openssl_3_x
				3229	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				3230	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3231	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3" \
				3232	0 \
				3233	-s "Protocol is TLSv1.3" \
				3234	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3235	-s "received signature algorithm: 0x804" \
				3236	-s "got named group: ffdhe4096(0102)" \
				3237	-s "Certificate verification was skipped" \
				3238	-C "received HelloRetryRequest message"
				3239
				3240	requires_config_enabled MBEDTLS_SSL_SRV_C
				3241	requires_config_enabled MBEDTLS_DEBUG_C
				3242	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3243	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3244	requires_openssl_tls1_3
				3245	requires_openssl_3_x
				3246	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				3247	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3248	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3" \
				3249	0 \
				3250	-s "Protocol is TLSv1.3" \
				3251	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3252	-s "received signature algorithm: 0x403" \
				3253	-s "got named group: ffdhe6144(0103)" \
				3254	-s "Certificate verification was skipped" \
				3255	-C "received HelloRetryRequest message"
				3256
				3257	requires_config_enabled MBEDTLS_SSL_SRV_C
				3258	requires_config_enabled MBEDTLS_DEBUG_C
				3259	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3260	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3261	requires_openssl_tls1_3
				3262	requires_openssl_3_x
				3263	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				3264	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3265	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3" \
				3266	0 \
				3267	-s "Protocol is TLSv1.3" \
				3268	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3269	-s "received signature algorithm: 0x503" \
				3270	-s "got named group: ffdhe6144(0103)" \
				3271	-s "Certificate verification was skipped" \
				3272	-C "received HelloRetryRequest message"
				3273
				3274	requires_config_enabled MBEDTLS_SSL_SRV_C
				3275	requires_config_enabled MBEDTLS_DEBUG_C
				3276	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3277	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3278	requires_openssl_tls1_3
				3279	requires_openssl_3_x
				3280	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				3281	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3282	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3" \
				3283	0 \
				3284	-s "Protocol is TLSv1.3" \
				3285	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3286	-s "received signature algorithm: 0x603" \
				3287	-s "got named group: ffdhe6144(0103)" \
				3288	-s "Certificate verification was skipped" \
				3289	-C "received HelloRetryRequest message"
				3290
				3291	requires_config_enabled MBEDTLS_SSL_SRV_C
				3292	requires_config_enabled MBEDTLS_DEBUG_C
				3293	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3294	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3295	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3296	requires_openssl_tls1_3
				3297	requires_openssl_3_x
				3298	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				3299	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3300	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3" \
				3301	0 \
				3302	-s "Protocol is TLSv1.3" \
				3303	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3304	-s "received signature algorithm: 0x804" \
				3305	-s "got named group: ffdhe6144(0103)" \
				3306	-s "Certificate verification was skipped" \
				3307	-C "received HelloRetryRequest message"
				3308
				3309	requires_config_enabled MBEDTLS_SSL_SRV_C
				3310	requires_config_enabled MBEDTLS_DEBUG_C
				3311	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3312	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3313	requires_openssl_tls1_3
				3314	requires_openssl_3_x
				3315	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				3316	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3317	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3" \
				3318	0 \
				3319	-s "Protocol is TLSv1.3" \
				3320	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3321	-s "received signature algorithm: 0x403" \
				3322	-s "got named group: ffdhe8192(0104)" \
				3323	-s "Certificate verification was skipped" \
				3324	-C "received HelloRetryRequest message"
				3325
				3326	requires_config_enabled MBEDTLS_SSL_SRV_C
				3327	requires_config_enabled MBEDTLS_DEBUG_C
				3328	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3329	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3330	requires_openssl_tls1_3
				3331	requires_openssl_3_x
				3332	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				3333	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3334	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3" \
				3335	0 \
				3336	-s "Protocol is TLSv1.3" \
				3337	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3338	-s "received signature algorithm: 0x503" \
				3339	-s "got named group: ffdhe8192(0104)" \
				3340	-s "Certificate verification was skipped" \
				3341	-C "received HelloRetryRequest message"
				3342
				3343	requires_config_enabled MBEDTLS_SSL_SRV_C
				3344	requires_config_enabled MBEDTLS_DEBUG_C
				3345	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3346	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3347	requires_openssl_tls1_3
				3348	requires_openssl_3_x
				3349	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				3350	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3351	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3" \
				3352	0 \
				3353	-s "Protocol is TLSv1.3" \
				3354	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3355	-s "received signature algorithm: 0x603" \
				3356	-s "got named group: ffdhe8192(0104)" \
				3357	-s "Certificate verification was skipped" \
				3358	-C "received HelloRetryRequest message"
				3359
				3360	requires_config_enabled MBEDTLS_SSL_SRV_C
				3361	requires_config_enabled MBEDTLS_DEBUG_C
				3362	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3363	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3364	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3365	requires_openssl_tls1_3
				3366	requires_openssl_3_x
				3367	run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				3368	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3369	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3" \
				3370	0 \
				3371	-s "Protocol is TLSv1.3" \
				3372	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				3373	-s "received signature algorithm: 0x804" \
				3374	-s "got named group: ffdhe8192(0104)" \
				3375	-s "Certificate verification was skipped" \
				3376	-C "received HelloRetryRequest message"
				3377
				3378	requires_config_enabled MBEDTLS_SSL_SRV_C
				3379	requires_config_enabled MBEDTLS_DEBUG_C
				3380	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3381	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3382	requires_gnutls_tls1_3
				3383	requires_gnutls_next_no_ticket
				3384	requires_gnutls_next_disable_tls13_compat
				3385	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3386	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3387	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3388	0 \
				3389	-s "Protocol is TLSv1.3" \
				3390	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3391	-s "received signature algorithm: 0x403" \
				3392	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3393	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3394	-C "received HelloRetryRequest message"
				3395
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3396	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3397	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3398	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3399	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3400	requires_gnutls_tls1_3
				3401	requires_gnutls_next_no_ticket
				3402	requires_gnutls_next_disable_tls13_compat
				3403	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3404	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3405	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3406	0 \
				3407	-s "Protocol is TLSv1.3" \
				3408	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3409	-s "received signature algorithm: 0x503" \
				3410	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3411	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3412	-C "received HelloRetryRequest message"
				3413
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3414	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3415	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3416	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3417	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3418	requires_gnutls_tls1_3
				3419	requires_gnutls_next_no_ticket
				3420	requires_gnutls_next_disable_tls13_compat
				3421	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3422	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3423	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3424	0 \
				3425	-s "Protocol is TLSv1.3" \
				3426	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3427	-s "received signature algorithm: 0x603" \
				3428	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3429	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3430	-C "received HelloRetryRequest message"
				3431
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3432	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3433	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3434	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3435	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3436	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3437	requires_gnutls_tls1_3
				3438	requires_gnutls_next_no_ticket
				3439	requires_gnutls_next_disable_tls13_compat
				3440	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3441	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3442	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3443	0 \
				3444	-s "Protocol is TLSv1.3" \
				3445	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3446	-s "received signature algorithm: 0x804" \
				3447	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3448	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3449	-C "received HelloRetryRequest message"
				3450
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3451	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3452	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3453	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3454	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3455	requires_gnutls_tls1_3
				3456	requires_gnutls_next_no_ticket
				3457	requires_gnutls_next_disable_tls13_compat
				3458	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3459	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3460	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3461	0 \
				3462	-s "Protocol is TLSv1.3" \
				3463	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3464	-s "received signature algorithm: 0x403" \
				3465	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3466	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3467	-C "received HelloRetryRequest message"
				3468
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3469	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3470	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3471	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3472	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3473	requires_gnutls_tls1_3
				3474	requires_gnutls_next_no_ticket
				3475	requires_gnutls_next_disable_tls13_compat
				3476	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3477	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3478	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3479	0 \
				3480	-s "Protocol is TLSv1.3" \
				3481	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3482	-s "received signature algorithm: 0x503" \
				3483	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3484	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3485	-C "received HelloRetryRequest message"
				3486
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3487	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3488	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3489	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3490	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3491	requires_gnutls_tls1_3
				3492	requires_gnutls_next_no_ticket
				3493	requires_gnutls_next_disable_tls13_compat
				3494	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3495	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3496	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3497	0 \
				3498	-s "Protocol is TLSv1.3" \
				3499	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3500	-s "received signature algorithm: 0x603" \
				3501	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3502	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3503	-C "received HelloRetryRequest message"
				3504
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3505	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3506	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3507	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3508	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3509	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3510	requires_gnutls_tls1_3
				3511	requires_gnutls_next_no_ticket
				3512	requires_gnutls_next_disable_tls13_compat
				3513	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3514	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3515	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3516	0 \
				3517	-s "Protocol is TLSv1.3" \
				3518	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3519	-s "received signature algorithm: 0x804" \
				3520	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3521	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3522	-C "received HelloRetryRequest message"
				3523
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3524	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3525	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3526	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3527	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3528	requires_gnutls_tls1_3
				3529	requires_gnutls_next_no_ticket
				3530	requires_gnutls_next_disable_tls13_compat
				3531	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3532	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3533	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3534	0 \
				3535	-s "Protocol is TLSv1.3" \
				3536	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3537	-s "received signature algorithm: 0x403" \
				3538	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3539	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3540	-C "received HelloRetryRequest message"
				3541
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3542	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3543	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3544	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3545	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3546	requires_gnutls_tls1_3
				3547	requires_gnutls_next_no_ticket
				3548	requires_gnutls_next_disable_tls13_compat
				3549	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3550	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3551	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3552	0 \
				3553	-s "Protocol is TLSv1.3" \
				3554	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3555	-s "received signature algorithm: 0x503" \
				3556	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3557	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3558	-C "received HelloRetryRequest message"
				3559
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3560	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3561	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3562	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3563	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3564	requires_gnutls_tls1_3
				3565	requires_gnutls_next_no_ticket
				3566	requires_gnutls_next_disable_tls13_compat
				3567	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3568	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3569	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3570	0 \
				3571	-s "Protocol is TLSv1.3" \
				3572	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3573	-s "received signature algorithm: 0x603" \
				3574	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3575	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3576	-C "received HelloRetryRequest message"
				3577
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3578	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3579	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3580	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3581	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3582	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3583	requires_gnutls_tls1_3
				3584	requires_gnutls_next_no_ticket
				3585	requires_gnutls_next_disable_tls13_compat
				3586	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3587	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3588	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3589	0 \
				3590	-s "Protocol is TLSv1.3" \
				3591	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3592	-s "received signature algorithm: 0x804" \
				3593	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3594	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3595	-C "received HelloRetryRequest message"
				3596
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3597	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3598	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3599	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3600	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3601	requires_gnutls_tls1_3
				3602	requires_gnutls_next_no_ticket
				3603	requires_gnutls_next_disable_tls13_compat
				3604	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3605	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3606	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3607	0 \
				3608	-s "Protocol is TLSv1.3" \
				3609	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3610	-s "received signature algorithm: 0x403" \
				3611	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3612	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3613	-C "received HelloRetryRequest message"
				3614
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3615	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3616	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3617	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3618	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3619	requires_gnutls_tls1_3
				3620	requires_gnutls_next_no_ticket
				3621	requires_gnutls_next_disable_tls13_compat
				3622	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3623	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3624	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3625	0 \
				3626	-s "Protocol is TLSv1.3" \
				3627	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3628	-s "received signature algorithm: 0x503" \
				3629	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3630	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3631	-C "received HelloRetryRequest message"
				3632
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3633	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3634	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3635	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3636	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3637	requires_gnutls_tls1_3
				3638	requires_gnutls_next_no_ticket
				3639	requires_gnutls_next_disable_tls13_compat
				3640	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3641	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3642	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3643	0 \
				3644	-s "Protocol is TLSv1.3" \
				3645	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3646	-s "received signature algorithm: 0x603" \
				3647	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3648	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3649	-C "received HelloRetryRequest message"
				3650
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3651	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3652	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3653	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3654	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3655	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3656	requires_gnutls_tls1_3
				3657	requires_gnutls_next_no_ticket
				3658	requires_gnutls_next_disable_tls13_compat
				3659	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3660	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3661	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3662	0 \
				3663	-s "Protocol is TLSv1.3" \
				3664	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3665	-s "received signature algorithm: 0x804" \
				3666	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3667	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3668	-C "received HelloRetryRequest message"
				3669
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3670	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3671	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3672	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3673	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3674	requires_gnutls_tls1_3
				3675	requires_gnutls_next_no_ticket
				3676	requires_gnutls_next_disable_tls13_compat
				3677	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3678	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3679	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3680	0 \
				3681	-s "Protocol is TLSv1.3" \
				3682	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3683	-s "received signature algorithm: 0x403" \
				3684	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3685	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3686	-C "received HelloRetryRequest message"
				3687
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3688	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3689	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3690	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3691	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3692	requires_gnutls_tls1_3
				3693	requires_gnutls_next_no_ticket
				3694	requires_gnutls_next_disable_tls13_compat
				3695	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3696	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3697	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3698	0 \
				3699	-s "Protocol is TLSv1.3" \
				3700	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3701	-s "received signature algorithm: 0x503" \
				3702	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3703	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3704	-C "received HelloRetryRequest message"
				3705
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3706	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3707	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3708	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3709	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3710	requires_gnutls_tls1_3
				3711	requires_gnutls_next_no_ticket
				3712	requires_gnutls_next_disable_tls13_compat
				3713	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3714	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3715	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3716	0 \
				3717	-s "Protocol is TLSv1.3" \
				3718	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3719	-s "received signature algorithm: 0x603" \
				3720	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3721	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3722	-C "received HelloRetryRequest message"
				3723
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3724	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3725	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3726	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3727	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3728	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3729	requires_gnutls_tls1_3
				3730	requires_gnutls_next_no_ticket
				3731	requires_gnutls_next_disable_tls13_compat
				3732	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3733	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	3734	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3735	0 \
				3736	-s "Protocol is TLSv1.3" \
				3737	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3738	-s "received signature algorithm: 0x804" \
				3739	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	3740	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3741	-C "received HelloRetryRequest message"
				3742
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	3743	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	3744	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	3745	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	3746	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3747	requires_gnutls_tls1_3
				3748	requires_gnutls_next_no_ticket
				3749	requires_gnutls_next_disable_tls13_compat
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	3750	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				3751	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3752	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				3753	0 \
				3754	-s "Protocol is TLSv1.3" \
				3755	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3756	-s "received signature algorithm: 0x403" \
				3757	-s "got named group: ffdhe2048(0100)" \
				3758	-s "Certificate verification was skipped" \
				3759	-C "received HelloRetryRequest message"
				3760
				3761	requires_config_enabled MBEDTLS_SSL_SRV_C
				3762	requires_config_enabled MBEDTLS_DEBUG_C
				3763	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3764	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3765	requires_gnutls_tls1_3
				3766	requires_gnutls_next_no_ticket
				3767	requires_gnutls_next_disable_tls13_compat
				3768	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				3769	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3770	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				3771	0 \
				3772	-s "Protocol is TLSv1.3" \
				3773	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3774	-s "received signature algorithm: 0x503" \
				3775	-s "got named group: ffdhe2048(0100)" \
				3776	-s "Certificate verification was skipped" \
				3777	-C "received HelloRetryRequest message"
				3778
				3779	requires_config_enabled MBEDTLS_SSL_SRV_C
				3780	requires_config_enabled MBEDTLS_DEBUG_C
				3781	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3782	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3783	requires_gnutls_tls1_3
				3784	requires_gnutls_next_no_ticket
				3785	requires_gnutls_next_disable_tls13_compat
				3786	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				3787	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3788	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				3789	0 \
				3790	-s "Protocol is TLSv1.3" \
				3791	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3792	-s "received signature algorithm: 0x603" \
				3793	-s "got named group: ffdhe2048(0100)" \
				3794	-s "Certificate verification was skipped" \
				3795	-C "received HelloRetryRequest message"
				3796
				3797	requires_config_enabled MBEDTLS_SSL_SRV_C
				3798	requires_config_enabled MBEDTLS_DEBUG_C
				3799	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3800	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3801	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3802	requires_gnutls_tls1_3
				3803	requires_gnutls_next_no_ticket
				3804	requires_gnutls_next_disable_tls13_compat
				3805	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				3806	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3807	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				3808	0 \
				3809	-s "Protocol is TLSv1.3" \
				3810	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3811	-s "received signature algorithm: 0x804" \
				3812	-s "got named group: ffdhe2048(0100)" \
				3813	-s "Certificate verification was skipped" \
				3814	-C "received HelloRetryRequest message"
				3815
				3816	requires_config_enabled MBEDTLS_SSL_SRV_C
				3817	requires_config_enabled MBEDTLS_DEBUG_C
				3818	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3819	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3820	requires_gnutls_tls1_3
				3821	requires_gnutls_next_no_ticket
				3822	requires_gnutls_next_disable_tls13_compat
				3823	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				3824	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3825	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				3826	0 \
				3827	-s "Protocol is TLSv1.3" \
				3828	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3829	-s "received signature algorithm: 0x403" \
				3830	-s "got named group: ffdhe3072(0101)" \
				3831	-s "Certificate verification was skipped" \
				3832	-C "received HelloRetryRequest message"
				3833
				3834	requires_config_enabled MBEDTLS_SSL_SRV_C
				3835	requires_config_enabled MBEDTLS_DEBUG_C
				3836	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3837	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3838	requires_gnutls_tls1_3
				3839	requires_gnutls_next_no_ticket
				3840	requires_gnutls_next_disable_tls13_compat
				3841	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				3842	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3843	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				3844	0 \
				3845	-s "Protocol is TLSv1.3" \
				3846	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3847	-s "received signature algorithm: 0x503" \
				3848	-s "got named group: ffdhe3072(0101)" \
				3849	-s "Certificate verification was skipped" \
				3850	-C "received HelloRetryRequest message"
				3851
				3852	requires_config_enabled MBEDTLS_SSL_SRV_C
				3853	requires_config_enabled MBEDTLS_DEBUG_C
				3854	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3855	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3856	requires_gnutls_tls1_3
				3857	requires_gnutls_next_no_ticket
				3858	requires_gnutls_next_disable_tls13_compat
				3859	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				3860	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3861	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				3862	0 \
				3863	-s "Protocol is TLSv1.3" \
				3864	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3865	-s "received signature algorithm: 0x603" \
				3866	-s "got named group: ffdhe3072(0101)" \
				3867	-s "Certificate verification was skipped" \
				3868	-C "received HelloRetryRequest message"
				3869
				3870	requires_config_enabled MBEDTLS_SSL_SRV_C
				3871	requires_config_enabled MBEDTLS_DEBUG_C
				3872	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3873	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3874	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3875	requires_gnutls_tls1_3
				3876	requires_gnutls_next_no_ticket
				3877	requires_gnutls_next_disable_tls13_compat
				3878	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				3879	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3880	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				3881	0 \
				3882	-s "Protocol is TLSv1.3" \
				3883	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3884	-s "received signature algorithm: 0x804" \
				3885	-s "got named group: ffdhe3072(0101)" \
				3886	-s "Certificate verification was skipped" \
				3887	-C "received HelloRetryRequest message"
				3888
				3889	requires_config_enabled MBEDTLS_SSL_SRV_C
				3890	requires_config_enabled MBEDTLS_DEBUG_C
				3891	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3892	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3893	requires_gnutls_tls1_3
				3894	requires_gnutls_next_no_ticket
				3895	requires_gnutls_next_disable_tls13_compat
				3896	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				3897	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3898	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				3899	0 \
				3900	-s "Protocol is TLSv1.3" \
				3901	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3902	-s "received signature algorithm: 0x403" \
				3903	-s "got named group: ffdhe4096(0102)" \
				3904	-s "Certificate verification was skipped" \
				3905	-C "received HelloRetryRequest message"
				3906
				3907	requires_config_enabled MBEDTLS_SSL_SRV_C
				3908	requires_config_enabled MBEDTLS_DEBUG_C
				3909	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3910	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3911	requires_gnutls_tls1_3
				3912	requires_gnutls_next_no_ticket
				3913	requires_gnutls_next_disable_tls13_compat
				3914	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				3915	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3916	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				3917	0 \
				3918	-s "Protocol is TLSv1.3" \
				3919	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3920	-s "received signature algorithm: 0x503" \
				3921	-s "got named group: ffdhe4096(0102)" \
				3922	-s "Certificate verification was skipped" \
				3923	-C "received HelloRetryRequest message"
				3924
				3925	requires_config_enabled MBEDTLS_SSL_SRV_C
				3926	requires_config_enabled MBEDTLS_DEBUG_C
				3927	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3928	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3929	requires_gnutls_tls1_3
				3930	requires_gnutls_next_no_ticket
				3931	requires_gnutls_next_disable_tls13_compat
				3932	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				3933	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3934	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				3935	0 \
				3936	-s "Protocol is TLSv1.3" \
				3937	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3938	-s "received signature algorithm: 0x603" \
				3939	-s "got named group: ffdhe4096(0102)" \
				3940	-s "Certificate verification was skipped" \
				3941	-C "received HelloRetryRequest message"
				3942
				3943	requires_config_enabled MBEDTLS_SSL_SRV_C
				3944	requires_config_enabled MBEDTLS_DEBUG_C
				3945	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3946	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3947	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				3948	requires_gnutls_tls1_3
				3949	requires_gnutls_next_no_ticket
				3950	requires_gnutls_next_disable_tls13_compat
				3951	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				3952	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3953	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				3954	0 \
				3955	-s "Protocol is TLSv1.3" \
				3956	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3957	-s "received signature algorithm: 0x804" \
				3958	-s "got named group: ffdhe4096(0102)" \
				3959	-s "Certificate verification was skipped" \
				3960	-C "received HelloRetryRequest message"
				3961
				3962	requires_config_enabled MBEDTLS_SSL_SRV_C
				3963	requires_config_enabled MBEDTLS_DEBUG_C
				3964	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3965	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3966	requires_gnutls_tls1_3
				3967	requires_gnutls_next_no_ticket
				3968	requires_gnutls_next_disable_tls13_compat
				3969	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				3970	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3971	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				3972	0 \
				3973	-s "Protocol is TLSv1.3" \
				3974	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3975	-s "received signature algorithm: 0x403" \
				3976	-s "got named group: ffdhe6144(0103)" \
				3977	-s "Certificate verification was skipped" \
				3978	-C "received HelloRetryRequest message"
				3979
				3980	requires_config_enabled MBEDTLS_SSL_SRV_C
				3981	requires_config_enabled MBEDTLS_DEBUG_C
				3982	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3983	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3984	requires_gnutls_tls1_3
				3985	requires_gnutls_next_no_ticket
				3986	requires_gnutls_next_disable_tls13_compat
				3987	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				3988	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				3989	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				3990	0 \
				3991	-s "Protocol is TLSv1.3" \
				3992	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				3993	-s "received signature algorithm: 0x503" \
				3994	-s "got named group: ffdhe6144(0103)" \
				3995	-s "Certificate verification was skipped" \
				3996	-C "received HelloRetryRequest message"
				3997
				3998	requires_config_enabled MBEDTLS_SSL_SRV_C
				3999	requires_config_enabled MBEDTLS_DEBUG_C
				4000	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4001	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4002	requires_gnutls_tls1_3
				4003	requires_gnutls_next_no_ticket
				4004	requires_gnutls_next_disable_tls13_compat
				4005	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				4006	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4007	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				4008	0 \
				4009	-s "Protocol is TLSv1.3" \
				4010	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				4011	-s "received signature algorithm: 0x603" \
				4012	-s "got named group: ffdhe6144(0103)" \
				4013	-s "Certificate verification was skipped" \
				4014	-C "received HelloRetryRequest message"
				4015
				4016	requires_config_enabled MBEDTLS_SSL_SRV_C
				4017	requires_config_enabled MBEDTLS_DEBUG_C
				4018	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4019	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4020	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4021	requires_gnutls_tls1_3
				4022	requires_gnutls_next_no_ticket
				4023	requires_gnutls_next_disable_tls13_compat
				4024	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				4025	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4026	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				4027	0 \
				4028	-s "Protocol is TLSv1.3" \
				4029	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				4030	-s "received signature algorithm: 0x804" \
				4031	-s "got named group: ffdhe6144(0103)" \
				4032	-s "Certificate verification was skipped" \
				4033	-C "received HelloRetryRequest message"
				4034
				4035	requires_config_enabled MBEDTLS_SSL_SRV_C
				4036	requires_config_enabled MBEDTLS_DEBUG_C
				4037	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4038	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4039	requires_gnutls_tls1_3
				4040	requires_gnutls_next_no_ticket
				4041	requires_gnutls_next_disable_tls13_compat
				4042	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				4043	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4044	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				4045	0 \
				4046	-s "Protocol is TLSv1.3" \
				4047	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				4048	-s "received signature algorithm: 0x403" \
				4049	-s "got named group: ffdhe8192(0104)" \
				4050	-s "Certificate verification was skipped" \
				4051	-C "received HelloRetryRequest message"
				4052
				4053	requires_config_enabled MBEDTLS_SSL_SRV_C
				4054	requires_config_enabled MBEDTLS_DEBUG_C
				4055	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4056	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4057	requires_gnutls_tls1_3
				4058	requires_gnutls_next_no_ticket
				4059	requires_gnutls_next_disable_tls13_compat
				4060	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				4061	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4062	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				4063	0 \
				4064	-s "Protocol is TLSv1.3" \
				4065	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				4066	-s "received signature algorithm: 0x503" \
				4067	-s "got named group: ffdhe8192(0104)" \
				4068	-s "Certificate verification was skipped" \
				4069	-C "received HelloRetryRequest message"
				4070
				4071	requires_config_enabled MBEDTLS_SSL_SRV_C
				4072	requires_config_enabled MBEDTLS_DEBUG_C
				4073	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4074	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4075	requires_gnutls_tls1_3
				4076	requires_gnutls_next_no_ticket
				4077	requires_gnutls_next_disable_tls13_compat
				4078	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				4079	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4080	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				4081	0 \
				4082	-s "Protocol is TLSv1.3" \
				4083	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				4084	-s "received signature algorithm: 0x603" \
				4085	-s "got named group: ffdhe8192(0104)" \
				4086	-s "Certificate verification was skipped" \
				4087	-C "received HelloRetryRequest message"
				4088
				4089	requires_config_enabled MBEDTLS_SSL_SRV_C
				4090	requires_config_enabled MBEDTLS_DEBUG_C
				4091	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4092	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4093	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4094	requires_gnutls_tls1_3
				4095	requires_gnutls_next_no_ticket
				4096	requires_gnutls_next_disable_tls13_compat
				4097	run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				4098	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4099	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				4100	0 \
				4101	-s "Protocol is TLSv1.3" \
				4102	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				4103	-s "received signature algorithm: 0x804" \
				4104	-s "got named group: ffdhe8192(0104)" \
				4105	-s "Certificate verification was skipped" \
				4106	-C "received HelloRetryRequest message"
				4107
				4108	requires_config_enabled MBEDTLS_SSL_SRV_C
				4109	requires_config_enabled MBEDTLS_DEBUG_C
				4110	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4111	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4112	requires_gnutls_tls1_3
				4113	requires_gnutls_next_no_ticket
				4114	requires_gnutls_next_disable_tls13_compat
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4115	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4116	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4117	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4118	0 \
				4119	-s "Protocol is TLSv1.3" \
				4120	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4121	-s "received signature algorithm: 0x403" \
				4122	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4123	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4124	-C "received HelloRetryRequest message"
				4125
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4126	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4127	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4128	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4129	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4130	requires_gnutls_tls1_3
				4131	requires_gnutls_next_no_ticket
				4132	requires_gnutls_next_disable_tls13_compat
				4133	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4134	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4135	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4136	0 \
				4137	-s "Protocol is TLSv1.3" \
				4138	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4139	-s "received signature algorithm: 0x503" \
				4140	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4141	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4142	-C "received HelloRetryRequest message"
				4143
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4144	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4145	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4146	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4147	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4148	requires_gnutls_tls1_3
				4149	requires_gnutls_next_no_ticket
				4150	requires_gnutls_next_disable_tls13_compat
				4151	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4152	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4153	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4154	0 \
				4155	-s "Protocol is TLSv1.3" \
				4156	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4157	-s "received signature algorithm: 0x603" \
				4158	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4159	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4160	-C "received HelloRetryRequest message"
				4161
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4162	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4163	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4164	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4165	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4166	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4167	requires_gnutls_tls1_3
				4168	requires_gnutls_next_no_ticket
				4169	requires_gnutls_next_disable_tls13_compat
				4170	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4171	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4172	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4173	0 \
				4174	-s "Protocol is TLSv1.3" \
				4175	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4176	-s "received signature algorithm: 0x804" \
				4177	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4178	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4179	-C "received HelloRetryRequest message"
				4180
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4181	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4182	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4183	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4184	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4185	requires_gnutls_tls1_3
				4186	requires_gnutls_next_no_ticket
				4187	requires_gnutls_next_disable_tls13_compat
				4188	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4189	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4190	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4191	0 \
				4192	-s "Protocol is TLSv1.3" \
				4193	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4194	-s "received signature algorithm: 0x403" \
				4195	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4196	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4197	-C "received HelloRetryRequest message"
				4198
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4199	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4200	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4201	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4202	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4203	requires_gnutls_tls1_3
				4204	requires_gnutls_next_no_ticket
				4205	requires_gnutls_next_disable_tls13_compat
				4206	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4207	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4208	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4209	0 \
				4210	-s "Protocol is TLSv1.3" \
				4211	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4212	-s "received signature algorithm: 0x503" \
				4213	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4214	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4215	-C "received HelloRetryRequest message"
				4216
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4217	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4218	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4219	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4220	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4221	requires_gnutls_tls1_3
				4222	requires_gnutls_next_no_ticket
				4223	requires_gnutls_next_disable_tls13_compat
				4224	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4225	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4226	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4227	0 \
				4228	-s "Protocol is TLSv1.3" \
				4229	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4230	-s "received signature algorithm: 0x603" \
				4231	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4232	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4233	-C "received HelloRetryRequest message"
				4234
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4235	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4236	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4237	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4238	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4239	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4240	requires_gnutls_tls1_3
				4241	requires_gnutls_next_no_ticket
				4242	requires_gnutls_next_disable_tls13_compat
				4243	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4244	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4245	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4246	0 \
				4247	-s "Protocol is TLSv1.3" \
				4248	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4249	-s "received signature algorithm: 0x804" \
				4250	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4251	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4252	-C "received HelloRetryRequest message"
				4253
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4254	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4255	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4256	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4257	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4258	requires_gnutls_tls1_3
				4259	requires_gnutls_next_no_ticket
				4260	requires_gnutls_next_disable_tls13_compat
				4261	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4262	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4263	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4264	0 \
				4265	-s "Protocol is TLSv1.3" \
				4266	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4267	-s "received signature algorithm: 0x403" \
				4268	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4269	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4270	-C "received HelloRetryRequest message"
				4271
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4272	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4273	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4274	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4275	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4276	requires_gnutls_tls1_3
				4277	requires_gnutls_next_no_ticket
				4278	requires_gnutls_next_disable_tls13_compat
				4279	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4280	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4281	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4282	0 \
				4283	-s "Protocol is TLSv1.3" \
				4284	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4285	-s "received signature algorithm: 0x503" \
				4286	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4287	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4288	-C "received HelloRetryRequest message"
				4289
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4290	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4291	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4292	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4293	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4294	requires_gnutls_tls1_3
				4295	requires_gnutls_next_no_ticket
				4296	requires_gnutls_next_disable_tls13_compat
				4297	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4298	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4299	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4300	0 \
				4301	-s "Protocol is TLSv1.3" \
				4302	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4303	-s "received signature algorithm: 0x603" \
				4304	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4305	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4306	-C "received HelloRetryRequest message"
				4307
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4308	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4309	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4310	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4311	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4312	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4313	requires_gnutls_tls1_3
				4314	requires_gnutls_next_no_ticket
				4315	requires_gnutls_next_disable_tls13_compat
				4316	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4317	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4318	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4319	0 \
				4320	-s "Protocol is TLSv1.3" \
				4321	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4322	-s "received signature algorithm: 0x804" \
				4323	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4324	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4325	-C "received HelloRetryRequest message"
				4326
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4327	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4328	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4329	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4330	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4331	requires_gnutls_tls1_3
				4332	requires_gnutls_next_no_ticket
				4333	requires_gnutls_next_disable_tls13_compat
				4334	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4335	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4336	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4337	0 \
				4338	-s "Protocol is TLSv1.3" \
				4339	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4340	-s "received signature algorithm: 0x403" \
				4341	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4342	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4343	-C "received HelloRetryRequest message"
				4344
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4345	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4346	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4347	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4348	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4349	requires_gnutls_tls1_3
				4350	requires_gnutls_next_no_ticket
				4351	requires_gnutls_next_disable_tls13_compat
				4352	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4353	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4354	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4355	0 \
				4356	-s "Protocol is TLSv1.3" \
				4357	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4358	-s "received signature algorithm: 0x503" \
				4359	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4360	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4361	-C "received HelloRetryRequest message"
				4362
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4363	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4364	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4365	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4366	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4367	requires_gnutls_tls1_3
				4368	requires_gnutls_next_no_ticket
				4369	requires_gnutls_next_disable_tls13_compat
				4370	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4371	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4372	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4373	0 \
				4374	-s "Protocol is TLSv1.3" \
				4375	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4376	-s "received signature algorithm: 0x603" \
				4377	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4378	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4379	-C "received HelloRetryRequest message"
				4380
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4381	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4382	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4383	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4384	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4385	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4386	requires_gnutls_tls1_3
				4387	requires_gnutls_next_no_ticket
				4388	requires_gnutls_next_disable_tls13_compat
				4389	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4390	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4391	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4392	0 \
				4393	-s "Protocol is TLSv1.3" \
				4394	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4395	-s "received signature algorithm: 0x804" \
				4396	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4397	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4398	-C "received HelloRetryRequest message"
				4399
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4400	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4401	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4402	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4403	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4404	requires_gnutls_tls1_3
				4405	requires_gnutls_next_no_ticket
				4406	requires_gnutls_next_disable_tls13_compat
				4407	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4408	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4409	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4410	0 \
				4411	-s "Protocol is TLSv1.3" \
				4412	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4413	-s "received signature algorithm: 0x403" \
				4414	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4415	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4416	-C "received HelloRetryRequest message"
				4417
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4418	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4419	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4420	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4421	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4422	requires_gnutls_tls1_3
				4423	requires_gnutls_next_no_ticket
				4424	requires_gnutls_next_disable_tls13_compat
				4425	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4426	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4427	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4428	0 \
				4429	-s "Protocol is TLSv1.3" \
				4430	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4431	-s "received signature algorithm: 0x503" \
				4432	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4433	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4434	-C "received HelloRetryRequest message"
				4435
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4436	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4437	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4438	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4439	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4440	requires_gnutls_tls1_3
				4441	requires_gnutls_next_no_ticket
				4442	requires_gnutls_next_disable_tls13_compat
				4443	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4444	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4445	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4446	0 \
				4447	-s "Protocol is TLSv1.3" \
				4448	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4449	-s "received signature algorithm: 0x603" \
				4450	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4451	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4452	-C "received HelloRetryRequest message"
				4453
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4454	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4455	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4456	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4457	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4458	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4459	requires_gnutls_tls1_3
				4460	requires_gnutls_next_no_ticket
				4461	requires_gnutls_next_disable_tls13_compat
				4462	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4463	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4464	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4465	0 \
				4466	-s "Protocol is TLSv1.3" \
				4467	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4468	-s "received signature algorithm: 0x804" \
				4469	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4470	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4471	-C "received HelloRetryRequest message"
				4472
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4473	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4474	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4475	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4476	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4477	requires_gnutls_tls1_3
				4478	requires_gnutls_next_no_ticket
				4479	requires_gnutls_next_disable_tls13_compat
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	4480	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
				4481	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4482	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				4483	0 \
				4484	-s "Protocol is TLSv1.3" \
				4485	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4486	-s "received signature algorithm: 0x403" \
				4487	-s "got named group: ffdhe2048(0100)" \
				4488	-s "Certificate verification was skipped" \
				4489	-C "received HelloRetryRequest message"
				4490
				4491	requires_config_enabled MBEDTLS_SSL_SRV_C
				4492	requires_config_enabled MBEDTLS_DEBUG_C
				4493	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4494	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4495	requires_gnutls_tls1_3
				4496	requires_gnutls_next_no_ticket
				4497	requires_gnutls_next_disable_tls13_compat
				4498	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
				4499	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4500	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				4501	0 \
				4502	-s "Protocol is TLSv1.3" \
				4503	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4504	-s "received signature algorithm: 0x503" \
				4505	-s "got named group: ffdhe2048(0100)" \
				4506	-s "Certificate verification was skipped" \
				4507	-C "received HelloRetryRequest message"
				4508
				4509	requires_config_enabled MBEDTLS_SSL_SRV_C
				4510	requires_config_enabled MBEDTLS_DEBUG_C
				4511	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4512	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4513	requires_gnutls_tls1_3
				4514	requires_gnutls_next_no_ticket
				4515	requires_gnutls_next_disable_tls13_compat
				4516	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
				4517	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4518	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				4519	0 \
				4520	-s "Protocol is TLSv1.3" \
				4521	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4522	-s "received signature algorithm: 0x603" \
				4523	-s "got named group: ffdhe2048(0100)" \
				4524	-s "Certificate verification was skipped" \
				4525	-C "received HelloRetryRequest message"
				4526
				4527	requires_config_enabled MBEDTLS_SSL_SRV_C
				4528	requires_config_enabled MBEDTLS_DEBUG_C
				4529	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4530	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4531	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4532	requires_gnutls_tls1_3
				4533	requires_gnutls_next_no_ticket
				4534	requires_gnutls_next_disable_tls13_compat
				4535	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
				4536	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4537	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				4538	0 \
				4539	-s "Protocol is TLSv1.3" \
				4540	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4541	-s "received signature algorithm: 0x804" \
				4542	-s "got named group: ffdhe2048(0100)" \
				4543	-s "Certificate verification was skipped" \
				4544	-C "received HelloRetryRequest message"
				4545
				4546	requires_config_enabled MBEDTLS_SSL_SRV_C
				4547	requires_config_enabled MBEDTLS_DEBUG_C
				4548	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4549	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4550	requires_gnutls_tls1_3
				4551	requires_gnutls_next_no_ticket
				4552	requires_gnutls_next_disable_tls13_compat
				4553	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp256r1_sha256" \
				4554	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4555	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				4556	0 \
				4557	-s "Protocol is TLSv1.3" \
				4558	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4559	-s "received signature algorithm: 0x403" \
				4560	-s "got named group: ffdhe3072(0101)" \
				4561	-s "Certificate verification was skipped" \
				4562	-C "received HelloRetryRequest message"
				4563
				4564	requires_config_enabled MBEDTLS_SSL_SRV_C
				4565	requires_config_enabled MBEDTLS_DEBUG_C
				4566	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4567	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4568	requires_gnutls_tls1_3
				4569	requires_gnutls_next_no_ticket
				4570	requires_gnutls_next_disable_tls13_compat
				4571	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp384r1_sha384" \
				4572	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4573	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				4574	0 \
				4575	-s "Protocol is TLSv1.3" \
				4576	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4577	-s "received signature algorithm: 0x503" \
				4578	-s "got named group: ffdhe3072(0101)" \
				4579	-s "Certificate verification was skipped" \
				4580	-C "received HelloRetryRequest message"
				4581
				4582	requires_config_enabled MBEDTLS_SSL_SRV_C
				4583	requires_config_enabled MBEDTLS_DEBUG_C
				4584	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4585	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4586	requires_gnutls_tls1_3
				4587	requires_gnutls_next_no_ticket
				4588	requires_gnutls_next_disable_tls13_compat
				4589	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp521r1_sha512" \
				4590	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4591	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				4592	0 \
				4593	-s "Protocol is TLSv1.3" \
				4594	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4595	-s "received signature algorithm: 0x603" \
				4596	-s "got named group: ffdhe3072(0101)" \
				4597	-s "Certificate verification was skipped" \
				4598	-C "received HelloRetryRequest message"
				4599
				4600	requires_config_enabled MBEDTLS_SSL_SRV_C
				4601	requires_config_enabled MBEDTLS_DEBUG_C
				4602	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4603	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4604	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4605	requires_gnutls_tls1_3
				4606	requires_gnutls_next_no_ticket
				4607	requires_gnutls_next_disable_tls13_compat
				4608	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe3072,rsa_pss_rsae_sha256" \
				4609	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4610	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				4611	0 \
				4612	-s "Protocol is TLSv1.3" \
				4613	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4614	-s "received signature algorithm: 0x804" \
				4615	-s "got named group: ffdhe3072(0101)" \
				4616	-s "Certificate verification was skipped" \
				4617	-C "received HelloRetryRequest message"
				4618
				4619	requires_config_enabled MBEDTLS_SSL_SRV_C
				4620	requires_config_enabled MBEDTLS_DEBUG_C
				4621	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4622	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4623	requires_gnutls_tls1_3
				4624	requires_gnutls_next_no_ticket
				4625	requires_gnutls_next_disable_tls13_compat
				4626	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp256r1_sha256" \
				4627	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4628	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				4629	0 \
				4630	-s "Protocol is TLSv1.3" \
				4631	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4632	-s "received signature algorithm: 0x403" \
				4633	-s "got named group: ffdhe4096(0102)" \
				4634	-s "Certificate verification was skipped" \
				4635	-C "received HelloRetryRequest message"
				4636
				4637	requires_config_enabled MBEDTLS_SSL_SRV_C
				4638	requires_config_enabled MBEDTLS_DEBUG_C
				4639	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4640	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4641	requires_gnutls_tls1_3
				4642	requires_gnutls_next_no_ticket
				4643	requires_gnutls_next_disable_tls13_compat
				4644	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp384r1_sha384" \
				4645	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4646	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				4647	0 \
				4648	-s "Protocol is TLSv1.3" \
				4649	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4650	-s "received signature algorithm: 0x503" \
				4651	-s "got named group: ffdhe4096(0102)" \
				4652	-s "Certificate verification was skipped" \
				4653	-C "received HelloRetryRequest message"
				4654
				4655	requires_config_enabled MBEDTLS_SSL_SRV_C
				4656	requires_config_enabled MBEDTLS_DEBUG_C
				4657	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4658	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4659	requires_gnutls_tls1_3
				4660	requires_gnutls_next_no_ticket
				4661	requires_gnutls_next_disable_tls13_compat
				4662	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp521r1_sha512" \
				4663	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4664	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				4665	0 \
				4666	-s "Protocol is TLSv1.3" \
				4667	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4668	-s "received signature algorithm: 0x603" \
				4669	-s "got named group: ffdhe4096(0102)" \
				4670	-s "Certificate verification was skipped" \
				4671	-C "received HelloRetryRequest message"
				4672
				4673	requires_config_enabled MBEDTLS_SSL_SRV_C
				4674	requires_config_enabled MBEDTLS_DEBUG_C
				4675	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4676	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4677	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4678	requires_gnutls_tls1_3
				4679	requires_gnutls_next_no_ticket
				4680	requires_gnutls_next_disable_tls13_compat
				4681	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe4096,rsa_pss_rsae_sha256" \
				4682	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4683	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				4684	0 \
				4685	-s "Protocol is TLSv1.3" \
				4686	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4687	-s "received signature algorithm: 0x804" \
				4688	-s "got named group: ffdhe4096(0102)" \
				4689	-s "Certificate verification was skipped" \
				4690	-C "received HelloRetryRequest message"
				4691
				4692	requires_config_enabled MBEDTLS_SSL_SRV_C
				4693	requires_config_enabled MBEDTLS_DEBUG_C
				4694	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4695	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4696	requires_gnutls_tls1_3
				4697	requires_gnutls_next_no_ticket
				4698	requires_gnutls_next_disable_tls13_compat
				4699	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp256r1_sha256" \
				4700	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4701	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				4702	0 \
				4703	-s "Protocol is TLSv1.3" \
				4704	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4705	-s "received signature algorithm: 0x403" \
				4706	-s "got named group: ffdhe6144(0103)" \
				4707	-s "Certificate verification was skipped" \
				4708	-C "received HelloRetryRequest message"
				4709
				4710	requires_config_enabled MBEDTLS_SSL_SRV_C
				4711	requires_config_enabled MBEDTLS_DEBUG_C
				4712	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4713	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4714	requires_gnutls_tls1_3
				4715	requires_gnutls_next_no_ticket
				4716	requires_gnutls_next_disable_tls13_compat
				4717	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp384r1_sha384" \
				4718	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4719	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				4720	0 \
				4721	-s "Protocol is TLSv1.3" \
				4722	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4723	-s "received signature algorithm: 0x503" \
				4724	-s "got named group: ffdhe6144(0103)" \
				4725	-s "Certificate verification was skipped" \
				4726	-C "received HelloRetryRequest message"
				4727
				4728	requires_config_enabled MBEDTLS_SSL_SRV_C
				4729	requires_config_enabled MBEDTLS_DEBUG_C
				4730	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4731	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4732	requires_gnutls_tls1_3
				4733	requires_gnutls_next_no_ticket
				4734	requires_gnutls_next_disable_tls13_compat
				4735	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp521r1_sha512" \
				4736	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4737	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				4738	0 \
				4739	-s "Protocol is TLSv1.3" \
				4740	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4741	-s "received signature algorithm: 0x603" \
				4742	-s "got named group: ffdhe6144(0103)" \
				4743	-s "Certificate verification was skipped" \
				4744	-C "received HelloRetryRequest message"
				4745
				4746	requires_config_enabled MBEDTLS_SSL_SRV_C
				4747	requires_config_enabled MBEDTLS_DEBUG_C
				4748	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4749	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4750	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4751	requires_gnutls_tls1_3
				4752	requires_gnutls_next_no_ticket
				4753	requires_gnutls_next_disable_tls13_compat
				4754	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe6144,rsa_pss_rsae_sha256" \
				4755	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4756	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				4757	0 \
				4758	-s "Protocol is TLSv1.3" \
				4759	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4760	-s "received signature algorithm: 0x804" \
				4761	-s "got named group: ffdhe6144(0103)" \
				4762	-s "Certificate verification was skipped" \
				4763	-C "received HelloRetryRequest message"
				4764
				4765	requires_config_enabled MBEDTLS_SSL_SRV_C
				4766	requires_config_enabled MBEDTLS_DEBUG_C
				4767	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4768	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4769	requires_gnutls_tls1_3
				4770	requires_gnutls_next_no_ticket
				4771	requires_gnutls_next_disable_tls13_compat
				4772	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp256r1_sha256" \
				4773	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4774	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				4775	0 \
				4776	-s "Protocol is TLSv1.3" \
				4777	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4778	-s "received signature algorithm: 0x403" \
				4779	-s "got named group: ffdhe8192(0104)" \
				4780	-s "Certificate verification was skipped" \
				4781	-C "received HelloRetryRequest message"
				4782
				4783	requires_config_enabled MBEDTLS_SSL_SRV_C
				4784	requires_config_enabled MBEDTLS_DEBUG_C
				4785	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4786	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4787	requires_gnutls_tls1_3
				4788	requires_gnutls_next_no_ticket
				4789	requires_gnutls_next_disable_tls13_compat
				4790	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp384r1_sha384" \
				4791	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4792	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				4793	0 \
				4794	-s "Protocol is TLSv1.3" \
				4795	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4796	-s "received signature algorithm: 0x503" \
				4797	-s "got named group: ffdhe8192(0104)" \
				4798	-s "Certificate verification was skipped" \
				4799	-C "received HelloRetryRequest message"
				4800
				4801	requires_config_enabled MBEDTLS_SSL_SRV_C
				4802	requires_config_enabled MBEDTLS_DEBUG_C
				4803	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4804	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4805	requires_gnutls_tls1_3
				4806	requires_gnutls_next_no_ticket
				4807	requires_gnutls_next_disable_tls13_compat
				4808	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp521r1_sha512" \
				4809	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4810	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				4811	0 \
				4812	-s "Protocol is TLSv1.3" \
				4813	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4814	-s "received signature algorithm: 0x603" \
				4815	-s "got named group: ffdhe8192(0104)" \
				4816	-s "Certificate verification was skipped" \
				4817	-C "received HelloRetryRequest message"
				4818
				4819	requires_config_enabled MBEDTLS_SSL_SRV_C
				4820	requires_config_enabled MBEDTLS_DEBUG_C
				4821	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4822	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4823	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4824	requires_gnutls_tls1_3
				4825	requires_gnutls_next_no_ticket
				4826	requires_gnutls_next_disable_tls13_compat
				4827	run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe8192,rsa_pss_rsae_sha256" \
				4828	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				4829	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				4830	0 \
				4831	-s "Protocol is TLSv1.3" \
				4832	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				4833	-s "received signature algorithm: 0x804" \
				4834	-s "got named group: ffdhe8192(0104)" \
				4835	-s "Certificate verification was skipped" \
				4836	-C "received HelloRetryRequest message"
				4837
				4838	requires_config_enabled MBEDTLS_SSL_SRV_C
				4839	requires_config_enabled MBEDTLS_DEBUG_C
				4840	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				4841	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4842	requires_gnutls_tls1_3
				4843	requires_gnutls_next_no_ticket
				4844	requires_gnutls_next_disable_tls13_compat
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4845	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4846	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4847	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4848	0 \
				4849	-s "Protocol is TLSv1.3" \
				4850	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4851	-s "received signature algorithm: 0x403" \
				4852	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4853	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4854	-C "received HelloRetryRequest message"
				4855
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4856	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4857	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4858	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4859	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4860	requires_gnutls_tls1_3
				4861	requires_gnutls_next_no_ticket
				4862	requires_gnutls_next_disable_tls13_compat
				4863	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4864	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4865	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4866	0 \
				4867	-s "Protocol is TLSv1.3" \
				4868	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4869	-s "received signature algorithm: 0x503" \
				4870	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4871	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4872	-C "received HelloRetryRequest message"
				4873
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4874	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4875	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4876	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4877	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4878	requires_gnutls_tls1_3
				4879	requires_gnutls_next_no_ticket
				4880	requires_gnutls_next_disable_tls13_compat
				4881	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4882	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4883	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4884	0 \
				4885	-s "Protocol is TLSv1.3" \
				4886	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4887	-s "received signature algorithm: 0x603" \
				4888	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4889	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4890	-C "received HelloRetryRequest message"
				4891
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4892	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4893	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4894	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4895	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4896	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4897	requires_gnutls_tls1_3
				4898	requires_gnutls_next_no_ticket
				4899	requires_gnutls_next_disable_tls13_compat
				4900	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4901	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4902	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4903	0 \
				4904	-s "Protocol is TLSv1.3" \
				4905	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4906	-s "received signature algorithm: 0x804" \
				4907	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4908	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4909	-C "received HelloRetryRequest message"
				4910
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4911	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4912	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4913	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4914	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4915	requires_gnutls_tls1_3
				4916	requires_gnutls_next_no_ticket
				4917	requires_gnutls_next_disable_tls13_compat
				4918	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4919	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4920	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4921	0 \
				4922	-s "Protocol is TLSv1.3" \
				4923	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4924	-s "received signature algorithm: 0x403" \
				4925	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4926	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4927	-C "received HelloRetryRequest message"
				4928
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4929	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4930	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4931	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4932	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4933	requires_gnutls_tls1_3
				4934	requires_gnutls_next_no_ticket
				4935	requires_gnutls_next_disable_tls13_compat
				4936	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4937	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4938	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4939	0 \
				4940	-s "Protocol is TLSv1.3" \
				4941	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4942	-s "received signature algorithm: 0x503" \
				4943	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4944	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4945	-C "received HelloRetryRequest message"
				4946
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4947	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4948	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4949	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4950	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4951	requires_gnutls_tls1_3
				4952	requires_gnutls_next_no_ticket
				4953	requires_gnutls_next_disable_tls13_compat
				4954	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4955	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4956	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4957	0 \
				4958	-s "Protocol is TLSv1.3" \
				4959	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4960	-s "received signature algorithm: 0x603" \
				4961	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4962	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4963	-C "received HelloRetryRequest message"
				4964
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4965	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4966	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4967	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4968	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4969	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				4970	requires_gnutls_tls1_3
				4971	requires_gnutls_next_no_ticket
				4972	requires_gnutls_next_disable_tls13_compat
				4973	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4974	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4975	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4976	0 \
				4977	-s "Protocol is TLSv1.3" \
				4978	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4979	-s "received signature algorithm: 0x804" \
				4980	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4981	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4982	-C "received HelloRetryRequest message"
				4983
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	4984	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	4985	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	4986	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4987	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				4988	requires_gnutls_tls1_3
				4989	requires_gnutls_next_no_ticket
				4990	requires_gnutls_next_disable_tls13_compat
				4991	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	4992	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	4993	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	4994	0 \
				4995	-s "Protocol is TLSv1.3" \
				4996	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				4997	-s "received signature algorithm: 0x403" \
				4998	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	4999	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5000	-C "received HelloRetryRequest message"
				5001
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5002	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5003	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5004	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5005	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5006	requires_gnutls_tls1_3
				5007	requires_gnutls_next_no_ticket
				5008	requires_gnutls_next_disable_tls13_compat
				5009	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5010	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5011	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5012	0 \
				5013	-s "Protocol is TLSv1.3" \
				5014	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5015	-s "received signature algorithm: 0x503" \
				5016	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5017	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5018	-C "received HelloRetryRequest message"
				5019
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5020	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5021	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5022	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5023	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5024	requires_gnutls_tls1_3
				5025	requires_gnutls_next_no_ticket
				5026	requires_gnutls_next_disable_tls13_compat
				5027	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5028	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5029	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5030	0 \
				5031	-s "Protocol is TLSv1.3" \
				5032	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5033	-s "received signature algorithm: 0x603" \
				5034	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5035	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5036	-C "received HelloRetryRequest message"
				5037
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5038	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5039	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5040	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5041	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5042	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5043	requires_gnutls_tls1_3
				5044	requires_gnutls_next_no_ticket
				5045	requires_gnutls_next_disable_tls13_compat
				5046	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5047	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5048	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5049	0 \
				5050	-s "Protocol is TLSv1.3" \
				5051	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5052	-s "received signature algorithm: 0x804" \
				5053	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5054	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5055	-C "received HelloRetryRequest message"
				5056
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5057	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5058	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5059	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5060	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5061	requires_gnutls_tls1_3
				5062	requires_gnutls_next_no_ticket
				5063	requires_gnutls_next_disable_tls13_compat
				5064	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5065	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5066	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5067	0 \
				5068	-s "Protocol is TLSv1.3" \
				5069	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5070	-s "received signature algorithm: 0x403" \
				5071	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5072	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5073	-C "received HelloRetryRequest message"
				5074
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5075	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5076	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5077	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5078	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5079	requires_gnutls_tls1_3
				5080	requires_gnutls_next_no_ticket
				5081	requires_gnutls_next_disable_tls13_compat
				5082	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5083	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5084	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5085	0 \
				5086	-s "Protocol is TLSv1.3" \
				5087	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5088	-s "received signature algorithm: 0x503" \
				5089	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5090	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5091	-C "received HelloRetryRequest message"
				5092
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5093	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5094	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5095	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5096	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5097	requires_gnutls_tls1_3
				5098	requires_gnutls_next_no_ticket
				5099	requires_gnutls_next_disable_tls13_compat
				5100	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5101	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5102	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5103	0 \
				5104	-s "Protocol is TLSv1.3" \
				5105	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5106	-s "received signature algorithm: 0x603" \
				5107	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5108	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5109	-C "received HelloRetryRequest message"
				5110
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5111	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5112	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5113	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5114	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5115	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5116	requires_gnutls_tls1_3
				5117	requires_gnutls_next_no_ticket
				5118	requires_gnutls_next_disable_tls13_compat
				5119	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5120	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5121	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5122	0 \
				5123	-s "Protocol is TLSv1.3" \
				5124	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5125	-s "received signature algorithm: 0x804" \
				5126	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5127	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5128	-C "received HelloRetryRequest message"
				5129
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5130	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5131	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5132	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5133	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5134	requires_gnutls_tls1_3
				5135	requires_gnutls_next_no_ticket
				5136	requires_gnutls_next_disable_tls13_compat
				5137	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5138	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5139	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5140	0 \
				5141	-s "Protocol is TLSv1.3" \
				5142	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5143	-s "received signature algorithm: 0x403" \
				5144	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5145	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5146	-C "received HelloRetryRequest message"
				5147
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5148	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5149	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5150	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5151	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5152	requires_gnutls_tls1_3
				5153	requires_gnutls_next_no_ticket
				5154	requires_gnutls_next_disable_tls13_compat
				5155	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5156	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5157	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5158	0 \
				5159	-s "Protocol is TLSv1.3" \
				5160	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5161	-s "received signature algorithm: 0x503" \
				5162	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5163	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5164	-C "received HelloRetryRequest message"
				5165
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5166	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5167	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5168	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5169	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5170	requires_gnutls_tls1_3
				5171	requires_gnutls_next_no_ticket
				5172	requires_gnutls_next_disable_tls13_compat
				5173	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5174	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5175	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5176	0 \
				5177	-s "Protocol is TLSv1.3" \
				5178	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5179	-s "received signature algorithm: 0x603" \
				5180	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5181	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5182	-C "received HelloRetryRequest message"
				5183
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5184	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5185	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5186	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5187	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5188	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5189	requires_gnutls_tls1_3
				5190	requires_gnutls_next_no_ticket
				5191	requires_gnutls_next_disable_tls13_compat
				5192	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5193	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5194	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5195	0 \
				5196	-s "Protocol is TLSv1.3" \
				5197	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5198	-s "received signature algorithm: 0x804" \
				5199	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5200	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5201	-C "received HelloRetryRequest message"
				5202
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5203	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5204	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5205	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5206	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5207	requires_gnutls_tls1_3
				5208	requires_gnutls_next_no_ticket
				5209	requires_gnutls_next_disable_tls13_compat
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	5210	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				5211	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5212	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				5213	0 \
				5214	-s "Protocol is TLSv1.3" \
				5215	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5216	-s "received signature algorithm: 0x403" \
				5217	-s "got named group: ffdhe2048(0100)" \
				5218	-s "Certificate verification was skipped" \
				5219	-C "received HelloRetryRequest message"
				5220
				5221	requires_config_enabled MBEDTLS_SSL_SRV_C
				5222	requires_config_enabled MBEDTLS_DEBUG_C
				5223	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5224	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5225	requires_gnutls_tls1_3
				5226	requires_gnutls_next_no_ticket
				5227	requires_gnutls_next_disable_tls13_compat
				5228	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				5229	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5230	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				5231	0 \
				5232	-s "Protocol is TLSv1.3" \
				5233	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5234	-s "received signature algorithm: 0x503" \
				5235	-s "got named group: ffdhe2048(0100)" \
				5236	-s "Certificate verification was skipped" \
				5237	-C "received HelloRetryRequest message"
				5238
				5239	requires_config_enabled MBEDTLS_SSL_SRV_C
				5240	requires_config_enabled MBEDTLS_DEBUG_C
				5241	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5242	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5243	requires_gnutls_tls1_3
				5244	requires_gnutls_next_no_ticket
				5245	requires_gnutls_next_disable_tls13_compat
				5246	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				5247	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5248	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				5249	0 \
				5250	-s "Protocol is TLSv1.3" \
				5251	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5252	-s "received signature algorithm: 0x603" \
				5253	-s "got named group: ffdhe2048(0100)" \
				5254	-s "Certificate verification was skipped" \
				5255	-C "received HelloRetryRequest message"
				5256
				5257	requires_config_enabled MBEDTLS_SSL_SRV_C
				5258	requires_config_enabled MBEDTLS_DEBUG_C
				5259	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5260	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5261	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5262	requires_gnutls_tls1_3
				5263	requires_gnutls_next_no_ticket
				5264	requires_gnutls_next_disable_tls13_compat
				5265	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				5266	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5267	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				5268	0 \
				5269	-s "Protocol is TLSv1.3" \
				5270	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5271	-s "received signature algorithm: 0x804" \
				5272	-s "got named group: ffdhe2048(0100)" \
				5273	-s "Certificate verification was skipped" \
				5274	-C "received HelloRetryRequest message"
				5275
				5276	requires_config_enabled MBEDTLS_SSL_SRV_C
				5277	requires_config_enabled MBEDTLS_DEBUG_C
				5278	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5279	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5280	requires_gnutls_tls1_3
				5281	requires_gnutls_next_no_ticket
				5282	requires_gnutls_next_disable_tls13_compat
				5283	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				5284	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5285	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				5286	0 \
				5287	-s "Protocol is TLSv1.3" \
				5288	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5289	-s "received signature algorithm: 0x403" \
				5290	-s "got named group: ffdhe3072(0101)" \
				5291	-s "Certificate verification was skipped" \
				5292	-C "received HelloRetryRequest message"
				5293
				5294	requires_config_enabled MBEDTLS_SSL_SRV_C
				5295	requires_config_enabled MBEDTLS_DEBUG_C
				5296	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5297	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5298	requires_gnutls_tls1_3
				5299	requires_gnutls_next_no_ticket
				5300	requires_gnutls_next_disable_tls13_compat
				5301	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				5302	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5303	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				5304	0 \
				5305	-s "Protocol is TLSv1.3" \
				5306	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5307	-s "received signature algorithm: 0x503" \
				5308	-s "got named group: ffdhe3072(0101)" \
				5309	-s "Certificate verification was skipped" \
				5310	-C "received HelloRetryRequest message"
				5311
				5312	requires_config_enabled MBEDTLS_SSL_SRV_C
				5313	requires_config_enabled MBEDTLS_DEBUG_C
				5314	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5315	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5316	requires_gnutls_tls1_3
				5317	requires_gnutls_next_no_ticket
				5318	requires_gnutls_next_disable_tls13_compat
				5319	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				5320	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5321	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				5322	0 \
				5323	-s "Protocol is TLSv1.3" \
				5324	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5325	-s "received signature algorithm: 0x603" \
				5326	-s "got named group: ffdhe3072(0101)" \
				5327	-s "Certificate verification was skipped" \
				5328	-C "received HelloRetryRequest message"
				5329
				5330	requires_config_enabled MBEDTLS_SSL_SRV_C
				5331	requires_config_enabled MBEDTLS_DEBUG_C
				5332	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5333	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5334	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5335	requires_gnutls_tls1_3
				5336	requires_gnutls_next_no_ticket
				5337	requires_gnutls_next_disable_tls13_compat
				5338	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				5339	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5340	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				5341	0 \
				5342	-s "Protocol is TLSv1.3" \
				5343	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5344	-s "received signature algorithm: 0x804" \
				5345	-s "got named group: ffdhe3072(0101)" \
				5346	-s "Certificate verification was skipped" \
				5347	-C "received HelloRetryRequest message"
				5348
				5349	requires_config_enabled MBEDTLS_SSL_SRV_C
				5350	requires_config_enabled MBEDTLS_DEBUG_C
				5351	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5352	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5353	requires_gnutls_tls1_3
				5354	requires_gnutls_next_no_ticket
				5355	requires_gnutls_next_disable_tls13_compat
				5356	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				5357	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5358	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				5359	0 \
				5360	-s "Protocol is TLSv1.3" \
				5361	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5362	-s "received signature algorithm: 0x403" \
				5363	-s "got named group: ffdhe4096(0102)" \
				5364	-s "Certificate verification was skipped" \
				5365	-C "received HelloRetryRequest message"
				5366
				5367	requires_config_enabled MBEDTLS_SSL_SRV_C
				5368	requires_config_enabled MBEDTLS_DEBUG_C
				5369	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5370	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5371	requires_gnutls_tls1_3
				5372	requires_gnutls_next_no_ticket
				5373	requires_gnutls_next_disable_tls13_compat
				5374	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				5375	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5376	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				5377	0 \
				5378	-s "Protocol is TLSv1.3" \
				5379	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5380	-s "received signature algorithm: 0x503" \
				5381	-s "got named group: ffdhe4096(0102)" \
				5382	-s "Certificate verification was skipped" \
				5383	-C "received HelloRetryRequest message"
				5384
				5385	requires_config_enabled MBEDTLS_SSL_SRV_C
				5386	requires_config_enabled MBEDTLS_DEBUG_C
				5387	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5388	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5389	requires_gnutls_tls1_3
				5390	requires_gnutls_next_no_ticket
				5391	requires_gnutls_next_disable_tls13_compat
				5392	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				5393	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5394	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				5395	0 \
				5396	-s "Protocol is TLSv1.3" \
				5397	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5398	-s "received signature algorithm: 0x603" \
				5399	-s "got named group: ffdhe4096(0102)" \
				5400	-s "Certificate verification was skipped" \
				5401	-C "received HelloRetryRequest message"
				5402
				5403	requires_config_enabled MBEDTLS_SSL_SRV_C
				5404	requires_config_enabled MBEDTLS_DEBUG_C
				5405	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5406	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5407	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5408	requires_gnutls_tls1_3
				5409	requires_gnutls_next_no_ticket
				5410	requires_gnutls_next_disable_tls13_compat
				5411	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				5412	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5413	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				5414	0 \
				5415	-s "Protocol is TLSv1.3" \
				5416	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5417	-s "received signature algorithm: 0x804" \
				5418	-s "got named group: ffdhe4096(0102)" \
				5419	-s "Certificate verification was skipped" \
				5420	-C "received HelloRetryRequest message"
				5421
				5422	requires_config_enabled MBEDTLS_SSL_SRV_C
				5423	requires_config_enabled MBEDTLS_DEBUG_C
				5424	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5425	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5426	requires_gnutls_tls1_3
				5427	requires_gnutls_next_no_ticket
				5428	requires_gnutls_next_disable_tls13_compat
				5429	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				5430	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5431	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				5432	0 \
				5433	-s "Protocol is TLSv1.3" \
				5434	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5435	-s "received signature algorithm: 0x403" \
				5436	-s "got named group: ffdhe6144(0103)" \
				5437	-s "Certificate verification was skipped" \
				5438	-C "received HelloRetryRequest message"
				5439
				5440	requires_config_enabled MBEDTLS_SSL_SRV_C
				5441	requires_config_enabled MBEDTLS_DEBUG_C
				5442	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5443	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5444	requires_gnutls_tls1_3
				5445	requires_gnutls_next_no_ticket
				5446	requires_gnutls_next_disable_tls13_compat
				5447	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				5448	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5449	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				5450	0 \
				5451	-s "Protocol is TLSv1.3" \
				5452	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5453	-s "received signature algorithm: 0x503" \
				5454	-s "got named group: ffdhe6144(0103)" \
				5455	-s "Certificate verification was skipped" \
				5456	-C "received HelloRetryRequest message"
				5457
				5458	requires_config_enabled MBEDTLS_SSL_SRV_C
				5459	requires_config_enabled MBEDTLS_DEBUG_C
				5460	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5461	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5462	requires_gnutls_tls1_3
				5463	requires_gnutls_next_no_ticket
				5464	requires_gnutls_next_disable_tls13_compat
				5465	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				5466	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5467	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				5468	0 \
				5469	-s "Protocol is TLSv1.3" \
				5470	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5471	-s "received signature algorithm: 0x603" \
				5472	-s "got named group: ffdhe6144(0103)" \
				5473	-s "Certificate verification was skipped" \
				5474	-C "received HelloRetryRequest message"
				5475
				5476	requires_config_enabled MBEDTLS_SSL_SRV_C
				5477	requires_config_enabled MBEDTLS_DEBUG_C
				5478	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5479	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5480	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5481	requires_gnutls_tls1_3
				5482	requires_gnutls_next_no_ticket
				5483	requires_gnutls_next_disable_tls13_compat
				5484	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				5485	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5486	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				5487	0 \
				5488	-s "Protocol is TLSv1.3" \
				5489	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5490	-s "received signature algorithm: 0x804" \
				5491	-s "got named group: ffdhe6144(0103)" \
				5492	-s "Certificate verification was skipped" \
				5493	-C "received HelloRetryRequest message"
				5494
				5495	requires_config_enabled MBEDTLS_SSL_SRV_C
				5496	requires_config_enabled MBEDTLS_DEBUG_C
				5497	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5498	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5499	requires_gnutls_tls1_3
				5500	requires_gnutls_next_no_ticket
				5501	requires_gnutls_next_disable_tls13_compat
				5502	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				5503	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5504	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				5505	0 \
				5506	-s "Protocol is TLSv1.3" \
				5507	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5508	-s "received signature algorithm: 0x403" \
				5509	-s "got named group: ffdhe8192(0104)" \
				5510	-s "Certificate verification was skipped" \
				5511	-C "received HelloRetryRequest message"
				5512
				5513	requires_config_enabled MBEDTLS_SSL_SRV_C
				5514	requires_config_enabled MBEDTLS_DEBUG_C
				5515	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5516	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5517	requires_gnutls_tls1_3
				5518	requires_gnutls_next_no_ticket
				5519	requires_gnutls_next_disable_tls13_compat
				5520	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				5521	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5522	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				5523	0 \
				5524	-s "Protocol is TLSv1.3" \
				5525	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5526	-s "received signature algorithm: 0x503" \
				5527	-s "got named group: ffdhe8192(0104)" \
				5528	-s "Certificate verification was skipped" \
				5529	-C "received HelloRetryRequest message"
				5530
				5531	requires_config_enabled MBEDTLS_SSL_SRV_C
				5532	requires_config_enabled MBEDTLS_DEBUG_C
				5533	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5534	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5535	requires_gnutls_tls1_3
				5536	requires_gnutls_next_no_ticket
				5537	requires_gnutls_next_disable_tls13_compat
				5538	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				5539	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5540	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				5541	0 \
				5542	-s "Protocol is TLSv1.3" \
				5543	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5544	-s "received signature algorithm: 0x603" \
				5545	-s "got named group: ffdhe8192(0104)" \
				5546	-s "Certificate verification was skipped" \
				5547	-C "received HelloRetryRequest message"
				5548
				5549	requires_config_enabled MBEDTLS_SSL_SRV_C
				5550	requires_config_enabled MBEDTLS_DEBUG_C
				5551	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5552	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5553	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5554	requires_gnutls_tls1_3
				5555	requires_gnutls_next_no_ticket
				5556	requires_gnutls_next_disable_tls13_compat
				5557	run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				5558	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5559	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				5560	0 \
				5561	-s "Protocol is TLSv1.3" \
				5562	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				5563	-s "received signature algorithm: 0x804" \
				5564	-s "got named group: ffdhe8192(0104)" \
				5565	-s "Certificate verification was skipped" \
				5566	-C "received HelloRetryRequest message"
				5567
				5568	requires_config_enabled MBEDTLS_SSL_SRV_C
				5569	requires_config_enabled MBEDTLS_DEBUG_C
				5570	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5571	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5572	requires_gnutls_tls1_3
				5573	requires_gnutls_next_no_ticket
				5574	requires_gnutls_next_disable_tls13_compat
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5575	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5576	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5577	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5578	0 \
				5579	-s "Protocol is TLSv1.3" \
				5580	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5581	-s "received signature algorithm: 0x403" \
				5582	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5583	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5584	-C "received HelloRetryRequest message"
				5585
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5586	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5587	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5588	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5589	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5590	requires_gnutls_tls1_3
				5591	requires_gnutls_next_no_ticket
				5592	requires_gnutls_next_disable_tls13_compat
				5593	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5594	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5595	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5596	0 \
				5597	-s "Protocol is TLSv1.3" \
				5598	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5599	-s "received signature algorithm: 0x503" \
				5600	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5601	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5602	-C "received HelloRetryRequest message"
				5603
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5604	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5605	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5606	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5607	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5608	requires_gnutls_tls1_3
				5609	requires_gnutls_next_no_ticket
				5610	requires_gnutls_next_disable_tls13_compat
				5611	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5612	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5613	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5614	0 \
				5615	-s "Protocol is TLSv1.3" \
				5616	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5617	-s "received signature algorithm: 0x603" \
				5618	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5619	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5620	-C "received HelloRetryRequest message"
				5621
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5622	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5623	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5624	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5625	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5626	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5627	requires_gnutls_tls1_3
				5628	requires_gnutls_next_no_ticket
				5629	requires_gnutls_next_disable_tls13_compat
				5630	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5631	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5632	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5633	0 \
				5634	-s "Protocol is TLSv1.3" \
				5635	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5636	-s "received signature algorithm: 0x804" \
				5637	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5638	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5639	-C "received HelloRetryRequest message"
				5640
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5641	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5642	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5643	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5644	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5645	requires_gnutls_tls1_3
				5646	requires_gnutls_next_no_ticket
				5647	requires_gnutls_next_disable_tls13_compat
				5648	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5649	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5650	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5651	0 \
				5652	-s "Protocol is TLSv1.3" \
				5653	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5654	-s "received signature algorithm: 0x403" \
				5655	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5656	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5657	-C "received HelloRetryRequest message"
				5658
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5659	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5660	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5661	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5662	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5663	requires_gnutls_tls1_3
				5664	requires_gnutls_next_no_ticket
				5665	requires_gnutls_next_disable_tls13_compat
				5666	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5667	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5668	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5669	0 \
				5670	-s "Protocol is TLSv1.3" \
				5671	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5672	-s "received signature algorithm: 0x503" \
				5673	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5674	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5675	-C "received HelloRetryRequest message"
				5676
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5677	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5678	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5679	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5680	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5681	requires_gnutls_tls1_3
				5682	requires_gnutls_next_no_ticket
				5683	requires_gnutls_next_disable_tls13_compat
				5684	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5685	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5686	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5687	0 \
				5688	-s "Protocol is TLSv1.3" \
				5689	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5690	-s "received signature algorithm: 0x603" \
				5691	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5692	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5693	-C "received HelloRetryRequest message"
				5694
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5695	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5696	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5697	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5698	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5699	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5700	requires_gnutls_tls1_3
				5701	requires_gnutls_next_no_ticket
				5702	requires_gnutls_next_disable_tls13_compat
				5703	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5704	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5705	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5706	0 \
				5707	-s "Protocol is TLSv1.3" \
				5708	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5709	-s "received signature algorithm: 0x804" \
				5710	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5711	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5712	-C "received HelloRetryRequest message"
				5713
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5714	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5715	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5716	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5717	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5718	requires_gnutls_tls1_3
				5719	requires_gnutls_next_no_ticket
				5720	requires_gnutls_next_disable_tls13_compat
				5721	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5722	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5723	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5724	0 \
				5725	-s "Protocol is TLSv1.3" \
				5726	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5727	-s "received signature algorithm: 0x403" \
				5728	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5729	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5730	-C "received HelloRetryRequest message"
				5731
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5732	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5733	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5734	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5735	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5736	requires_gnutls_tls1_3
				5737	requires_gnutls_next_no_ticket
				5738	requires_gnutls_next_disable_tls13_compat
				5739	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5740	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5741	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5742	0 \
				5743	-s "Protocol is TLSv1.3" \
				5744	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5745	-s "received signature algorithm: 0x503" \
				5746	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5747	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5748	-C "received HelloRetryRequest message"
				5749
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5750	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5751	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5752	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5753	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5754	requires_gnutls_tls1_3
				5755	requires_gnutls_next_no_ticket
				5756	requires_gnutls_next_disable_tls13_compat
				5757	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5758	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5759	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5760	0 \
				5761	-s "Protocol is TLSv1.3" \
				5762	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5763	-s "received signature algorithm: 0x603" \
				5764	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5765	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5766	-C "received HelloRetryRequest message"
				5767
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5768	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5769	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5770	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5771	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5772	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5773	requires_gnutls_tls1_3
				5774	requires_gnutls_next_no_ticket
				5775	requires_gnutls_next_disable_tls13_compat
				5776	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5777	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5778	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5779	0 \
				5780	-s "Protocol is TLSv1.3" \
				5781	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5782	-s "received signature algorithm: 0x804" \
				5783	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5784	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5785	-C "received HelloRetryRequest message"
				5786
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5787	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5788	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5789	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5790	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5791	requires_gnutls_tls1_3
				5792	requires_gnutls_next_no_ticket
				5793	requires_gnutls_next_disable_tls13_compat
				5794	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5795	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5796	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5797	0 \
				5798	-s "Protocol is TLSv1.3" \
				5799	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5800	-s "received signature algorithm: 0x403" \
				5801	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5802	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5803	-C "received HelloRetryRequest message"
				5804
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5805	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5806	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5807	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5808	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5809	requires_gnutls_tls1_3
				5810	requires_gnutls_next_no_ticket
				5811	requires_gnutls_next_disable_tls13_compat
				5812	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5813	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5814	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5815	0 \
				5816	-s "Protocol is TLSv1.3" \
				5817	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5818	-s "received signature algorithm: 0x503" \
				5819	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5820	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5821	-C "received HelloRetryRequest message"
				5822
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5823	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5824	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5825	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5826	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5827	requires_gnutls_tls1_3
				5828	requires_gnutls_next_no_ticket
				5829	requires_gnutls_next_disable_tls13_compat
				5830	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5831	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5832	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5833	0 \
				5834	-s "Protocol is TLSv1.3" \
				5835	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5836	-s "received signature algorithm: 0x603" \
				5837	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5838	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5839	-C "received HelloRetryRequest message"
				5840
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5841	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5842	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5843	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5844	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5845	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5846	requires_gnutls_tls1_3
				5847	requires_gnutls_next_no_ticket
				5848	requires_gnutls_next_disable_tls13_compat
				5849	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5850	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5851	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5852	0 \
				5853	-s "Protocol is TLSv1.3" \
				5854	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5855	-s "received signature algorithm: 0x804" \
				5856	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5857	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5858	-C "received HelloRetryRequest message"
				5859
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5860	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5861	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5862	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5863	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5864	requires_gnutls_tls1_3
				5865	requires_gnutls_next_no_ticket
				5866	requires_gnutls_next_disable_tls13_compat
				5867	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5868	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5869	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5870	0 \
				5871	-s "Protocol is TLSv1.3" \
				5872	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5873	-s "received signature algorithm: 0x403" \
				5874	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5875	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5876	-C "received HelloRetryRequest message"
				5877
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5878	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5879	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5880	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5881	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5882	requires_gnutls_tls1_3
				5883	requires_gnutls_next_no_ticket
				5884	requires_gnutls_next_disable_tls13_compat
				5885	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5886	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5887	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5888	0 \
				5889	-s "Protocol is TLSv1.3" \
				5890	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5891	-s "received signature algorithm: 0x503" \
				5892	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5893	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5894	-C "received HelloRetryRequest message"
				5895
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5896	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5897	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5898	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5899	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5900	requires_gnutls_tls1_3
				5901	requires_gnutls_next_no_ticket
				5902	requires_gnutls_next_disable_tls13_compat
				5903	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5904	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5905	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5906	0 \
				5907	-s "Protocol is TLSv1.3" \
				5908	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5909	-s "received signature algorithm: 0x603" \
				5910	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5911	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5912	-C "received HelloRetryRequest message"
				5913
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5914	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5915	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5916	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5917	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5918	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5919	requires_gnutls_tls1_3
				5920	requires_gnutls_next_no_ticket
				5921	requires_gnutls_next_disable_tls13_compat
				5922	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	5923	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	5924	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5925	0 \
				5926	-s "Protocol is TLSv1.3" \
				5927	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5928	-s "received signature algorithm: 0x804" \
				5929	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	5930	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5931	-C "received HelloRetryRequest message"
				5932
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	5933	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	5934	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	5935	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	5936	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5937	requires_gnutls_tls1_3
				5938	requires_gnutls_next_no_ticket
				5939	requires_gnutls_next_disable_tls13_compat
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	5940	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				5941	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5942	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				5943	0 \
				5944	-s "Protocol is TLSv1.3" \
				5945	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5946	-s "received signature algorithm: 0x403" \
				5947	-s "got named group: ffdhe2048(0100)" \
				5948	-s "Certificate verification was skipped" \
				5949	-C "received HelloRetryRequest message"
				5950
				5951	requires_config_enabled MBEDTLS_SSL_SRV_C
				5952	requires_config_enabled MBEDTLS_DEBUG_C
				5953	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5954	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5955	requires_gnutls_tls1_3
				5956	requires_gnutls_next_no_ticket
				5957	requires_gnutls_next_disable_tls13_compat
				5958	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				5959	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5960	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				5961	0 \
				5962	-s "Protocol is TLSv1.3" \
				5963	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5964	-s "received signature algorithm: 0x503" \
				5965	-s "got named group: ffdhe2048(0100)" \
				5966	-s "Certificate verification was skipped" \
				5967	-C "received HelloRetryRequest message"
				5968
				5969	requires_config_enabled MBEDTLS_SSL_SRV_C
				5970	requires_config_enabled MBEDTLS_DEBUG_C
				5971	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5972	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5973	requires_gnutls_tls1_3
				5974	requires_gnutls_next_no_ticket
				5975	requires_gnutls_next_disable_tls13_compat
				5976	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				5977	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5978	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				5979	0 \
				5980	-s "Protocol is TLSv1.3" \
				5981	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				5982	-s "received signature algorithm: 0x603" \
				5983	-s "got named group: ffdhe2048(0100)" \
				5984	-s "Certificate verification was skipped" \
				5985	-C "received HelloRetryRequest message"
				5986
				5987	requires_config_enabled MBEDTLS_SSL_SRV_C
				5988	requires_config_enabled MBEDTLS_DEBUG_C
				5989	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				5990	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				5991	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				5992	requires_gnutls_tls1_3
				5993	requires_gnutls_next_no_ticket
				5994	requires_gnutls_next_disable_tls13_compat
				5995	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				5996	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				5997	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				5998	0 \
				5999	-s "Protocol is TLSv1.3" \
				6000	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6001	-s "received signature algorithm: 0x804" \
				6002	-s "got named group: ffdhe2048(0100)" \
				6003	-s "Certificate verification was skipped" \
				6004	-C "received HelloRetryRequest message"
				6005
				6006	requires_config_enabled MBEDTLS_SSL_SRV_C
				6007	requires_config_enabled MBEDTLS_DEBUG_C
				6008	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6009	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6010	requires_gnutls_tls1_3
				6011	requires_gnutls_next_no_ticket
				6012	requires_gnutls_next_disable_tls13_compat
				6013	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				6014	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6015	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				6016	0 \
				6017	-s "Protocol is TLSv1.3" \
				6018	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6019	-s "received signature algorithm: 0x403" \
				6020	-s "got named group: ffdhe3072(0101)" \
				6021	-s "Certificate verification was skipped" \
				6022	-C "received HelloRetryRequest message"
				6023
				6024	requires_config_enabled MBEDTLS_SSL_SRV_C
				6025	requires_config_enabled MBEDTLS_DEBUG_C
				6026	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6027	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6028	requires_gnutls_tls1_3
				6029	requires_gnutls_next_no_ticket
				6030	requires_gnutls_next_disable_tls13_compat
				6031	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				6032	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6033	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				6034	0 \
				6035	-s "Protocol is TLSv1.3" \
				6036	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6037	-s "received signature algorithm: 0x503" \
				6038	-s "got named group: ffdhe3072(0101)" \
				6039	-s "Certificate verification was skipped" \
				6040	-C "received HelloRetryRequest message"
				6041
				6042	requires_config_enabled MBEDTLS_SSL_SRV_C
				6043	requires_config_enabled MBEDTLS_DEBUG_C
				6044	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6045	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6046	requires_gnutls_tls1_3
				6047	requires_gnutls_next_no_ticket
				6048	requires_gnutls_next_disable_tls13_compat
				6049	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				6050	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6051	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				6052	0 \
				6053	-s "Protocol is TLSv1.3" \
				6054	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6055	-s "received signature algorithm: 0x603" \
				6056	-s "got named group: ffdhe3072(0101)" \
				6057	-s "Certificate verification was skipped" \
				6058	-C "received HelloRetryRequest message"
				6059
				6060	requires_config_enabled MBEDTLS_SSL_SRV_C
				6061	requires_config_enabled MBEDTLS_DEBUG_C
				6062	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6063	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6064	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6065	requires_gnutls_tls1_3
				6066	requires_gnutls_next_no_ticket
				6067	requires_gnutls_next_disable_tls13_compat
				6068	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				6069	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6070	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				6071	0 \
				6072	-s "Protocol is TLSv1.3" \
				6073	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6074	-s "received signature algorithm: 0x804" \
				6075	-s "got named group: ffdhe3072(0101)" \
				6076	-s "Certificate verification was skipped" \
				6077	-C "received HelloRetryRequest message"
				6078
				6079	requires_config_enabled MBEDTLS_SSL_SRV_C
				6080	requires_config_enabled MBEDTLS_DEBUG_C
				6081	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6082	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6083	requires_gnutls_tls1_3
				6084	requires_gnutls_next_no_ticket
				6085	requires_gnutls_next_disable_tls13_compat
				6086	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				6087	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6088	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				6089	0 \
				6090	-s "Protocol is TLSv1.3" \
				6091	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6092	-s "received signature algorithm: 0x403" \
				6093	-s "got named group: ffdhe4096(0102)" \
				6094	-s "Certificate verification was skipped" \
				6095	-C "received HelloRetryRequest message"
				6096
				6097	requires_config_enabled MBEDTLS_SSL_SRV_C
				6098	requires_config_enabled MBEDTLS_DEBUG_C
				6099	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6100	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6101	requires_gnutls_tls1_3
				6102	requires_gnutls_next_no_ticket
				6103	requires_gnutls_next_disable_tls13_compat
				6104	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				6105	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6106	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				6107	0 \
				6108	-s "Protocol is TLSv1.3" \
				6109	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6110	-s "received signature algorithm: 0x503" \
				6111	-s "got named group: ffdhe4096(0102)" \
				6112	-s "Certificate verification was skipped" \
				6113	-C "received HelloRetryRequest message"
				6114
				6115	requires_config_enabled MBEDTLS_SSL_SRV_C
				6116	requires_config_enabled MBEDTLS_DEBUG_C
				6117	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6118	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6119	requires_gnutls_tls1_3
				6120	requires_gnutls_next_no_ticket
				6121	requires_gnutls_next_disable_tls13_compat
				6122	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				6123	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6124	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				6125	0 \
				6126	-s "Protocol is TLSv1.3" \
				6127	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6128	-s "received signature algorithm: 0x603" \
				6129	-s "got named group: ffdhe4096(0102)" \
				6130	-s "Certificate verification was skipped" \
				6131	-C "received HelloRetryRequest message"
				6132
				6133	requires_config_enabled MBEDTLS_SSL_SRV_C
				6134	requires_config_enabled MBEDTLS_DEBUG_C
				6135	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6136	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6137	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6138	requires_gnutls_tls1_3
				6139	requires_gnutls_next_no_ticket
				6140	requires_gnutls_next_disable_tls13_compat
				6141	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				6142	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6143	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				6144	0 \
				6145	-s "Protocol is TLSv1.3" \
				6146	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6147	-s "received signature algorithm: 0x804" \
				6148	-s "got named group: ffdhe4096(0102)" \
				6149	-s "Certificate verification was skipped" \
				6150	-C "received HelloRetryRequest message"
				6151
				6152	requires_config_enabled MBEDTLS_SSL_SRV_C
				6153	requires_config_enabled MBEDTLS_DEBUG_C
				6154	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6155	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6156	requires_gnutls_tls1_3
				6157	requires_gnutls_next_no_ticket
				6158	requires_gnutls_next_disable_tls13_compat
				6159	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				6160	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6161	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				6162	0 \
				6163	-s "Protocol is TLSv1.3" \
				6164	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6165	-s "received signature algorithm: 0x403" \
				6166	-s "got named group: ffdhe6144(0103)" \
				6167	-s "Certificate verification was skipped" \
				6168	-C "received HelloRetryRequest message"
				6169
				6170	requires_config_enabled MBEDTLS_SSL_SRV_C
				6171	requires_config_enabled MBEDTLS_DEBUG_C
				6172	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6173	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6174	requires_gnutls_tls1_3
				6175	requires_gnutls_next_no_ticket
				6176	requires_gnutls_next_disable_tls13_compat
				6177	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				6178	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6179	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				6180	0 \
				6181	-s "Protocol is TLSv1.3" \
				6182	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6183	-s "received signature algorithm: 0x503" \
				6184	-s "got named group: ffdhe6144(0103)" \
				6185	-s "Certificate verification was skipped" \
				6186	-C "received HelloRetryRequest message"
				6187
				6188	requires_config_enabled MBEDTLS_SSL_SRV_C
				6189	requires_config_enabled MBEDTLS_DEBUG_C
				6190	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6191	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6192	requires_gnutls_tls1_3
				6193	requires_gnutls_next_no_ticket
				6194	requires_gnutls_next_disable_tls13_compat
				6195	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				6196	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6197	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				6198	0 \
				6199	-s "Protocol is TLSv1.3" \
				6200	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6201	-s "received signature algorithm: 0x603" \
				6202	-s "got named group: ffdhe6144(0103)" \
				6203	-s "Certificate verification was skipped" \
				6204	-C "received HelloRetryRequest message"
				6205
				6206	requires_config_enabled MBEDTLS_SSL_SRV_C
				6207	requires_config_enabled MBEDTLS_DEBUG_C
				6208	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6209	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6210	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6211	requires_gnutls_tls1_3
				6212	requires_gnutls_next_no_ticket
				6213	requires_gnutls_next_disable_tls13_compat
				6214	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				6215	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6216	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				6217	0 \
				6218	-s "Protocol is TLSv1.3" \
				6219	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6220	-s "received signature algorithm: 0x804" \
				6221	-s "got named group: ffdhe6144(0103)" \
				6222	-s "Certificate verification was skipped" \
				6223	-C "received HelloRetryRequest message"
				6224
				6225	requires_config_enabled MBEDTLS_SSL_SRV_C
				6226	requires_config_enabled MBEDTLS_DEBUG_C
				6227	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6228	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6229	requires_gnutls_tls1_3
				6230	requires_gnutls_next_no_ticket
				6231	requires_gnutls_next_disable_tls13_compat
				6232	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				6233	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6234	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				6235	0 \
				6236	-s "Protocol is TLSv1.3" \
				6237	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6238	-s "received signature algorithm: 0x403" \
				6239	-s "got named group: ffdhe8192(0104)" \
				6240	-s "Certificate verification was skipped" \
				6241	-C "received HelloRetryRequest message"
				6242
				6243	requires_config_enabled MBEDTLS_SSL_SRV_C
				6244	requires_config_enabled MBEDTLS_DEBUG_C
				6245	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6246	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6247	requires_gnutls_tls1_3
				6248	requires_gnutls_next_no_ticket
				6249	requires_gnutls_next_disable_tls13_compat
				6250	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				6251	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6252	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				6253	0 \
				6254	-s "Protocol is TLSv1.3" \
				6255	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6256	-s "received signature algorithm: 0x503" \
				6257	-s "got named group: ffdhe8192(0104)" \
				6258	-s "Certificate verification was skipped" \
				6259	-C "received HelloRetryRequest message"
				6260
				6261	requires_config_enabled MBEDTLS_SSL_SRV_C
				6262	requires_config_enabled MBEDTLS_DEBUG_C
				6263	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6264	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6265	requires_gnutls_tls1_3
				6266	requires_gnutls_next_no_ticket
				6267	requires_gnutls_next_disable_tls13_compat
				6268	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				6269	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6270	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				6271	0 \
				6272	-s "Protocol is TLSv1.3" \
				6273	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6274	-s "received signature algorithm: 0x603" \
				6275	-s "got named group: ffdhe8192(0104)" \
				6276	-s "Certificate verification was skipped" \
				6277	-C "received HelloRetryRequest message"
				6278
				6279	requires_config_enabled MBEDTLS_SSL_SRV_C
				6280	requires_config_enabled MBEDTLS_DEBUG_C
				6281	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6282	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6283	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6284	requires_gnutls_tls1_3
				6285	requires_gnutls_next_no_ticket
				6286	requires_gnutls_next_disable_tls13_compat
				6287	run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				6288	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6289	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				6290	0 \
				6291	-s "Protocol is TLSv1.3" \
				6292	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				6293	-s "received signature algorithm: 0x804" \
				6294	-s "got named group: ffdhe8192(0104)" \
				6295	-s "Certificate verification was skipped" \
				6296	-C "received HelloRetryRequest message"
				6297
				6298	requires_config_enabled MBEDTLS_SSL_SRV_C
				6299	requires_config_enabled MBEDTLS_DEBUG_C
				6300	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6301	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6302	requires_gnutls_tls1_3
				6303	requires_gnutls_next_no_ticket
				6304	requires_gnutls_next_disable_tls13_compat
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6305	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6306	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6307	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6308	0 \
				6309	-s "Protocol is TLSv1.3" \
				6310	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6311	-s "received signature algorithm: 0x403" \
				6312	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6313	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6314	-C "received HelloRetryRequest message"
				6315
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6316	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6317	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6318	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6319	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6320	requires_gnutls_tls1_3
				6321	requires_gnutls_next_no_ticket
				6322	requires_gnutls_next_disable_tls13_compat
				6323	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6324	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6325	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6326	0 \
				6327	-s "Protocol is TLSv1.3" \
				6328	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6329	-s "received signature algorithm: 0x503" \
				6330	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6331	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6332	-C "received HelloRetryRequest message"
				6333
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6334	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6335	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6336	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6337	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6338	requires_gnutls_tls1_3
				6339	requires_gnutls_next_no_ticket
				6340	requires_gnutls_next_disable_tls13_compat
				6341	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6342	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6343	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6344	0 \
				6345	-s "Protocol is TLSv1.3" \
				6346	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6347	-s "received signature algorithm: 0x603" \
				6348	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6349	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6350	-C "received HelloRetryRequest message"
				6351
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6352	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6353	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6354	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6355	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6356	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6357	requires_gnutls_tls1_3
				6358	requires_gnutls_next_no_ticket
				6359	requires_gnutls_next_disable_tls13_compat
				6360	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6361	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6362	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6363	0 \
				6364	-s "Protocol is TLSv1.3" \
				6365	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6366	-s "received signature algorithm: 0x804" \
				6367	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6368	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6369	-C "received HelloRetryRequest message"
				6370
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6371	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6372	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6373	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6374	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6375	requires_gnutls_tls1_3
				6376	requires_gnutls_next_no_ticket
				6377	requires_gnutls_next_disable_tls13_compat
				6378	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6379	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6380	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6381	0 \
				6382	-s "Protocol is TLSv1.3" \
				6383	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6384	-s "received signature algorithm: 0x403" \
				6385	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6386	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6387	-C "received HelloRetryRequest message"
				6388
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6389	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6390	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6391	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6392	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6393	requires_gnutls_tls1_3
				6394	requires_gnutls_next_no_ticket
				6395	requires_gnutls_next_disable_tls13_compat
				6396	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6397	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6398	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6399	0 \
				6400	-s "Protocol is TLSv1.3" \
				6401	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6402	-s "received signature algorithm: 0x503" \
				6403	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6404	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6405	-C "received HelloRetryRequest message"
				6406
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6407	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6408	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6409	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6410	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6411	requires_gnutls_tls1_3
				6412	requires_gnutls_next_no_ticket
				6413	requires_gnutls_next_disable_tls13_compat
				6414	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6415	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6416	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6417	0 \
				6418	-s "Protocol is TLSv1.3" \
				6419	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6420	-s "received signature algorithm: 0x603" \
				6421	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6422	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6423	-C "received HelloRetryRequest message"
				6424
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6425	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6426	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6427	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6428	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6429	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6430	requires_gnutls_tls1_3
				6431	requires_gnutls_next_no_ticket
				6432	requires_gnutls_next_disable_tls13_compat
				6433	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6434	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6435	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6436	0 \
				6437	-s "Protocol is TLSv1.3" \
				6438	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6439	-s "received signature algorithm: 0x804" \
				6440	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6441	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6442	-C "received HelloRetryRequest message"
				6443
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6444	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6445	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6446	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6447	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6448	requires_gnutls_tls1_3
				6449	requires_gnutls_next_no_ticket
				6450	requires_gnutls_next_disable_tls13_compat
				6451	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6452	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6453	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6454	0 \
				6455	-s "Protocol is TLSv1.3" \
				6456	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6457	-s "received signature algorithm: 0x403" \
				6458	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6459	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6460	-C "received HelloRetryRequest message"
				6461
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6462	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6463	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6464	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6465	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6466	requires_gnutls_tls1_3
				6467	requires_gnutls_next_no_ticket
				6468	requires_gnutls_next_disable_tls13_compat
				6469	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6470	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6471	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6472	0 \
				6473	-s "Protocol is TLSv1.3" \
				6474	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6475	-s "received signature algorithm: 0x503" \
				6476	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6477	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6478	-C "received HelloRetryRequest message"
				6479
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6480	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6481	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6482	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6483	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6484	requires_gnutls_tls1_3
				6485	requires_gnutls_next_no_ticket
				6486	requires_gnutls_next_disable_tls13_compat
				6487	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6488	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6489	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6490	0 \
				6491	-s "Protocol is TLSv1.3" \
				6492	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6493	-s "received signature algorithm: 0x603" \
				6494	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6495	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6496	-C "received HelloRetryRequest message"
				6497
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6498	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6499	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6500	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6501	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6502	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6503	requires_gnutls_tls1_3
				6504	requires_gnutls_next_no_ticket
				6505	requires_gnutls_next_disable_tls13_compat
				6506	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6507	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6508	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6509	0 \
				6510	-s "Protocol is TLSv1.3" \
				6511	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6512	-s "received signature algorithm: 0x804" \
				6513	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6514	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6515	-C "received HelloRetryRequest message"
				6516
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6517	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6518	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6519	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6520	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6521	requires_gnutls_tls1_3
				6522	requires_gnutls_next_no_ticket
				6523	requires_gnutls_next_disable_tls13_compat
				6524	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6525	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6526	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6527	0 \
				6528	-s "Protocol is TLSv1.3" \
				6529	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6530	-s "received signature algorithm: 0x403" \
				6531	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6532	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6533	-C "received HelloRetryRequest message"
				6534
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6535	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6536	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6537	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6538	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6539	requires_gnutls_tls1_3
				6540	requires_gnutls_next_no_ticket
				6541	requires_gnutls_next_disable_tls13_compat
				6542	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6543	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6544	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6545	0 \
				6546	-s "Protocol is TLSv1.3" \
				6547	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6548	-s "received signature algorithm: 0x503" \
				6549	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6550	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6551	-C "received HelloRetryRequest message"
				6552
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6553	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6554	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6555	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6556	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6557	requires_gnutls_tls1_3
				6558	requires_gnutls_next_no_ticket
				6559	requires_gnutls_next_disable_tls13_compat
				6560	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6561	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6562	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6563	0 \
				6564	-s "Protocol is TLSv1.3" \
				6565	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6566	-s "received signature algorithm: 0x603" \
				6567	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6568	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6569	-C "received HelloRetryRequest message"
				6570
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6571	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6572	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6573	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6574	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6575	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6576	requires_gnutls_tls1_3
				6577	requires_gnutls_next_no_ticket
				6578	requires_gnutls_next_disable_tls13_compat
				6579	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6580	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6581	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6582	0 \
				6583	-s "Protocol is TLSv1.3" \
				6584	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6585	-s "received signature algorithm: 0x804" \
				6586	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6587	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6588	-C "received HelloRetryRequest message"
				6589
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6590	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6591	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6592	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6593	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6594	requires_gnutls_tls1_3
				6595	requires_gnutls_next_no_ticket
				6596	requires_gnutls_next_disable_tls13_compat
				6597	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6598	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6599	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6600	0 \
				6601	-s "Protocol is TLSv1.3" \
				6602	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6603	-s "received signature algorithm: 0x403" \
				6604	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6605	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6606	-C "received HelloRetryRequest message"
				6607
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6608	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6609	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6610	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6611	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6612	requires_gnutls_tls1_3
				6613	requires_gnutls_next_no_ticket
				6614	requires_gnutls_next_disable_tls13_compat
				6615	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6616	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6617	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6618	0 \
				6619	-s "Protocol is TLSv1.3" \
				6620	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6621	-s "received signature algorithm: 0x503" \
				6622	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6623	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6624	-C "received HelloRetryRequest message"
				6625
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6626	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6627	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6628	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6629	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6630	requires_gnutls_tls1_3
				6631	requires_gnutls_next_no_ticket
				6632	requires_gnutls_next_disable_tls13_compat
				6633	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6634	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6635	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6636	0 \
				6637	-s "Protocol is TLSv1.3" \
				6638	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6639	-s "received signature algorithm: 0x603" \
				6640	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6641	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6642	-C "received HelloRetryRequest message"
				6643
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	6644	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	6645	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	6646	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6647	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6648	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6649	requires_gnutls_tls1_3
				6650	requires_gnutls_next_no_ticket
				6651	requires_gnutls_next_disable_tls13_compat
				6652	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	6653	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	6654	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6655	0 \
				6656	-s "Protocol is TLSv1.3" \
				6657	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6658	-s "received signature algorithm: 0x804" \
				6659	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	6660	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	6661	-C "received HelloRetryRequest message"
				6662
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	6663	requires_config_enabled MBEDTLS_SSL_SRV_C
				6664	requires_config_enabled MBEDTLS_DEBUG_C
				6665	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6666	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6667	requires_gnutls_tls1_3
				6668	requires_gnutls_next_no_ticket
				6669	requires_gnutls_next_disable_tls13_compat
				6670	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				6671	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6672	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				6673	0 \
				6674	-s "Protocol is TLSv1.3" \
				6675	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6676	-s "received signature algorithm: 0x403" \
				6677	-s "got named group: ffdhe2048(0100)" \
				6678	-s "Certificate verification was skipped" \
				6679	-C "received HelloRetryRequest message"
				6680
				6681	requires_config_enabled MBEDTLS_SSL_SRV_C
				6682	requires_config_enabled MBEDTLS_DEBUG_C
				6683	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6684	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6685	requires_gnutls_tls1_3
				6686	requires_gnutls_next_no_ticket
				6687	requires_gnutls_next_disable_tls13_compat
				6688	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				6689	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6690	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				6691	0 \
				6692	-s "Protocol is TLSv1.3" \
				6693	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6694	-s "received signature algorithm: 0x503" \
				6695	-s "got named group: ffdhe2048(0100)" \
				6696	-s "Certificate verification was skipped" \
				6697	-C "received HelloRetryRequest message"
				6698
				6699	requires_config_enabled MBEDTLS_SSL_SRV_C
				6700	requires_config_enabled MBEDTLS_DEBUG_C
				6701	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6702	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6703	requires_gnutls_tls1_3
				6704	requires_gnutls_next_no_ticket
				6705	requires_gnutls_next_disable_tls13_compat
				6706	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				6707	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6708	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				6709	0 \
				6710	-s "Protocol is TLSv1.3" \
				6711	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6712	-s "received signature algorithm: 0x603" \
				6713	-s "got named group: ffdhe2048(0100)" \
				6714	-s "Certificate verification was skipped" \
				6715	-C "received HelloRetryRequest message"
				6716
				6717	requires_config_enabled MBEDTLS_SSL_SRV_C
				6718	requires_config_enabled MBEDTLS_DEBUG_C
				6719	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6720	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6721	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6722	requires_gnutls_tls1_3
				6723	requires_gnutls_next_no_ticket
				6724	requires_gnutls_next_disable_tls13_compat
				6725	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				6726	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6727	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				6728	0 \
				6729	-s "Protocol is TLSv1.3" \
				6730	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6731	-s "received signature algorithm: 0x804" \
				6732	-s "got named group: ffdhe2048(0100)" \
				6733	-s "Certificate verification was skipped" \
				6734	-C "received HelloRetryRequest message"
				6735
				6736	requires_config_enabled MBEDTLS_SSL_SRV_C
				6737	requires_config_enabled MBEDTLS_DEBUG_C
				6738	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6739	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6740	requires_gnutls_tls1_3
				6741	requires_gnutls_next_no_ticket
				6742	requires_gnutls_next_disable_tls13_compat
				6743	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				6744	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6745	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				6746	0 \
				6747	-s "Protocol is TLSv1.3" \
				6748	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6749	-s "received signature algorithm: 0x403" \
				6750	-s "got named group: ffdhe3072(0101)" \
				6751	-s "Certificate verification was skipped" \
				6752	-C "received HelloRetryRequest message"
				6753
				6754	requires_config_enabled MBEDTLS_SSL_SRV_C
				6755	requires_config_enabled MBEDTLS_DEBUG_C
				6756	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6757	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6758	requires_gnutls_tls1_3
				6759	requires_gnutls_next_no_ticket
				6760	requires_gnutls_next_disable_tls13_compat
				6761	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				6762	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6763	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				6764	0 \
				6765	-s "Protocol is TLSv1.3" \
				6766	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6767	-s "received signature algorithm: 0x503" \
				6768	-s "got named group: ffdhe3072(0101)" \
				6769	-s "Certificate verification was skipped" \
				6770	-C "received HelloRetryRequest message"
				6771
				6772	requires_config_enabled MBEDTLS_SSL_SRV_C
				6773	requires_config_enabled MBEDTLS_DEBUG_C
				6774	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6775	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6776	requires_gnutls_tls1_3
				6777	requires_gnutls_next_no_ticket
				6778	requires_gnutls_next_disable_tls13_compat
				6779	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				6780	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6781	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				6782	0 \
				6783	-s "Protocol is TLSv1.3" \
				6784	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6785	-s "received signature algorithm: 0x603" \
				6786	-s "got named group: ffdhe3072(0101)" \
				6787	-s "Certificate verification was skipped" \
				6788	-C "received HelloRetryRequest message"
				6789
				6790	requires_config_enabled MBEDTLS_SSL_SRV_C
				6791	requires_config_enabled MBEDTLS_DEBUG_C
				6792	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6793	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6794	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6795	requires_gnutls_tls1_3
				6796	requires_gnutls_next_no_ticket
				6797	requires_gnutls_next_disable_tls13_compat
				6798	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				6799	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6800	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				6801	0 \
				6802	-s "Protocol is TLSv1.3" \
				6803	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6804	-s "received signature algorithm: 0x804" \
				6805	-s "got named group: ffdhe3072(0101)" \
				6806	-s "Certificate verification was skipped" \
				6807	-C "received HelloRetryRequest message"
				6808
				6809	requires_config_enabled MBEDTLS_SSL_SRV_C
				6810	requires_config_enabled MBEDTLS_DEBUG_C
				6811	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6812	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6813	requires_gnutls_tls1_3
				6814	requires_gnutls_next_no_ticket
				6815	requires_gnutls_next_disable_tls13_compat
				6816	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				6817	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6818	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				6819	0 \
				6820	-s "Protocol is TLSv1.3" \
				6821	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6822	-s "received signature algorithm: 0x403" \
				6823	-s "got named group: ffdhe4096(0102)" \
				6824	-s "Certificate verification was skipped" \
				6825	-C "received HelloRetryRequest message"
				6826
				6827	requires_config_enabled MBEDTLS_SSL_SRV_C
				6828	requires_config_enabled MBEDTLS_DEBUG_C
				6829	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6830	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6831	requires_gnutls_tls1_3
				6832	requires_gnutls_next_no_ticket
				6833	requires_gnutls_next_disable_tls13_compat
				6834	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				6835	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6836	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				6837	0 \
				6838	-s "Protocol is TLSv1.3" \
				6839	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6840	-s "received signature algorithm: 0x503" \
				6841	-s "got named group: ffdhe4096(0102)" \
				6842	-s "Certificate verification was skipped" \
				6843	-C "received HelloRetryRequest message"
				6844
				6845	requires_config_enabled MBEDTLS_SSL_SRV_C
				6846	requires_config_enabled MBEDTLS_DEBUG_C
				6847	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6848	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6849	requires_gnutls_tls1_3
				6850	requires_gnutls_next_no_ticket
				6851	requires_gnutls_next_disable_tls13_compat
				6852	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				6853	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6854	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				6855	0 \
				6856	-s "Protocol is TLSv1.3" \
				6857	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6858	-s "received signature algorithm: 0x603" \
				6859	-s "got named group: ffdhe4096(0102)" \
				6860	-s "Certificate verification was skipped" \
				6861	-C "received HelloRetryRequest message"
				6862
				6863	requires_config_enabled MBEDTLS_SSL_SRV_C
				6864	requires_config_enabled MBEDTLS_DEBUG_C
				6865	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6866	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6867	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6868	requires_gnutls_tls1_3
				6869	requires_gnutls_next_no_ticket
				6870	requires_gnutls_next_disable_tls13_compat
				6871	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				6872	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6873	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				6874	0 \
				6875	-s "Protocol is TLSv1.3" \
				6876	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6877	-s "received signature algorithm: 0x804" \
				6878	-s "got named group: ffdhe4096(0102)" \
				6879	-s "Certificate verification was skipped" \
				6880	-C "received HelloRetryRequest message"
				6881
				6882	requires_config_enabled MBEDTLS_SSL_SRV_C
				6883	requires_config_enabled MBEDTLS_DEBUG_C
				6884	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6885	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6886	requires_gnutls_tls1_3
				6887	requires_gnutls_next_no_ticket
				6888	requires_gnutls_next_disable_tls13_compat
				6889	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				6890	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6891	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				6892	0 \
				6893	-s "Protocol is TLSv1.3" \
				6894	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6895	-s "received signature algorithm: 0x403" \
				6896	-s "got named group: ffdhe6144(0103)" \
				6897	-s "Certificate verification was skipped" \
				6898	-C "received HelloRetryRequest message"
				6899
				6900	requires_config_enabled MBEDTLS_SSL_SRV_C
				6901	requires_config_enabled MBEDTLS_DEBUG_C
				6902	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6903	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6904	requires_gnutls_tls1_3
				6905	requires_gnutls_next_no_ticket
				6906	requires_gnutls_next_disable_tls13_compat
				6907	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				6908	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6909	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				6910	0 \
				6911	-s "Protocol is TLSv1.3" \
				6912	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6913	-s "received signature algorithm: 0x503" \
				6914	-s "got named group: ffdhe6144(0103)" \
				6915	-s "Certificate verification was skipped" \
				6916	-C "received HelloRetryRequest message"
				6917
				6918	requires_config_enabled MBEDTLS_SSL_SRV_C
				6919	requires_config_enabled MBEDTLS_DEBUG_C
				6920	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6921	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6922	requires_gnutls_tls1_3
				6923	requires_gnutls_next_no_ticket
				6924	requires_gnutls_next_disable_tls13_compat
				6925	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				6926	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6927	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				6928	0 \
				6929	-s "Protocol is TLSv1.3" \
				6930	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6931	-s "received signature algorithm: 0x603" \
				6932	-s "got named group: ffdhe6144(0103)" \
				6933	-s "Certificate verification was skipped" \
				6934	-C "received HelloRetryRequest message"
				6935
				6936	requires_config_enabled MBEDTLS_SSL_SRV_C
				6937	requires_config_enabled MBEDTLS_DEBUG_C
				6938	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6939	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6940	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				6941	requires_gnutls_tls1_3
				6942	requires_gnutls_next_no_ticket
				6943	requires_gnutls_next_disable_tls13_compat
				6944	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				6945	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6946	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				6947	0 \
				6948	-s "Protocol is TLSv1.3" \
				6949	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6950	-s "received signature algorithm: 0x804" \
				6951	-s "got named group: ffdhe6144(0103)" \
				6952	-s "Certificate verification was skipped" \
				6953	-C "received HelloRetryRequest message"
				6954
				6955	requires_config_enabled MBEDTLS_SSL_SRV_C
				6956	requires_config_enabled MBEDTLS_DEBUG_C
				6957	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6958	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6959	requires_gnutls_tls1_3
				6960	requires_gnutls_next_no_ticket
				6961	requires_gnutls_next_disable_tls13_compat
				6962	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				6963	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6964	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				6965	0 \
				6966	-s "Protocol is TLSv1.3" \
				6967	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6968	-s "received signature algorithm: 0x403" \
				6969	-s "got named group: ffdhe8192(0104)" \
				6970	-s "Certificate verification was skipped" \
				6971	-C "received HelloRetryRequest message"
				6972
				6973	requires_config_enabled MBEDTLS_SSL_SRV_C
				6974	requires_config_enabled MBEDTLS_DEBUG_C
				6975	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6976	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6977	requires_gnutls_tls1_3
				6978	requires_gnutls_next_no_ticket
				6979	requires_gnutls_next_disable_tls13_compat
				6980	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				6981	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				6982	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				6983	0 \
				6984	-s "Protocol is TLSv1.3" \
				6985	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				6986	-s "received signature algorithm: 0x503" \
				6987	-s "got named group: ffdhe8192(0104)" \
				6988	-s "Certificate verification was skipped" \
				6989	-C "received HelloRetryRequest message"
				6990
				6991	requires_config_enabled MBEDTLS_SSL_SRV_C
				6992	requires_config_enabled MBEDTLS_DEBUG_C
				6993	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				6994	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				6995	requires_gnutls_tls1_3
				6996	requires_gnutls_next_no_ticket
				6997	requires_gnutls_next_disable_tls13_compat
				6998	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				6999	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				7000	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				7001	0 \
				7002	-s "Protocol is TLSv1.3" \
				7003	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				7004	-s "received signature algorithm: 0x603" \
				7005	-s "got named group: ffdhe8192(0104)" \
				7006	-s "Certificate verification was skipped" \
				7007	-C "received HelloRetryRequest message"
				7008
				7009	requires_config_enabled MBEDTLS_SSL_SRV_C
				7010	requires_config_enabled MBEDTLS_DEBUG_C
				7011	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7012	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7013	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				7014	requires_gnutls_tls1_3
				7015	requires_gnutls_next_no_ticket
				7016	requires_gnutls_next_disable_tls13_compat
				7017	run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				7018	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				7019	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				7020	0 \
				7021	-s "Protocol is TLSv1.3" \
				7022	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				7023	-s "received signature algorithm: 0x804" \
				7024	-s "got named group: ffdhe8192(0104)" \
				7025	-s "Certificate verification was skipped" \
				7026	-C "received HelloRetryRequest message"
				7027
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7028	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7029	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7030	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7031	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7032	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7033	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7034	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7035	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7036	0 \
				7037	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7038	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7039	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7040	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7041	-c "NamedGroup: secp256r1 ( 17 )" \
				7042	-c "Verifying peer X.509 certificate... ok" \
				7043	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7044
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7045	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7046	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7047	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7048	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7049	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7050	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7051	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7052	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7053	0 \
				7054	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7055	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7056	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7057	-c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7058	-c "NamedGroup: secp256r1 ( 17 )" \
				7059	-c "Verifying peer X.509 certificate... ok" \
				7060	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7061
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7062	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7063	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7064	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7065	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7066	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7067	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7068	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7069	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7070	0 \
				7071	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7072	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7073	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7074	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7075	-c "NamedGroup: secp256r1 ( 17 )" \
				7076	-c "Verifying peer X.509 certificate... ok" \
				7077	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7078
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7079	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7080	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7081	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7082	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7083	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7084	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7085	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7086	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7087	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7088	0 \
				7089	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7090	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7091	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7092	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7093	-c "NamedGroup: secp256r1 ( 17 )" \
				7094	-c "Verifying peer X.509 certificate... ok" \
				7095	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7096
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7097	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7098	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7099	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7100	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7101	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7102	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7103	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7104	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7105	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7106	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7107	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7108	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7109	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7110	-c "NamedGroup: secp384r1 ( 18 )" \
				7111	-c "Verifying peer X.509 certificate... ok" \
				7112	-C "received HelloRetryRequest message"
				7113
				7114	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7115	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7116	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7117	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7118	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7119	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7120	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7121	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7122	0 \
				7123	-c "HTTP/1.0 200 ok" \
				7124	-c "Protocol is TLSv1.3" \
				7125	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7126	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7127	-c "NamedGroup: secp384r1 ( 18 )" \
				7128	-c "Verifying peer X.509 certificate... ok" \
				7129	-C "received HelloRetryRequest message"
				7130
				7131	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7132	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7133	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7134	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7135	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7136	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7137	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7138	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7139	0 \
				7140	-c "HTTP/1.0 200 ok" \
				7141	-c "Protocol is TLSv1.3" \
				7142	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7143	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7144	-c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7145	-c "Verifying peer X.509 certificate... ok" \
				7146	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7147
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7148	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7149	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7150	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7151	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7152	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7153	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7154	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7155	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7156	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7157	0 \
				7158	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7159	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7160	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7161	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7162	-c "NamedGroup: secp384r1 ( 18 )" \
				7163	-c "Verifying peer X.509 certificate... ok" \
				7164	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7165
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7166	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7167	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7168	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7169	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7170	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7171	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7172	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7173	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7174	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7175	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7176	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7177	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7178	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7179	-c "NamedGroup: secp521r1 ( 19 )" \
				7180	-c "Verifying peer X.509 certificate... ok" \
				7181	-C "received HelloRetryRequest message"
				7182
				7183	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7184	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7185	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7186	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7187	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7188	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7189	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7190	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7191	0 \
				7192	-c "HTTP/1.0 200 ok" \
				7193	-c "Protocol is TLSv1.3" \
				7194	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7195	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7196	-c "NamedGroup: secp521r1 ( 19 )" \
				7197	-c "Verifying peer X.509 certificate... ok" \
				7198	-C "received HelloRetryRequest message"
				7199
				7200	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7201	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7202	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7203	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7204	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7205	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7206	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7207	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7208	0 \
				7209	-c "HTTP/1.0 200 ok" \
				7210	-c "Protocol is TLSv1.3" \
				7211	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7212	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7213	-c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7214	-c "Verifying peer X.509 certificate... ok" \
				7215	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7216
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7217	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7218	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7219	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7220	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7221	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7222	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7223	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7224	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7225	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7226	0 \
				7227	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7228	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7229	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7230	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7231	-c "NamedGroup: secp521r1 ( 19 )" \
				7232	-c "Verifying peer X.509 certificate... ok" \
				7233	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7234
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7235	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7236	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7237	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7238	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7239	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7240	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7241	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7242	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7243	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7244	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7245	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7246	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7247	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7248	-c "NamedGroup: x25519 ( 1d )" \
				7249	-c "Verifying peer X.509 certificate... ok" \
				7250	-C "received HelloRetryRequest message"
				7251
				7252	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7253	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7254	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7255	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7256	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7257	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7258	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7259	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7260	0 \
				7261	-c "HTTP/1.0 200 ok" \
				7262	-c "Protocol is TLSv1.3" \
				7263	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7264	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7265	-c "NamedGroup: x25519 ( 1d )" \
				7266	-c "Verifying peer X.509 certificate... ok" \
				7267	-C "received HelloRetryRequest message"
				7268
				7269	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7270	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7271	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7272	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7273	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7274	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7275	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7276	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7277	0 \
				7278	-c "HTTP/1.0 200 ok" \
				7279	-c "Protocol is TLSv1.3" \
				7280	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7281	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7282	-c "NamedGroup: x25519 ( 1d )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7283	-c "Verifying peer X.509 certificate... ok" \
				7284	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7285
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7286	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7287	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7288	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7289	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7290	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7291	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7292	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7293	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7294	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7295	0 \
				7296	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7297	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7298	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7299	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7300	-c "NamedGroup: x25519 ( 1d )" \
				7301	-c "Verifying peer X.509 certificate... ok" \
				7302	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7303
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7304	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7305	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7306	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7307	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7308	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7309	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7310	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7311	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7312	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7313	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7314	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7315	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7316	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7317	-c "NamedGroup: x448 ( 1e )" \
				7318	-c "Verifying peer X.509 certificate... ok" \
				7319	-C "received HelloRetryRequest message"
				7320
				7321	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7322	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7323	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7324	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7325	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7326	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7327	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7328	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7329	0 \
				7330	-c "HTTP/1.0 200 ok" \
				7331	-c "Protocol is TLSv1.3" \
				7332	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7333	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7334	-c "NamedGroup: x448 ( 1e )" \
				7335	-c "Verifying peer X.509 certificate... ok" \
				7336	-C "received HelloRetryRequest message"
				7337
				7338	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7339	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7340	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7341	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7342	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7343	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7344	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7345	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7346	0 \
				7347	-c "HTTP/1.0 200 ok" \
				7348	-c "Protocol is TLSv1.3" \
				7349	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7350	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7351	-c "NamedGroup: x448 ( 1e )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7352	-c "Verifying peer X.509 certificate... ok" \
				7353	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7354
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7355	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7356	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7357	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7358	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7359	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7360	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7361	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7362	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7363	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7364	0 \
				7365	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7366	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7367	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7368	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7369	-c "NamedGroup: x448 ( 1e )" \
				7370	-c "Verifying peer X.509 certificate... ok" \
				7371	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7372
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7373	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	7374	requires_openssl_3_x
				7375	requires_config_enabled MBEDTLS_SSL_CLI_C
				7376	requires_config_enabled MBEDTLS_DEBUG_C
				7377	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7378	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7379	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				7380	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7381	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				7382	0 \
				7383	-c "HTTP/1.0 200 ok" \
				7384	-c "Protocol is TLSv1.3" \
				7385	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7386	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7387	-c "NamedGroup: ffdhe2048 ( 100 )" \
				7388	-c "Verifying peer X.509 certificate... ok" \
				7389	-C "received HelloRetryRequest message"
				7390
				7391	requires_openssl_tls1_3
				7392	requires_openssl_3_x
				7393	requires_config_enabled MBEDTLS_SSL_CLI_C
				7394	requires_config_enabled MBEDTLS_DEBUG_C
				7395	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7396	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7397	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				7398	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7399	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				7400	0 \
				7401	-c "HTTP/1.0 200 ok" \
				7402	-c "Protocol is TLSv1.3" \
				7403	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7404	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7405	-c "NamedGroup: ffdhe2048 ( 100 )" \
				7406	-c "Verifying peer X.509 certificate... ok" \
				7407	-C "received HelloRetryRequest message"
				7408
				7409	requires_openssl_tls1_3
				7410	requires_openssl_3_x
				7411	requires_config_enabled MBEDTLS_SSL_CLI_C
				7412	requires_config_enabled MBEDTLS_DEBUG_C
				7413	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7414	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7415	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				7416	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7417	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				7418	0 \
				7419	-c "HTTP/1.0 200 ok" \
				7420	-c "Protocol is TLSv1.3" \
				7421	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7422	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7423	-c "NamedGroup: ffdhe2048 ( 100 )" \
				7424	-c "Verifying peer X.509 certificate... ok" \
				7425	-C "received HelloRetryRequest message"
				7426
				7427	requires_openssl_tls1_3
				7428	requires_openssl_3_x
				7429	requires_config_enabled MBEDTLS_SSL_CLI_C
				7430	requires_config_enabled MBEDTLS_DEBUG_C
				7431	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7432	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7433	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				7434	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				7435	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7436	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				7437	0 \
				7438	-c "HTTP/1.0 200 ok" \
				7439	-c "Protocol is TLSv1.3" \
				7440	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7441	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				7442	-c "NamedGroup: ffdhe2048 ( 100 )" \
				7443	-c "Verifying peer X.509 certificate... ok" \
				7444	-C "received HelloRetryRequest message"
				7445
				7446	requires_openssl_tls1_3
				7447	requires_openssl_3_x
				7448	requires_config_enabled MBEDTLS_SSL_CLI_C
				7449	requires_config_enabled MBEDTLS_DEBUG_C
				7450	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7451	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7452	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				7453	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7454	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				7455	0 \
				7456	-c "HTTP/1.0 200 ok" \
				7457	-c "Protocol is TLSv1.3" \
				7458	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7459	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7460	-c "NamedGroup: ffdhe3072 ( 101 )" \
				7461	-c "Verifying peer X.509 certificate... ok" \
				7462	-C "received HelloRetryRequest message"
				7463
				7464	requires_openssl_tls1_3
				7465	requires_openssl_3_x
				7466	requires_config_enabled MBEDTLS_SSL_CLI_C
				7467	requires_config_enabled MBEDTLS_DEBUG_C
				7468	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7469	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7470	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				7471	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7472	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				7473	0 \
				7474	-c "HTTP/1.0 200 ok" \
				7475	-c "Protocol is TLSv1.3" \
				7476	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7477	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7478	-c "NamedGroup: ffdhe3072 ( 101 )" \
				7479	-c "Verifying peer X.509 certificate... ok" \
				7480	-C "received HelloRetryRequest message"
				7481
				7482	requires_openssl_tls1_3
				7483	requires_openssl_3_x
				7484	requires_config_enabled MBEDTLS_SSL_CLI_C
				7485	requires_config_enabled MBEDTLS_DEBUG_C
				7486	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7487	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7488	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				7489	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7490	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				7491	0 \
				7492	-c "HTTP/1.0 200 ok" \
				7493	-c "Protocol is TLSv1.3" \
				7494	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7495	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7496	-c "NamedGroup: ffdhe3072 ( 101 )" \
				7497	-c "Verifying peer X.509 certificate... ok" \
				7498	-C "received HelloRetryRequest message"
				7499
				7500	requires_openssl_tls1_3
				7501	requires_openssl_3_x
				7502	requires_config_enabled MBEDTLS_SSL_CLI_C
				7503	requires_config_enabled MBEDTLS_DEBUG_C
				7504	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7505	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7506	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				7507	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				7508	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7509	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				7510	0 \
				7511	-c "HTTP/1.0 200 ok" \
				7512	-c "Protocol is TLSv1.3" \
				7513	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7514	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				7515	-c "NamedGroup: ffdhe3072 ( 101 )" \
				7516	-c "Verifying peer X.509 certificate... ok" \
				7517	-C "received HelloRetryRequest message"
				7518
				7519	requires_openssl_tls1_3
				7520	requires_openssl_3_x
				7521	requires_config_enabled MBEDTLS_SSL_CLI_C
				7522	requires_config_enabled MBEDTLS_DEBUG_C
				7523	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7524	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7525	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				7526	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7527	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				7528	0 \
				7529	-c "HTTP/1.0 200 ok" \
				7530	-c "Protocol is TLSv1.3" \
				7531	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7532	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7533	-c "NamedGroup: ffdhe4096 ( 102 )" \
				7534	-c "Verifying peer X.509 certificate... ok" \
				7535	-C "received HelloRetryRequest message"
				7536
				7537	requires_openssl_tls1_3
				7538	requires_openssl_3_x
				7539	requires_config_enabled MBEDTLS_SSL_CLI_C
				7540	requires_config_enabled MBEDTLS_DEBUG_C
				7541	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7542	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7543	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				7544	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7545	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				7546	0 \
				7547	-c "HTTP/1.0 200 ok" \
				7548	-c "Protocol is TLSv1.3" \
				7549	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7550	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7551	-c "NamedGroup: ffdhe4096 ( 102 )" \
				7552	-c "Verifying peer X.509 certificate... ok" \
				7553	-C "received HelloRetryRequest message"
				7554
				7555	requires_openssl_tls1_3
				7556	requires_openssl_3_x
				7557	requires_config_enabled MBEDTLS_SSL_CLI_C
				7558	requires_config_enabled MBEDTLS_DEBUG_C
				7559	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7560	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7561	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				7562	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7563	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				7564	0 \
				7565	-c "HTTP/1.0 200 ok" \
				7566	-c "Protocol is TLSv1.3" \
				7567	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7568	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7569	-c "NamedGroup: ffdhe4096 ( 102 )" \
				7570	-c "Verifying peer X.509 certificate... ok" \
				7571	-C "received HelloRetryRequest message"
				7572
				7573	requires_openssl_tls1_3
				7574	requires_openssl_3_x
				7575	requires_config_enabled MBEDTLS_SSL_CLI_C
				7576	requires_config_enabled MBEDTLS_DEBUG_C
				7577	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7578	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7579	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				7580	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				7581	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7582	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				7583	0 \
				7584	-c "HTTP/1.0 200 ok" \
				7585	-c "Protocol is TLSv1.3" \
				7586	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7587	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				7588	-c "NamedGroup: ffdhe4096 ( 102 )" \
				7589	-c "Verifying peer X.509 certificate... ok" \
				7590	-C "received HelloRetryRequest message"
				7591
				7592	requires_openssl_tls1_3
				7593	requires_openssl_3_x
				7594	requires_config_enabled MBEDTLS_SSL_CLI_C
				7595	requires_config_enabled MBEDTLS_DEBUG_C
				7596	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7597	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7598	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				7599	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7600	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				7601	0 \
				7602	-c "HTTP/1.0 200 ok" \
				7603	-c "Protocol is TLSv1.3" \
				7604	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7605	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7606	-c "NamedGroup: ffdhe6144 ( 103 )" \
				7607	-c "Verifying peer X.509 certificate... ok" \
				7608	-C "received HelloRetryRequest message"
				7609
				7610	requires_openssl_tls1_3
				7611	requires_openssl_3_x
				7612	requires_config_enabled MBEDTLS_SSL_CLI_C
				7613	requires_config_enabled MBEDTLS_DEBUG_C
				7614	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7615	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7616	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				7617	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7618	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				7619	0 \
				7620	-c "HTTP/1.0 200 ok" \
				7621	-c "Protocol is TLSv1.3" \
				7622	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7623	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7624	-c "NamedGroup: ffdhe6144 ( 103 )" \
				7625	-c "Verifying peer X.509 certificate... ok" \
				7626	-C "received HelloRetryRequest message"
				7627
				7628	requires_openssl_tls1_3
				7629	requires_openssl_3_x
				7630	requires_config_enabled MBEDTLS_SSL_CLI_C
				7631	requires_config_enabled MBEDTLS_DEBUG_C
				7632	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7633	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7634	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				7635	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7636	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				7637	0 \
				7638	-c "HTTP/1.0 200 ok" \
				7639	-c "Protocol is TLSv1.3" \
				7640	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7641	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7642	-c "NamedGroup: ffdhe6144 ( 103 )" \
				7643	-c "Verifying peer X.509 certificate... ok" \
				7644	-C "received HelloRetryRequest message"
				7645
				7646	requires_openssl_tls1_3
				7647	requires_openssl_3_x
				7648	requires_config_enabled MBEDTLS_SSL_CLI_C
				7649	requires_config_enabled MBEDTLS_DEBUG_C
				7650	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7651	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7652	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				7653	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				7654	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7655	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				7656	0 \
				7657	-c "HTTP/1.0 200 ok" \
				7658	-c "Protocol is TLSv1.3" \
				7659	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7660	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				7661	-c "NamedGroup: ffdhe6144 ( 103 )" \
				7662	-c "Verifying peer X.509 certificate... ok" \
				7663	-C "received HelloRetryRequest message"
				7664
				7665	requires_openssl_tls1_3
				7666	requires_openssl_3_x
				7667	requires_config_enabled MBEDTLS_SSL_CLI_C
				7668	requires_config_enabled MBEDTLS_DEBUG_C
				7669	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7670	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7671	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				7672	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7673	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				7674	0 \
				7675	-c "HTTP/1.0 200 ok" \
				7676	-c "Protocol is TLSv1.3" \
				7677	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7678	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7679	-c "NamedGroup: ffdhe8192 ( 104 )" \
				7680	-c "Verifying peer X.509 certificate... ok" \
				7681	-C "received HelloRetryRequest message"
				7682
				7683	requires_openssl_tls1_3
				7684	requires_openssl_3_x
				7685	requires_config_enabled MBEDTLS_SSL_CLI_C
				7686	requires_config_enabled MBEDTLS_DEBUG_C
				7687	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7688	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7689	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				7690	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7691	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				7692	0 \
				7693	-c "HTTP/1.0 200 ok" \
				7694	-c "Protocol is TLSv1.3" \
				7695	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7696	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7697	-c "NamedGroup: ffdhe8192 ( 104 )" \
				7698	-c "Verifying peer X.509 certificate... ok" \
				7699	-C "received HelloRetryRequest message"
				7700
				7701	requires_openssl_tls1_3
				7702	requires_openssl_3_x
				7703	requires_config_enabled MBEDTLS_SSL_CLI_C
				7704	requires_config_enabled MBEDTLS_DEBUG_C
				7705	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7706	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7707	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				7708	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7709	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				7710	0 \
				7711	-c "HTTP/1.0 200 ok" \
				7712	-c "Protocol is TLSv1.3" \
				7713	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7714	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7715	-c "NamedGroup: ffdhe8192 ( 104 )" \
				7716	-c "Verifying peer X.509 certificate... ok" \
				7717	-C "received HelloRetryRequest message"
				7718
				7719	requires_openssl_tls1_3
				7720	requires_openssl_3_x
				7721	requires_config_enabled MBEDTLS_SSL_CLI_C
				7722	requires_config_enabled MBEDTLS_DEBUG_C
				7723	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				7724	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7725	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				7726	run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				7727	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				7728	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				7729	0 \
				7730	-c "HTTP/1.0 200 ok" \
				7731	-c "Protocol is TLSv1.3" \
				7732	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				7733	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				7734	-c "NamedGroup: ffdhe8192 ( 104 )" \
				7735	-c "Verifying peer X.509 certificate... ok" \
				7736	-C "received HelloRetryRequest message"
				7737
				7738	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7739	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7740	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7741	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7742	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7743	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7744	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7745	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7746	0 \
				7747	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7748	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7749	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7750	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7751	-c "NamedGroup: secp256r1 ( 17 )" \
				7752	-c "Verifying peer X.509 certificate... ok" \
				7753	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7754
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7755	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7756	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7757	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7758	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7759	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7760	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7761	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7762	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7763	0 \
				7764	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7765	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7766	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7767	-c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7768	-c "NamedGroup: secp256r1 ( 17 )" \
				7769	-c "Verifying peer X.509 certificate... ok" \
				7770	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7771
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7772	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7773	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7774	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7775	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7776	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7777	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7778	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7779	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7780	0 \
				7781	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7782	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7783	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7784	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7785	-c "NamedGroup: secp256r1 ( 17 )" \
				7786	-c "Verifying peer X.509 certificate... ok" \
				7787	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7788
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7789	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7790	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7791	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7792	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7793	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7794	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7795	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7796	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7797	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7798	0 \
				7799	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7800	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7801	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7802	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7803	-c "NamedGroup: secp256r1 ( 17 )" \
				7804	-c "Verifying peer X.509 certificate... ok" \
				7805	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7806
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7807	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7808	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7809	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7810	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7811	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7812	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7813	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7814	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7815	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7816	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7817	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7818	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7819	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7820	-c "NamedGroup: secp384r1 ( 18 )" \
				7821	-c "Verifying peer X.509 certificate... ok" \
				7822	-C "received HelloRetryRequest message"
				7823
				7824	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7825	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7826	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7827	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7828	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7829	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7830	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7831	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7832	0 \
				7833	-c "HTTP/1.0 200 ok" \
				7834	-c "Protocol is TLSv1.3" \
				7835	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7836	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7837	-c "NamedGroup: secp384r1 ( 18 )" \
				7838	-c "Verifying peer X.509 certificate... ok" \
				7839	-C "received HelloRetryRequest message"
				7840
				7841	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7842	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7843	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7844	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7845	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7846	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7847	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7848	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7849	0 \
				7850	-c "HTTP/1.0 200 ok" \
				7851	-c "Protocol is TLSv1.3" \
				7852	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7853	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7854	-c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7855	-c "Verifying peer X.509 certificate... ok" \
				7856	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7857
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7858	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7859	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7860	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7861	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7862	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7863	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7864	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7865	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7866	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7867	0 \
				7868	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7869	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7870	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7871	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7872	-c "NamedGroup: secp384r1 ( 18 )" \
				7873	-c "Verifying peer X.509 certificate... ok" \
				7874	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7875
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7876	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7877	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7878	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7879	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7880	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7881	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7882	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7883	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7884	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7885	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7886	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7887	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7888	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7889	-c "NamedGroup: secp521r1 ( 19 )" \
				7890	-c "Verifying peer X.509 certificate... ok" \
				7891	-C "received HelloRetryRequest message"
				7892
				7893	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7894	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7895	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7896	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7897	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7898	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7899	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7900	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7901	0 \
				7902	-c "HTTP/1.0 200 ok" \
				7903	-c "Protocol is TLSv1.3" \
				7904	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7905	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7906	-c "NamedGroup: secp521r1 ( 19 )" \
				7907	-c "Verifying peer X.509 certificate... ok" \
				7908	-C "received HelloRetryRequest message"
				7909
				7910	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7911	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7912	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7913	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7914	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7915	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7916	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7917	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7918	0 \
				7919	-c "HTTP/1.0 200 ok" \
				7920	-c "Protocol is TLSv1.3" \
				7921	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7922	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7923	-c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7924	-c "Verifying peer X.509 certificate... ok" \
				7925	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7926
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7927	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7928	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7929	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7930	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7931	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7932	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	7933	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7934	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7935	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7936	0 \
				7937	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7938	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7939	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7940	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7941	-c "NamedGroup: secp521r1 ( 19 )" \
				7942	-c "Verifying peer X.509 certificate... ok" \
				7943	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7944
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7945	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7946	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7947	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7948	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	7949	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7950	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7951	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7952	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7953	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7954	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	7955	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	7956	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7957	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				7958	-c "NamedGroup: x25519 ( 1d )" \
				7959	-c "Verifying peer X.509 certificate... ok" \
				7960	-C "received HelloRetryRequest message"
				7961
				7962	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7963	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7964	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7965	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7966	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7967	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7968	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7969	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7970	0 \
				7971	-c "HTTP/1.0 200 ok" \
				7972	-c "Protocol is TLSv1.3" \
				7973	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7974	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				7975	-c "NamedGroup: x25519 ( 1d )" \
				7976	-c "Verifying peer X.509 certificate... ok" \
				7977	-C "received HelloRetryRequest message"
				7978
				7979	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7980	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7981	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7982	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7983	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				7984	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	7985	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	7986	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	7987	0 \
				7988	-c "HTTP/1.0 200 ok" \
				7989	-c "Protocol is TLSv1.3" \
				7990	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				7991	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				7992	-c "NamedGroup: x25519 ( 1d )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	7993	-c "Verifying peer X.509 certificate... ok" \
				7994	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	7995
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7996	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	7997	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	7998	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	7999	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8000	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8001	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8002	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8003	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8004	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8005	0 \
				8006	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8007	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8008	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8009	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8010	-c "NamedGroup: x25519 ( 1d )" \
				8011	-c "Verifying peer X.509 certificate... ok" \
				8012	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8013
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8014	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8015	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8016	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8017	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8018	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8019	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8020	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8021	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8022	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8023	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8024	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8025	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8026	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8027	-c "NamedGroup: x448 ( 1e )" \
				8028	-c "Verifying peer X.509 certificate... ok" \
				8029	-C "received HelloRetryRequest message"
				8030
				8031	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8032	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8033	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8034	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8035	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8036	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8037	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8038	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8039	0 \
				8040	-c "HTTP/1.0 200 ok" \
				8041	-c "Protocol is TLSv1.3" \
				8042	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8043	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8044	-c "NamedGroup: x448 ( 1e )" \
				8045	-c "Verifying peer X.509 certificate... ok" \
				8046	-C "received HelloRetryRequest message"
				8047
				8048	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8049	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8050	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8051	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8052	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8053	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8054	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8055	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8056	0 \
				8057	-c "HTTP/1.0 200 ok" \
				8058	-c "Protocol is TLSv1.3" \
				8059	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8060	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8061	-c "NamedGroup: x448 ( 1e )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8062	-c "Verifying peer X.509 certificate... ok" \
				8063	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8064
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8065	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8066	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8067	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8068	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8069	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8070	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8071	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8072	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8073	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8074	0 \
				8075	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8076	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8077	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8078	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8079	-c "NamedGroup: x448 ( 1e )" \
				8080	-c "Verifying peer X.509 certificate... ok" \
				8081	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8082
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8083	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	8084	requires_openssl_3_x
				8085	requires_config_enabled MBEDTLS_SSL_CLI_C
				8086	requires_config_enabled MBEDTLS_DEBUG_C
				8087	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8088	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8089	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
				8090	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8091	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				8092	0 \
				8093	-c "HTTP/1.0 200 ok" \
				8094	-c "Protocol is TLSv1.3" \
				8095	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8096	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8097	-c "NamedGroup: ffdhe2048 ( 100 )" \
				8098	-c "Verifying peer X.509 certificate... ok" \
				8099	-C "received HelloRetryRequest message"
				8100
				8101	requires_openssl_tls1_3
				8102	requires_openssl_3_x
				8103	requires_config_enabled MBEDTLS_SSL_CLI_C
				8104	requires_config_enabled MBEDTLS_DEBUG_C
				8105	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8106	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8107	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
				8108	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8109	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				8110	0 \
				8111	-c "HTTP/1.0 200 ok" \
				8112	-c "Protocol is TLSv1.3" \
				8113	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8114	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8115	-c "NamedGroup: ffdhe2048 ( 100 )" \
				8116	-c "Verifying peer X.509 certificate... ok" \
				8117	-C "received HelloRetryRequest message"
				8118
				8119	requires_openssl_tls1_3
				8120	requires_openssl_3_x
				8121	requires_config_enabled MBEDTLS_SSL_CLI_C
				8122	requires_config_enabled MBEDTLS_DEBUG_C
				8123	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8124	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8125	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
				8126	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8127	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				8128	0 \
				8129	-c "HTTP/1.0 200 ok" \
				8130	-c "Protocol is TLSv1.3" \
				8131	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8132	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8133	-c "NamedGroup: ffdhe2048 ( 100 )" \
				8134	-c "Verifying peer X.509 certificate... ok" \
				8135	-C "received HelloRetryRequest message"
				8136
				8137	requires_openssl_tls1_3
				8138	requires_openssl_3_x
				8139	requires_config_enabled MBEDTLS_SSL_CLI_C
				8140	requires_config_enabled MBEDTLS_DEBUG_C
				8141	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8142	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8143	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				8144	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
				8145	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8146	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				8147	0 \
				8148	-c "HTTP/1.0 200 ok" \
				8149	-c "Protocol is TLSv1.3" \
				8150	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8151	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				8152	-c "NamedGroup: ffdhe2048 ( 100 )" \
				8153	-c "Verifying peer X.509 certificate... ok" \
				8154	-C "received HelloRetryRequest message"
				8155
				8156	requires_openssl_tls1_3
				8157	requires_openssl_3_x
				8158	requires_config_enabled MBEDTLS_SSL_CLI_C
				8159	requires_config_enabled MBEDTLS_DEBUG_C
				8160	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8161	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8162	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp256r1_sha256" \
				8163	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8164	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				8165	0 \
				8166	-c "HTTP/1.0 200 ok" \
				8167	-c "Protocol is TLSv1.3" \
				8168	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8169	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8170	-c "NamedGroup: ffdhe3072 ( 101 )" \
				8171	-c "Verifying peer X.509 certificate... ok" \
				8172	-C "received HelloRetryRequest message"
				8173
				8174	requires_openssl_tls1_3
				8175	requires_openssl_3_x
				8176	requires_config_enabled MBEDTLS_SSL_CLI_C
				8177	requires_config_enabled MBEDTLS_DEBUG_C
				8178	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8179	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8180	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp384r1_sha384" \
				8181	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8182	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				8183	0 \
				8184	-c "HTTP/1.0 200 ok" \
				8185	-c "Protocol is TLSv1.3" \
				8186	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8187	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8188	-c "NamedGroup: ffdhe3072 ( 101 )" \
				8189	-c "Verifying peer X.509 certificate... ok" \
				8190	-C "received HelloRetryRequest message"
				8191
				8192	requires_openssl_tls1_3
				8193	requires_openssl_3_x
				8194	requires_config_enabled MBEDTLS_SSL_CLI_C
				8195	requires_config_enabled MBEDTLS_DEBUG_C
				8196	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8197	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8198	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp521r1_sha512" \
				8199	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8200	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				8201	0 \
				8202	-c "HTTP/1.0 200 ok" \
				8203	-c "Protocol is TLSv1.3" \
				8204	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8205	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8206	-c "NamedGroup: ffdhe3072 ( 101 )" \
				8207	-c "Verifying peer X.509 certificate... ok" \
				8208	-C "received HelloRetryRequest message"
				8209
				8210	requires_openssl_tls1_3
				8211	requires_openssl_3_x
				8212	requires_config_enabled MBEDTLS_SSL_CLI_C
				8213	requires_config_enabled MBEDTLS_DEBUG_C
				8214	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8215	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8216	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				8217	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe3072,rsa_pss_rsae_sha256" \
				8218	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8219	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				8220	0 \
				8221	-c "HTTP/1.0 200 ok" \
				8222	-c "Protocol is TLSv1.3" \
				8223	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8224	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				8225	-c "NamedGroup: ffdhe3072 ( 101 )" \
				8226	-c "Verifying peer X.509 certificate... ok" \
				8227	-C "received HelloRetryRequest message"
				8228
				8229	requires_openssl_tls1_3
				8230	requires_openssl_3_x
				8231	requires_config_enabled MBEDTLS_SSL_CLI_C
				8232	requires_config_enabled MBEDTLS_DEBUG_C
				8233	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8234	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8235	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp256r1_sha256" \
				8236	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8237	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				8238	0 \
				8239	-c "HTTP/1.0 200 ok" \
				8240	-c "Protocol is TLSv1.3" \
				8241	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8242	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8243	-c "NamedGroup: ffdhe4096 ( 102 )" \
				8244	-c "Verifying peer X.509 certificate... ok" \
				8245	-C "received HelloRetryRequest message"
				8246
				8247	requires_openssl_tls1_3
				8248	requires_openssl_3_x
				8249	requires_config_enabled MBEDTLS_SSL_CLI_C
				8250	requires_config_enabled MBEDTLS_DEBUG_C
				8251	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8252	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8253	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp384r1_sha384" \
				8254	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8255	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				8256	0 \
				8257	-c "HTTP/1.0 200 ok" \
				8258	-c "Protocol is TLSv1.3" \
				8259	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8260	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8261	-c "NamedGroup: ffdhe4096 ( 102 )" \
				8262	-c "Verifying peer X.509 certificate... ok" \
				8263	-C "received HelloRetryRequest message"
				8264
				8265	requires_openssl_tls1_3
				8266	requires_openssl_3_x
				8267	requires_config_enabled MBEDTLS_SSL_CLI_C
				8268	requires_config_enabled MBEDTLS_DEBUG_C
				8269	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8270	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8271	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp521r1_sha512" \
				8272	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8273	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				8274	0 \
				8275	-c "HTTP/1.0 200 ok" \
				8276	-c "Protocol is TLSv1.3" \
				8277	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8278	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8279	-c "NamedGroup: ffdhe4096 ( 102 )" \
				8280	-c "Verifying peer X.509 certificate... ok" \
				8281	-C "received HelloRetryRequest message"
				8282
				8283	requires_openssl_tls1_3
				8284	requires_openssl_3_x
				8285	requires_config_enabled MBEDTLS_SSL_CLI_C
				8286	requires_config_enabled MBEDTLS_DEBUG_C
				8287	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8288	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8289	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				8290	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe4096,rsa_pss_rsae_sha256" \
				8291	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8292	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				8293	0 \
				8294	-c "HTTP/1.0 200 ok" \
				8295	-c "Protocol is TLSv1.3" \
				8296	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8297	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				8298	-c "NamedGroup: ffdhe4096 ( 102 )" \
				8299	-c "Verifying peer X.509 certificate... ok" \
				8300	-C "received HelloRetryRequest message"
				8301
				8302	requires_openssl_tls1_3
				8303	requires_openssl_3_x
				8304	requires_config_enabled MBEDTLS_SSL_CLI_C
				8305	requires_config_enabled MBEDTLS_DEBUG_C
				8306	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8307	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8308	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp256r1_sha256" \
				8309	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8310	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				8311	0 \
				8312	-c "HTTP/1.0 200 ok" \
				8313	-c "Protocol is TLSv1.3" \
				8314	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8315	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8316	-c "NamedGroup: ffdhe6144 ( 103 )" \
				8317	-c "Verifying peer X.509 certificate... ok" \
				8318	-C "received HelloRetryRequest message"
				8319
				8320	requires_openssl_tls1_3
				8321	requires_openssl_3_x
				8322	requires_config_enabled MBEDTLS_SSL_CLI_C
				8323	requires_config_enabled MBEDTLS_DEBUG_C
				8324	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8325	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8326	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp384r1_sha384" \
				8327	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8328	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				8329	0 \
				8330	-c "HTTP/1.0 200 ok" \
				8331	-c "Protocol is TLSv1.3" \
				8332	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8333	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8334	-c "NamedGroup: ffdhe6144 ( 103 )" \
				8335	-c "Verifying peer X.509 certificate... ok" \
				8336	-C "received HelloRetryRequest message"
				8337
				8338	requires_openssl_tls1_3
				8339	requires_openssl_3_x
				8340	requires_config_enabled MBEDTLS_SSL_CLI_C
				8341	requires_config_enabled MBEDTLS_DEBUG_C
				8342	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8343	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8344	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp521r1_sha512" \
				8345	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8346	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				8347	0 \
				8348	-c "HTTP/1.0 200 ok" \
				8349	-c "Protocol is TLSv1.3" \
				8350	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8351	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8352	-c "NamedGroup: ffdhe6144 ( 103 )" \
				8353	-c "Verifying peer X.509 certificate... ok" \
				8354	-C "received HelloRetryRequest message"
				8355
				8356	requires_openssl_tls1_3
				8357	requires_openssl_3_x
				8358	requires_config_enabled MBEDTLS_SSL_CLI_C
				8359	requires_config_enabled MBEDTLS_DEBUG_C
				8360	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8361	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8362	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				8363	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe6144,rsa_pss_rsae_sha256" \
				8364	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8365	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				8366	0 \
				8367	-c "HTTP/1.0 200 ok" \
				8368	-c "Protocol is TLSv1.3" \
				8369	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8370	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				8371	-c "NamedGroup: ffdhe6144 ( 103 )" \
				8372	-c "Verifying peer X.509 certificate... ok" \
				8373	-C "received HelloRetryRequest message"
				8374
				8375	requires_openssl_tls1_3
				8376	requires_openssl_3_x
				8377	requires_config_enabled MBEDTLS_SSL_CLI_C
				8378	requires_config_enabled MBEDTLS_DEBUG_C
				8379	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8380	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8381	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp256r1_sha256" \
				8382	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8383	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				8384	0 \
				8385	-c "HTTP/1.0 200 ok" \
				8386	-c "Protocol is TLSv1.3" \
				8387	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8388	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8389	-c "NamedGroup: ffdhe8192 ( 104 )" \
				8390	-c "Verifying peer X.509 certificate... ok" \
				8391	-C "received HelloRetryRequest message"
				8392
				8393	requires_openssl_tls1_3
				8394	requires_openssl_3_x
				8395	requires_config_enabled MBEDTLS_SSL_CLI_C
				8396	requires_config_enabled MBEDTLS_DEBUG_C
				8397	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8398	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8399	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp384r1_sha384" \
				8400	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8401	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				8402	0 \
				8403	-c "HTTP/1.0 200 ok" \
				8404	-c "Protocol is TLSv1.3" \
				8405	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8406	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8407	-c "NamedGroup: ffdhe8192 ( 104 )" \
				8408	-c "Verifying peer X.509 certificate... ok" \
				8409	-C "received HelloRetryRequest message"
				8410
				8411	requires_openssl_tls1_3
				8412	requires_openssl_3_x
				8413	requires_config_enabled MBEDTLS_SSL_CLI_C
				8414	requires_config_enabled MBEDTLS_DEBUG_C
				8415	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8416	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8417	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp521r1_sha512" \
				8418	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8419	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				8420	0 \
				8421	-c "HTTP/1.0 200 ok" \
				8422	-c "Protocol is TLSv1.3" \
				8423	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8424	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8425	-c "NamedGroup: ffdhe8192 ( 104 )" \
				8426	-c "Verifying peer X.509 certificate... ok" \
				8427	-C "received HelloRetryRequest message"
				8428
				8429	requires_openssl_tls1_3
				8430	requires_openssl_3_x
				8431	requires_config_enabled MBEDTLS_SSL_CLI_C
				8432	requires_config_enabled MBEDTLS_DEBUG_C
				8433	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8434	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8435	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				8436	run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe8192,rsa_pss_rsae_sha256" \
				8437	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8438	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				8439	0 \
				8440	-c "HTTP/1.0 200 ok" \
				8441	-c "Protocol is TLSv1.3" \
				8442	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				8443	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				8444	-c "NamedGroup: ffdhe8192 ( 104 )" \
				8445	-c "Verifying peer X.509 certificate... ok" \
				8446	-C "received HelloRetryRequest message"
				8447
				8448	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8449	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8450	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8451	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8452	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8453	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8454	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8455	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8456	0 \
				8457	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8458	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8459	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8460	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8461	-c "NamedGroup: secp256r1 ( 17 )" \
				8462	-c "Verifying peer X.509 certificate... ok" \
				8463	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8464
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8465	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8466	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8467	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8468	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8469	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8470	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8471	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8472	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8473	0 \
				8474	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8475	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8476	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8477	-c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8478	-c "NamedGroup: secp256r1 ( 17 )" \
				8479	-c "Verifying peer X.509 certificate... ok" \
				8480	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8481
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8482	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8483	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8484	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8485	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8486	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8487	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8488	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8489	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8490	0 \
				8491	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8492	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8493	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8494	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8495	-c "NamedGroup: secp256r1 ( 17 )" \
				8496	-c "Verifying peer X.509 certificate... ok" \
				8497	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8498
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8499	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8500	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8501	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8502	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8503	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8504	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8505	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8506	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8507	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8508	0 \
				8509	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8510	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8511	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8512	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8513	-c "NamedGroup: secp256r1 ( 17 )" \
				8514	-c "Verifying peer X.509 certificate... ok" \
				8515	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8516
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8517	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8518	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8519	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8520	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8521	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8522	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8523	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8524	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8525	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8526	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8527	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8528	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8529	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8530	-c "NamedGroup: secp384r1 ( 18 )" \
				8531	-c "Verifying peer X.509 certificate... ok" \
				8532	-C "received HelloRetryRequest message"
				8533
				8534	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8535	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8536	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8537	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8538	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8539	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8540	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8541	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8542	0 \
				8543	-c "HTTP/1.0 200 ok" \
				8544	-c "Protocol is TLSv1.3" \
				8545	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8546	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8547	-c "NamedGroup: secp384r1 ( 18 )" \
				8548	-c "Verifying peer X.509 certificate... ok" \
				8549	-C "received HelloRetryRequest message"
				8550
				8551	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8552	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8553	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8554	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8555	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8556	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8557	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8558	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8559	0 \
				8560	-c "HTTP/1.0 200 ok" \
				8561	-c "Protocol is TLSv1.3" \
				8562	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8563	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8564	-c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8565	-c "Verifying peer X.509 certificate... ok" \
				8566	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8567
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8568	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8569	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8570	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8571	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8572	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8573	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8574	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8575	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8576	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8577	0 \
				8578	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8579	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8580	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8581	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8582	-c "NamedGroup: secp384r1 ( 18 )" \
				8583	-c "Verifying peer X.509 certificate... ok" \
				8584	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8585
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8586	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8587	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8588	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8589	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8590	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8591	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8592	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8593	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8594	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8595	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8596	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8597	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8598	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8599	-c "NamedGroup: secp521r1 ( 19 )" \
				8600	-c "Verifying peer X.509 certificate... ok" \
				8601	-C "received HelloRetryRequest message"
				8602
				8603	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8604	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8605	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8606	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8607	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8608	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8609	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8610	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8611	0 \
				8612	-c "HTTP/1.0 200 ok" \
				8613	-c "Protocol is TLSv1.3" \
				8614	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8615	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8616	-c "NamedGroup: secp521r1 ( 19 )" \
				8617	-c "Verifying peer X.509 certificate... ok" \
				8618	-C "received HelloRetryRequest message"
				8619
				8620	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8621	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8622	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8623	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8624	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8625	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8626	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8627	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8628	0 \
				8629	-c "HTTP/1.0 200 ok" \
				8630	-c "Protocol is TLSv1.3" \
				8631	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8632	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8633	-c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8634	-c "Verifying peer X.509 certificate... ok" \
				8635	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8636
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8637	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8638	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8639	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8640	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8641	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8642	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8643	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8644	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8645	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8646	0 \
				8647	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8648	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8649	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8650	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8651	-c "NamedGroup: secp521r1 ( 19 )" \
				8652	-c "Verifying peer X.509 certificate... ok" \
				8653	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8654
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8655	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8656	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8657	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8658	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8659	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8660	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8661	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8662	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8663	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8664	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8665	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8666	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8667	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8668	-c "NamedGroup: x25519 ( 1d )" \
				8669	-c "Verifying peer X.509 certificate... ok" \
				8670	-C "received HelloRetryRequest message"
				8671
				8672	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8673	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8674	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8675	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8676	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8677	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8678	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8679	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8680	0 \
				8681	-c "HTTP/1.0 200 ok" \
				8682	-c "Protocol is TLSv1.3" \
				8683	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8684	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8685	-c "NamedGroup: x25519 ( 1d )" \
				8686	-c "Verifying peer X.509 certificate... ok" \
				8687	-C "received HelloRetryRequest message"
				8688
				8689	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8690	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8691	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8692	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8693	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8694	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8695	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8696	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8697	0 \
				8698	-c "HTTP/1.0 200 ok" \
				8699	-c "Protocol is TLSv1.3" \
				8700	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8701	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8702	-c "NamedGroup: x25519 ( 1d )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8703	-c "Verifying peer X.509 certificate... ok" \
				8704	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8705
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8706	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8707	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8708	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8709	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8710	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8711	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8712	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8713	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8714	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8715	0 \
				8716	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8717	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8718	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8719	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8720	-c "NamedGroup: x25519 ( 1d )" \
				8721	-c "Verifying peer X.509 certificate... ok" \
				8722	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8723
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8724	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8725	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8726	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8727	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8728	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8729	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8730	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8731	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8732	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8733	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8734	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8735	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8736	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8737	-c "NamedGroup: x448 ( 1e )" \
				8738	-c "Verifying peer X.509 certificate... ok" \
				8739	-C "received HelloRetryRequest message"
				8740
				8741	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8742	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8743	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8744	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8745	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8746	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8747	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8748	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8749	0 \
				8750	-c "HTTP/1.0 200 ok" \
				8751	-c "Protocol is TLSv1.3" \
				8752	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8753	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8754	-c "NamedGroup: x448 ( 1e )" \
				8755	-c "Verifying peer X.509 certificate... ok" \
				8756	-C "received HelloRetryRequest message"
				8757
				8758	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8759	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8760	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8761	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8762	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8763	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8764	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8765	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	8766	0 \
				8767	-c "HTTP/1.0 200 ok" \
				8768	-c "Protocol is TLSv1.3" \
				8769	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8770	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8771	-c "NamedGroup: x448 ( 1e )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8772	-c "Verifying peer X.509 certificate... ok" \
				8773	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8774
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8775	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8776	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	8777	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	8778	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	8779	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8780	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	8781	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	8782	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	8783	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8784	0 \
				8785	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	8786	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	8787	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8788	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	8789	-c "NamedGroup: x448 ( 1e )" \
				8790	-c "Verifying peer X.509 certificate... ok" \
				8791	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	8792
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	8793	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	8794	requires_openssl_3_x
				8795	requires_config_enabled MBEDTLS_SSL_CLI_C
				8796	requires_config_enabled MBEDTLS_DEBUG_C
				8797	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8798	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8799	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				8800	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8801	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				8802	0 \
				8803	-c "HTTP/1.0 200 ok" \
				8804	-c "Protocol is TLSv1.3" \
				8805	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8806	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8807	-c "NamedGroup: ffdhe2048 ( 100 )" \
				8808	-c "Verifying peer X.509 certificate... ok" \
				8809	-C "received HelloRetryRequest message"
				8810
				8811	requires_openssl_tls1_3
				8812	requires_openssl_3_x
				8813	requires_config_enabled MBEDTLS_SSL_CLI_C
				8814	requires_config_enabled MBEDTLS_DEBUG_C
				8815	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8816	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8817	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				8818	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8819	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				8820	0 \
				8821	-c "HTTP/1.0 200 ok" \
				8822	-c "Protocol is TLSv1.3" \
				8823	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8824	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8825	-c "NamedGroup: ffdhe2048 ( 100 )" \
				8826	-c "Verifying peer X.509 certificate... ok" \
				8827	-C "received HelloRetryRequest message"
				8828
				8829	requires_openssl_tls1_3
				8830	requires_openssl_3_x
				8831	requires_config_enabled MBEDTLS_SSL_CLI_C
				8832	requires_config_enabled MBEDTLS_DEBUG_C
				8833	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8834	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8835	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				8836	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8837	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				8838	0 \
				8839	-c "HTTP/1.0 200 ok" \
				8840	-c "Protocol is TLSv1.3" \
				8841	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8842	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8843	-c "NamedGroup: ffdhe2048 ( 100 )" \
				8844	-c "Verifying peer X.509 certificate... ok" \
				8845	-C "received HelloRetryRequest message"
				8846
				8847	requires_openssl_tls1_3
				8848	requires_openssl_3_x
				8849	requires_config_enabled MBEDTLS_SSL_CLI_C
				8850	requires_config_enabled MBEDTLS_DEBUG_C
				8851	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8852	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8853	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				8854	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				8855	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8856	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				8857	0 \
				8858	-c "HTTP/1.0 200 ok" \
				8859	-c "Protocol is TLSv1.3" \
				8860	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8861	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				8862	-c "NamedGroup: ffdhe2048 ( 100 )" \
				8863	-c "Verifying peer X.509 certificate... ok" \
				8864	-C "received HelloRetryRequest message"
				8865
				8866	requires_openssl_tls1_3
				8867	requires_openssl_3_x
				8868	requires_config_enabled MBEDTLS_SSL_CLI_C
				8869	requires_config_enabled MBEDTLS_DEBUG_C
				8870	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8871	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8872	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				8873	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8874	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				8875	0 \
				8876	-c "HTTP/1.0 200 ok" \
				8877	-c "Protocol is TLSv1.3" \
				8878	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8879	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8880	-c "NamedGroup: ffdhe3072 ( 101 )" \
				8881	-c "Verifying peer X.509 certificate... ok" \
				8882	-C "received HelloRetryRequest message"
				8883
				8884	requires_openssl_tls1_3
				8885	requires_openssl_3_x
				8886	requires_config_enabled MBEDTLS_SSL_CLI_C
				8887	requires_config_enabled MBEDTLS_DEBUG_C
				8888	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8889	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8890	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				8891	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8892	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				8893	0 \
				8894	-c "HTTP/1.0 200 ok" \
				8895	-c "Protocol is TLSv1.3" \
				8896	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8897	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8898	-c "NamedGroup: ffdhe3072 ( 101 )" \
				8899	-c "Verifying peer X.509 certificate... ok" \
				8900	-C "received HelloRetryRequest message"
				8901
				8902	requires_openssl_tls1_3
				8903	requires_openssl_3_x
				8904	requires_config_enabled MBEDTLS_SSL_CLI_C
				8905	requires_config_enabled MBEDTLS_DEBUG_C
				8906	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8907	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8908	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				8909	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8910	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				8911	0 \
				8912	-c "HTTP/1.0 200 ok" \
				8913	-c "Protocol is TLSv1.3" \
				8914	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8915	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8916	-c "NamedGroup: ffdhe3072 ( 101 )" \
				8917	-c "Verifying peer X.509 certificate... ok" \
				8918	-C "received HelloRetryRequest message"
				8919
				8920	requires_openssl_tls1_3
				8921	requires_openssl_3_x
				8922	requires_config_enabled MBEDTLS_SSL_CLI_C
				8923	requires_config_enabled MBEDTLS_DEBUG_C
				8924	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8925	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8926	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				8927	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				8928	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8929	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				8930	0 \
				8931	-c "HTTP/1.0 200 ok" \
				8932	-c "Protocol is TLSv1.3" \
				8933	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8934	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				8935	-c "NamedGroup: ffdhe3072 ( 101 )" \
				8936	-c "Verifying peer X.509 certificate... ok" \
				8937	-C "received HelloRetryRequest message"
				8938
				8939	requires_openssl_tls1_3
				8940	requires_openssl_3_x
				8941	requires_config_enabled MBEDTLS_SSL_CLI_C
				8942	requires_config_enabled MBEDTLS_DEBUG_C
				8943	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8944	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8945	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				8946	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8947	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				8948	0 \
				8949	-c "HTTP/1.0 200 ok" \
				8950	-c "Protocol is TLSv1.3" \
				8951	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8952	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				8953	-c "NamedGroup: ffdhe4096 ( 102 )" \
				8954	-c "Verifying peer X.509 certificate... ok" \
				8955	-C "received HelloRetryRequest message"
				8956
				8957	requires_openssl_tls1_3
				8958	requires_openssl_3_x
				8959	requires_config_enabled MBEDTLS_SSL_CLI_C
				8960	requires_config_enabled MBEDTLS_DEBUG_C
				8961	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8962	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8963	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				8964	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8965	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				8966	0 \
				8967	-c "HTTP/1.0 200 ok" \
				8968	-c "Protocol is TLSv1.3" \
				8969	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8970	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				8971	-c "NamedGroup: ffdhe4096 ( 102 )" \
				8972	-c "Verifying peer X.509 certificate... ok" \
				8973	-C "received HelloRetryRequest message"
				8974
				8975	requires_openssl_tls1_3
				8976	requires_openssl_3_x
				8977	requires_config_enabled MBEDTLS_SSL_CLI_C
				8978	requires_config_enabled MBEDTLS_DEBUG_C
				8979	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8980	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8981	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				8982	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				8983	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				8984	0 \
				8985	-c "HTTP/1.0 200 ok" \
				8986	-c "Protocol is TLSv1.3" \
				8987	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				8988	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				8989	-c "NamedGroup: ffdhe4096 ( 102 )" \
				8990	-c "Verifying peer X.509 certificate... ok" \
				8991	-C "received HelloRetryRequest message"
				8992
				8993	requires_openssl_tls1_3
				8994	requires_openssl_3_x
				8995	requires_config_enabled MBEDTLS_SSL_CLI_C
				8996	requires_config_enabled MBEDTLS_DEBUG_C
				8997	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				8998	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				8999	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9000	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				9001	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9002	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				9003	0 \
				9004	-c "HTTP/1.0 200 ok" \
				9005	-c "Protocol is TLSv1.3" \
				9006	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9007	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				9008	-c "NamedGroup: ffdhe4096 ( 102 )" \
				9009	-c "Verifying peer X.509 certificate... ok" \
				9010	-C "received HelloRetryRequest message"
				9011
				9012	requires_openssl_tls1_3
				9013	requires_openssl_3_x
				9014	requires_config_enabled MBEDTLS_SSL_CLI_C
				9015	requires_config_enabled MBEDTLS_DEBUG_C
				9016	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9017	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9018	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				9019	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9020	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				9021	0 \
				9022	-c "HTTP/1.0 200 ok" \
				9023	-c "Protocol is TLSv1.3" \
				9024	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9025	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9026	-c "NamedGroup: ffdhe6144 ( 103 )" \
				9027	-c "Verifying peer X.509 certificate... ok" \
				9028	-C "received HelloRetryRequest message"
				9029
				9030	requires_openssl_tls1_3
				9031	requires_openssl_3_x
				9032	requires_config_enabled MBEDTLS_SSL_CLI_C
				9033	requires_config_enabled MBEDTLS_DEBUG_C
				9034	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9035	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9036	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				9037	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9038	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				9039	0 \
				9040	-c "HTTP/1.0 200 ok" \
				9041	-c "Protocol is TLSv1.3" \
				9042	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9043	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9044	-c "NamedGroup: ffdhe6144 ( 103 )" \
				9045	-c "Verifying peer X.509 certificate... ok" \
				9046	-C "received HelloRetryRequest message"
				9047
				9048	requires_openssl_tls1_3
				9049	requires_openssl_3_x
				9050	requires_config_enabled MBEDTLS_SSL_CLI_C
				9051	requires_config_enabled MBEDTLS_DEBUG_C
				9052	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9053	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9054	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				9055	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9056	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				9057	0 \
				9058	-c "HTTP/1.0 200 ok" \
				9059	-c "Protocol is TLSv1.3" \
				9060	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9061	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9062	-c "NamedGroup: ffdhe6144 ( 103 )" \
				9063	-c "Verifying peer X.509 certificate... ok" \
				9064	-C "received HelloRetryRequest message"
				9065
				9066	requires_openssl_tls1_3
				9067	requires_openssl_3_x
				9068	requires_config_enabled MBEDTLS_SSL_CLI_C
				9069	requires_config_enabled MBEDTLS_DEBUG_C
				9070	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9071	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9072	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9073	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				9074	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9075	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				9076	0 \
				9077	-c "HTTP/1.0 200 ok" \
				9078	-c "Protocol is TLSv1.3" \
				9079	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9080	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				9081	-c "NamedGroup: ffdhe6144 ( 103 )" \
				9082	-c "Verifying peer X.509 certificate... ok" \
				9083	-C "received HelloRetryRequest message"
				9084
				9085	requires_openssl_tls1_3
				9086	requires_openssl_3_x
				9087	requires_config_enabled MBEDTLS_SSL_CLI_C
				9088	requires_config_enabled MBEDTLS_DEBUG_C
				9089	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9090	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9091	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				9092	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9093	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				9094	0 \
				9095	-c "HTTP/1.0 200 ok" \
				9096	-c "Protocol is TLSv1.3" \
				9097	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9098	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9099	-c "NamedGroup: ffdhe8192 ( 104 )" \
				9100	-c "Verifying peer X.509 certificate... ok" \
				9101	-C "received HelloRetryRequest message"
				9102
				9103	requires_openssl_tls1_3
				9104	requires_openssl_3_x
				9105	requires_config_enabled MBEDTLS_SSL_CLI_C
				9106	requires_config_enabled MBEDTLS_DEBUG_C
				9107	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9108	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9109	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				9110	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9111	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				9112	0 \
				9113	-c "HTTP/1.0 200 ok" \
				9114	-c "Protocol is TLSv1.3" \
				9115	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9116	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9117	-c "NamedGroup: ffdhe8192 ( 104 )" \
				9118	-c "Verifying peer X.509 certificate... ok" \
				9119	-C "received HelloRetryRequest message"
				9120
				9121	requires_openssl_tls1_3
				9122	requires_openssl_3_x
				9123	requires_config_enabled MBEDTLS_SSL_CLI_C
				9124	requires_config_enabled MBEDTLS_DEBUG_C
				9125	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9126	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9127	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				9128	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9129	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				9130	0 \
				9131	-c "HTTP/1.0 200 ok" \
				9132	-c "Protocol is TLSv1.3" \
				9133	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9134	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9135	-c "NamedGroup: ffdhe8192 ( 104 )" \
				9136	-c "Verifying peer X.509 certificate... ok" \
				9137	-C "received HelloRetryRequest message"
				9138
				9139	requires_openssl_tls1_3
				9140	requires_openssl_3_x
				9141	requires_config_enabled MBEDTLS_SSL_CLI_C
				9142	requires_config_enabled MBEDTLS_DEBUG_C
				9143	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9144	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9145	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9146	run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				9147	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9148	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				9149	0 \
				9150	-c "HTTP/1.0 200 ok" \
				9151	-c "Protocol is TLSv1.3" \
				9152	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				9153	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				9154	-c "NamedGroup: ffdhe8192 ( 104 )" \
				9155	-c "Verifying peer X.509 certificate... ok" \
				9156	-C "received HelloRetryRequest message"
				9157
				9158	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9159	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9160	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9161	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9162	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9163	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9164	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9165	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9166	0 \
				9167	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9168	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9169	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9170	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9171	-c "NamedGroup: secp256r1 ( 17 )" \
				9172	-c "Verifying peer X.509 certificate... ok" \
				9173	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9174
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9175	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9176	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9177	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9178	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9179	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9180	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9181	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9182	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9183	0 \
				9184	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9185	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9186	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9187	-c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9188	-c "NamedGroup: secp256r1 ( 17 )" \
				9189	-c "Verifying peer X.509 certificate... ok" \
				9190	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9191
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9192	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9193	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9194	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9195	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9196	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9197	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9198	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9199	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9200	0 \
				9201	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9202	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9203	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9204	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9205	-c "NamedGroup: secp256r1 ( 17 )" \
				9206	-c "Verifying peer X.509 certificate... ok" \
				9207	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9208
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9209	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9210	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9211	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9212	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9213	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9214	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9215	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9216	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9217	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9218	0 \
				9219	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9220	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9221	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9222	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9223	-c "NamedGroup: secp256r1 ( 17 )" \
				9224	-c "Verifying peer X.509 certificate... ok" \
				9225	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9226
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9227	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9228	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9229	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9230	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9231	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9232	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9233	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9234	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9235	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9236	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9237	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9238	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9239	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9240	-c "NamedGroup: secp384r1 ( 18 )" \
				9241	-c "Verifying peer X.509 certificate... ok" \
				9242	-C "received HelloRetryRequest message"
				9243
				9244	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9245	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9246	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9247	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9248	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9249	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9250	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9251	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9252	0 \
				9253	-c "HTTP/1.0 200 ok" \
				9254	-c "Protocol is TLSv1.3" \
				9255	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9256	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9257	-c "NamedGroup: secp384r1 ( 18 )" \
				9258	-c "Verifying peer X.509 certificate... ok" \
				9259	-C "received HelloRetryRequest message"
				9260
				9261	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9262	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9263	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9264	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9265	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9266	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9267	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9268	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9269	0 \
				9270	-c "HTTP/1.0 200 ok" \
				9271	-c "Protocol is TLSv1.3" \
				9272	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9273	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9274	-c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9275	-c "Verifying peer X.509 certificate... ok" \
				9276	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9277
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9278	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9279	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9280	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9281	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9282	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9283	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9284	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9285	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9286	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9287	0 \
				9288	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9289	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9290	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9291	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9292	-c "NamedGroup: secp384r1 ( 18 )" \
				9293	-c "Verifying peer X.509 certificate... ok" \
				9294	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9295
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9296	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9297	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9298	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9299	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9300	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9301	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9302	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9303	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9304	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9305	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9306	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9307	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9308	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9309	-c "NamedGroup: secp521r1 ( 19 )" \
				9310	-c "Verifying peer X.509 certificate... ok" \
				9311	-C "received HelloRetryRequest message"
				9312
				9313	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9314	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9315	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9316	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9317	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9318	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9319	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9320	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9321	0 \
				9322	-c "HTTP/1.0 200 ok" \
				9323	-c "Protocol is TLSv1.3" \
				9324	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9325	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9326	-c "NamedGroup: secp521r1 ( 19 )" \
				9327	-c "Verifying peer X.509 certificate... ok" \
				9328	-C "received HelloRetryRequest message"
				9329
				9330	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9331	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9332	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9333	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9334	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9335	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9336	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9337	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9338	0 \
				9339	-c "HTTP/1.0 200 ok" \
				9340	-c "Protocol is TLSv1.3" \
				9341	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9342	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9343	-c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9344	-c "Verifying peer X.509 certificate... ok" \
				9345	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9346
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9347	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9348	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9349	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9350	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9351	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9352	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9353	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9354	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9355	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9356	0 \
				9357	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9358	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9359	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9360	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9361	-c "NamedGroup: secp521r1 ( 19 )" \
				9362	-c "Verifying peer X.509 certificate... ok" \
				9363	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9364
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9365	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9366	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9367	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9368	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9369	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9370	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9371	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9372	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9373	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9374	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9375	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9376	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9377	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9378	-c "NamedGroup: x25519 ( 1d )" \
				9379	-c "Verifying peer X.509 certificate... ok" \
				9380	-C "received HelloRetryRequest message"
				9381
				9382	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9383	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9384	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9385	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9386	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9387	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9388	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9389	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9390	0 \
				9391	-c "HTTP/1.0 200 ok" \
				9392	-c "Protocol is TLSv1.3" \
				9393	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9394	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9395	-c "NamedGroup: x25519 ( 1d )" \
				9396	-c "Verifying peer X.509 certificate... ok" \
				9397	-C "received HelloRetryRequest message"
				9398
				9399	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9400	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9401	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9402	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9403	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9404	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9405	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9406	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9407	0 \
				9408	-c "HTTP/1.0 200 ok" \
				9409	-c "Protocol is TLSv1.3" \
				9410	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9411	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9412	-c "NamedGroup: x25519 ( 1d )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9413	-c "Verifying peer X.509 certificate... ok" \
				9414	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9415
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9416	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9417	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9418	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9419	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9420	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9421	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9422	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9423	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9424	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9425	0 \
				9426	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9427	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9428	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9429	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9430	-c "NamedGroup: x25519 ( 1d )" \
				9431	-c "Verifying peer X.509 certificate... ok" \
				9432	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9433
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9434	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9435	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9436	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9437	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9438	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9439	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9440	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9441	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9442	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9443	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9444	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9445	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9446	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9447	-c "NamedGroup: x448 ( 1e )" \
				9448	-c "Verifying peer X.509 certificate... ok" \
				9449	-C "received HelloRetryRequest message"
				9450
				9451	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9452	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9453	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9454	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9455	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9456	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9457	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9458	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9459	0 \
				9460	-c "HTTP/1.0 200 ok" \
				9461	-c "Protocol is TLSv1.3" \
				9462	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9463	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9464	-c "NamedGroup: x448 ( 1e )" \
				9465	-c "Verifying peer X.509 certificate... ok" \
				9466	-C "received HelloRetryRequest message"
				9467
				9468	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9469	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9470	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9471	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9472	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9473	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9474	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9475	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9476	0 \
				9477	-c "HTTP/1.0 200 ok" \
				9478	-c "Protocol is TLSv1.3" \
				9479	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9480	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9481	-c "NamedGroup: x448 ( 1e )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9482	-c "Verifying peer X.509 certificate... ok" \
				9483	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9484
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9485	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9486	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9487	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9488	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9489	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9490	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9491	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9492	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9493	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9494	0 \
				9495	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9496	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9497	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9498	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9499	-c "NamedGroup: x448 ( 1e )" \
				9500	-c "Verifying peer X.509 certificate... ok" \
				9501	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9502
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9503	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	9504	requires_openssl_3_x
				9505	requires_config_enabled MBEDTLS_SSL_CLI_C
				9506	requires_config_enabled MBEDTLS_DEBUG_C
				9507	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9508	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9509	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				9510	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9511	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				9512	0 \
				9513	-c "HTTP/1.0 200 ok" \
				9514	-c "Protocol is TLSv1.3" \
				9515	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9516	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9517	-c "NamedGroup: ffdhe2048 ( 100 )" \
				9518	-c "Verifying peer X.509 certificate... ok" \
				9519	-C "received HelloRetryRequest message"
				9520
				9521	requires_openssl_tls1_3
				9522	requires_openssl_3_x
				9523	requires_config_enabled MBEDTLS_SSL_CLI_C
				9524	requires_config_enabled MBEDTLS_DEBUG_C
				9525	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9526	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9527	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				9528	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9529	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				9530	0 \
				9531	-c "HTTP/1.0 200 ok" \
				9532	-c "Protocol is TLSv1.3" \
				9533	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9534	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9535	-c "NamedGroup: ffdhe2048 ( 100 )" \
				9536	-c "Verifying peer X.509 certificate... ok" \
				9537	-C "received HelloRetryRequest message"
				9538
				9539	requires_openssl_tls1_3
				9540	requires_openssl_3_x
				9541	requires_config_enabled MBEDTLS_SSL_CLI_C
				9542	requires_config_enabled MBEDTLS_DEBUG_C
				9543	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9544	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9545	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				9546	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9547	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				9548	0 \
				9549	-c "HTTP/1.0 200 ok" \
				9550	-c "Protocol is TLSv1.3" \
				9551	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9552	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9553	-c "NamedGroup: ffdhe2048 ( 100 )" \
				9554	-c "Verifying peer X.509 certificate... ok" \
				9555	-C "received HelloRetryRequest message"
				9556
				9557	requires_openssl_tls1_3
				9558	requires_openssl_3_x
				9559	requires_config_enabled MBEDTLS_SSL_CLI_C
				9560	requires_config_enabled MBEDTLS_DEBUG_C
				9561	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9562	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9563	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9564	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				9565	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9566	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				9567	0 \
				9568	-c "HTTP/1.0 200 ok" \
				9569	-c "Protocol is TLSv1.3" \
				9570	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9571	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				9572	-c "NamedGroup: ffdhe2048 ( 100 )" \
				9573	-c "Verifying peer X.509 certificate... ok" \
				9574	-C "received HelloRetryRequest message"
				9575
				9576	requires_openssl_tls1_3
				9577	requires_openssl_3_x
				9578	requires_config_enabled MBEDTLS_SSL_CLI_C
				9579	requires_config_enabled MBEDTLS_DEBUG_C
				9580	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9581	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9582	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				9583	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9584	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				9585	0 \
				9586	-c "HTTP/1.0 200 ok" \
				9587	-c "Protocol is TLSv1.3" \
				9588	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9589	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9590	-c "NamedGroup: ffdhe3072 ( 101 )" \
				9591	-c "Verifying peer X.509 certificate... ok" \
				9592	-C "received HelloRetryRequest message"
				9593
				9594	requires_openssl_tls1_3
				9595	requires_openssl_3_x
				9596	requires_config_enabled MBEDTLS_SSL_CLI_C
				9597	requires_config_enabled MBEDTLS_DEBUG_C
				9598	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9599	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9600	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				9601	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9602	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				9603	0 \
				9604	-c "HTTP/1.0 200 ok" \
				9605	-c "Protocol is TLSv1.3" \
				9606	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9607	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9608	-c "NamedGroup: ffdhe3072 ( 101 )" \
				9609	-c "Verifying peer X.509 certificate... ok" \
				9610	-C "received HelloRetryRequest message"
				9611
				9612	requires_openssl_tls1_3
				9613	requires_openssl_3_x
				9614	requires_config_enabled MBEDTLS_SSL_CLI_C
				9615	requires_config_enabled MBEDTLS_DEBUG_C
				9616	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9617	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9618	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				9619	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9620	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				9621	0 \
				9622	-c "HTTP/1.0 200 ok" \
				9623	-c "Protocol is TLSv1.3" \
				9624	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9625	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9626	-c "NamedGroup: ffdhe3072 ( 101 )" \
				9627	-c "Verifying peer X.509 certificate... ok" \
				9628	-C "received HelloRetryRequest message"
				9629
				9630	requires_openssl_tls1_3
				9631	requires_openssl_3_x
				9632	requires_config_enabled MBEDTLS_SSL_CLI_C
				9633	requires_config_enabled MBEDTLS_DEBUG_C
				9634	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9635	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9636	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9637	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				9638	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9639	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				9640	0 \
				9641	-c "HTTP/1.0 200 ok" \
				9642	-c "Protocol is TLSv1.3" \
				9643	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9644	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				9645	-c "NamedGroup: ffdhe3072 ( 101 )" \
				9646	-c "Verifying peer X.509 certificate... ok" \
				9647	-C "received HelloRetryRequest message"
				9648
				9649	requires_openssl_tls1_3
				9650	requires_openssl_3_x
				9651	requires_config_enabled MBEDTLS_SSL_CLI_C
				9652	requires_config_enabled MBEDTLS_DEBUG_C
				9653	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9654	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9655	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				9656	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9657	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				9658	0 \
				9659	-c "HTTP/1.0 200 ok" \
				9660	-c "Protocol is TLSv1.3" \
				9661	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9662	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9663	-c "NamedGroup: ffdhe4096 ( 102 )" \
				9664	-c "Verifying peer X.509 certificate... ok" \
				9665	-C "received HelloRetryRequest message"
				9666
				9667	requires_openssl_tls1_3
				9668	requires_openssl_3_x
				9669	requires_config_enabled MBEDTLS_SSL_CLI_C
				9670	requires_config_enabled MBEDTLS_DEBUG_C
				9671	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9672	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9673	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				9674	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9675	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				9676	0 \
				9677	-c "HTTP/1.0 200 ok" \
				9678	-c "Protocol is TLSv1.3" \
				9679	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9680	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9681	-c "NamedGroup: ffdhe4096 ( 102 )" \
				9682	-c "Verifying peer X.509 certificate... ok" \
				9683	-C "received HelloRetryRequest message"
				9684
				9685	requires_openssl_tls1_3
				9686	requires_openssl_3_x
				9687	requires_config_enabled MBEDTLS_SSL_CLI_C
				9688	requires_config_enabled MBEDTLS_DEBUG_C
				9689	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9690	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9691	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				9692	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9693	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				9694	0 \
				9695	-c "HTTP/1.0 200 ok" \
				9696	-c "Protocol is TLSv1.3" \
				9697	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9698	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9699	-c "NamedGroup: ffdhe4096 ( 102 )" \
				9700	-c "Verifying peer X.509 certificate... ok" \
				9701	-C "received HelloRetryRequest message"
				9702
				9703	requires_openssl_tls1_3
				9704	requires_openssl_3_x
				9705	requires_config_enabled MBEDTLS_SSL_CLI_C
				9706	requires_config_enabled MBEDTLS_DEBUG_C
				9707	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9708	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9709	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9710	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				9711	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9712	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				9713	0 \
				9714	-c "HTTP/1.0 200 ok" \
				9715	-c "Protocol is TLSv1.3" \
				9716	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9717	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				9718	-c "NamedGroup: ffdhe4096 ( 102 )" \
				9719	-c "Verifying peer X.509 certificate... ok" \
				9720	-C "received HelloRetryRequest message"
				9721
				9722	requires_openssl_tls1_3
				9723	requires_openssl_3_x
				9724	requires_config_enabled MBEDTLS_SSL_CLI_C
				9725	requires_config_enabled MBEDTLS_DEBUG_C
				9726	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9727	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9728	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				9729	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9730	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				9731	0 \
				9732	-c "HTTP/1.0 200 ok" \
				9733	-c "Protocol is TLSv1.3" \
				9734	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9735	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9736	-c "NamedGroup: ffdhe6144 ( 103 )" \
				9737	-c "Verifying peer X.509 certificate... ok" \
				9738	-C "received HelloRetryRequest message"
				9739
				9740	requires_openssl_tls1_3
				9741	requires_openssl_3_x
				9742	requires_config_enabled MBEDTLS_SSL_CLI_C
				9743	requires_config_enabled MBEDTLS_DEBUG_C
				9744	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9745	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9746	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				9747	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9748	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				9749	0 \
				9750	-c "HTTP/1.0 200 ok" \
				9751	-c "Protocol is TLSv1.3" \
				9752	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9753	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9754	-c "NamedGroup: ffdhe6144 ( 103 )" \
				9755	-c "Verifying peer X.509 certificate... ok" \
				9756	-C "received HelloRetryRequest message"
				9757
				9758	requires_openssl_tls1_3
				9759	requires_openssl_3_x
				9760	requires_config_enabled MBEDTLS_SSL_CLI_C
				9761	requires_config_enabled MBEDTLS_DEBUG_C
				9762	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9763	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9764	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				9765	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9766	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				9767	0 \
				9768	-c "HTTP/1.0 200 ok" \
				9769	-c "Protocol is TLSv1.3" \
				9770	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9771	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9772	-c "NamedGroup: ffdhe6144 ( 103 )" \
				9773	-c "Verifying peer X.509 certificate... ok" \
				9774	-C "received HelloRetryRequest message"
				9775
				9776	requires_openssl_tls1_3
				9777	requires_openssl_3_x
				9778	requires_config_enabled MBEDTLS_SSL_CLI_C
				9779	requires_config_enabled MBEDTLS_DEBUG_C
				9780	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9781	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9782	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9783	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				9784	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9785	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				9786	0 \
				9787	-c "HTTP/1.0 200 ok" \
				9788	-c "Protocol is TLSv1.3" \
				9789	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9790	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				9791	-c "NamedGroup: ffdhe6144 ( 103 )" \
				9792	-c "Verifying peer X.509 certificate... ok" \
				9793	-C "received HelloRetryRequest message"
				9794
				9795	requires_openssl_tls1_3
				9796	requires_openssl_3_x
				9797	requires_config_enabled MBEDTLS_SSL_CLI_C
				9798	requires_config_enabled MBEDTLS_DEBUG_C
				9799	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9800	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9801	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				9802	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9803	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				9804	0 \
				9805	-c "HTTP/1.0 200 ok" \
				9806	-c "Protocol is TLSv1.3" \
				9807	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9808	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				9809	-c "NamedGroup: ffdhe8192 ( 104 )" \
				9810	-c "Verifying peer X.509 certificate... ok" \
				9811	-C "received HelloRetryRequest message"
				9812
				9813	requires_openssl_tls1_3
				9814	requires_openssl_3_x
				9815	requires_config_enabled MBEDTLS_SSL_CLI_C
				9816	requires_config_enabled MBEDTLS_DEBUG_C
				9817	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9818	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9819	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				9820	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9821	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				9822	0 \
				9823	-c "HTTP/1.0 200 ok" \
				9824	-c "Protocol is TLSv1.3" \
				9825	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9826	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9827	-c "NamedGroup: ffdhe8192 ( 104 )" \
				9828	-c "Verifying peer X.509 certificate... ok" \
				9829	-C "received HelloRetryRequest message"
				9830
				9831	requires_openssl_tls1_3
				9832	requires_openssl_3_x
				9833	requires_config_enabled MBEDTLS_SSL_CLI_C
				9834	requires_config_enabled MBEDTLS_DEBUG_C
				9835	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9836	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9837	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				9838	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9839	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				9840	0 \
				9841	-c "HTTP/1.0 200 ok" \
				9842	-c "Protocol is TLSv1.3" \
				9843	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9844	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9845	-c "NamedGroup: ffdhe8192 ( 104 )" \
				9846	-c "Verifying peer X.509 certificate... ok" \
				9847	-C "received HelloRetryRequest message"
				9848
				9849	requires_openssl_tls1_3
				9850	requires_openssl_3_x
				9851	requires_config_enabled MBEDTLS_SSL_CLI_C
				9852	requires_config_enabled MBEDTLS_DEBUG_C
				9853	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				9854	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9855	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9856	run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				9857	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				9858	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				9859	0 \
				9860	-c "HTTP/1.0 200 ok" \
				9861	-c "Protocol is TLSv1.3" \
				9862	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				9863	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				9864	-c "NamedGroup: ffdhe8192 ( 104 )" \
				9865	-c "Verifying peer X.509 certificate... ok" \
				9866	-C "received HelloRetryRequest message"
				9867
				9868	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9869	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9870	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9871	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9872	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9873	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9874	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9875	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9876	0 \
				9877	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9878	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9879	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				9880	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9881	-c "NamedGroup: secp256r1 ( 17 )" \
				9882	-c "Verifying peer X.509 certificate... ok" \
				9883	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9884
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9885	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9886	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9887	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9888	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9889	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9890	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9891	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9892	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9893	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9894	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9895	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9896	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9897	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9898	-c "NamedGroup: secp256r1 ( 17 )" \
				9899	-c "Verifying peer X.509 certificate... ok" \
				9900	-C "received HelloRetryRequest message"
				9901
				9902	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9903	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9904	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9905	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9906	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9907	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9908	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9909	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9910	0 \
				9911	-c "HTTP/1.0 200 ok" \
				9912	-c "Protocol is TLSv1.3" \
				9913	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				9914	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9915	-c "NamedGroup: secp256r1 ( 17 )" \
				9916	-c "Verifying peer X.509 certificate... ok" \
				9917	-C "received HelloRetryRequest message"
				9918
				9919	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9920	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9921	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9922	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9923	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9924	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9925	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9926	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9927	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9928	0 \
				9929	-c "HTTP/1.0 200 ok" \
				9930	-c "Protocol is TLSv1.3" \
				9931	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				9932	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9933	-c "NamedGroup: secp256r1 ( 17 )" \
				9934	-c "Verifying peer X.509 certificate... ok" \
				9935	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9936
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9937	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9938	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9939	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9940	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9941	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	9942	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9943	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9944	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9945	0 \
				9946	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9947	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9948	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				9949	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	9950	-c "NamedGroup: secp384r1 ( 18 )" \
				9951	-c "Verifying peer X.509 certificate... ok" \
				9952	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	9953
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9954	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	9955	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9956	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9957	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	9958	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9959	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9960	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9961	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9962	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9963	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	9964	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	9965	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9966	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				9967	-c "NamedGroup: secp384r1 ( 18 )" \
				9968	-c "Verifying peer X.509 certificate... ok" \
				9969	-C "received HelloRetryRequest message"
				9970
				9971	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9972	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9973	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9974	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9975	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9976	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9977	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9978	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9979	0 \
				9980	-c "HTTP/1.0 200 ok" \
				9981	-c "Protocol is TLSv1.3" \
				9982	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				9983	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				9984	-c "NamedGroup: secp384r1 ( 18 )" \
				9985	-c "Verifying peer X.509 certificate... ok" \
				9986	-C "received HelloRetryRequest message"
				9987
				9988	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9989	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	9990	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	9991	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9992	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				9993	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				9994	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	9995	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	9996	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	9997	0 \
				9998	-c "HTTP/1.0 200 ok" \
				9999	-c "Protocol is TLSv1.3" \
				10000	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10001	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	10002	-c "NamedGroup: secp384r1 ( 18 )" \
				10003	-c "Verifying peer X.509 certificate... ok" \
				10004	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	10005
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10006	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10007	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10008	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10009	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	10010	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	10011	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10012	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10013	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10014	0 \
				10015	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	10016	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10017	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10018	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	10019	-c "NamedGroup: secp521r1 ( 19 )" \
				10020	-c "Verifying peer X.509 certificate... ok" \
				10021	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	10022
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10023	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10024	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10025	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10026	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	10027	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10028	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10029	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10030	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10031	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10032	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	10033	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10034	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10035	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10036	-c "NamedGroup: secp521r1 ( 19 )" \
				10037	-c "Verifying peer X.509 certificate... ok" \
				10038	-C "received HelloRetryRequest message"
				10039
				10040	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10041	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10042	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10043	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10044	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10045	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10046	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10047	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10048	0 \
				10049	-c "HTTP/1.0 200 ok" \
				10050	-c "Protocol is TLSv1.3" \
				10051	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10052	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10053	-c "NamedGroup: secp521r1 ( 19 )" \
				10054	-c "Verifying peer X.509 certificate... ok" \
				10055	-C "received HelloRetryRequest message"
				10056
				10057	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10058	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10059	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10060	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10061	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10062	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10063	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10064	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10065	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10066	0 \
				10067	-c "HTTP/1.0 200 ok" \
				10068	-c "Protocol is TLSv1.3" \
				10069	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10070	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	10071	-c "NamedGroup: secp521r1 ( 19 )" \
				10072	-c "Verifying peer X.509 certificate... ok" \
				10073	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	10074
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10075	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10076	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10077	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10078	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	10079	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	10080	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10081	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10082	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10083	0 \
				10084	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	10085	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10086	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10087	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	10088	-c "NamedGroup: x25519 ( 1d )" \
				10089	-c "Verifying peer X.509 certificate... ok" \
				10090	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	10091
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10092	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10093	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10094	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10095	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	10096	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10097	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10098	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10099	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10100	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10101	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	10102	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10103	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10104	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10105	-c "NamedGroup: x25519 ( 1d )" \
				10106	-c "Verifying peer X.509 certificate... ok" \
				10107	-C "received HelloRetryRequest message"
				10108
				10109	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10110	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10111	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10112	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10113	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10114	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10115	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10116	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10117	0 \
				10118	-c "HTTP/1.0 200 ok" \
				10119	-c "Protocol is TLSv1.3" \
				10120	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10121	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10122	-c "NamedGroup: x25519 ( 1d )" \
				10123	-c "Verifying peer X.509 certificate... ok" \
				10124	-C "received HelloRetryRequest message"
				10125
				10126	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10127	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10128	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10129	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10130	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10131	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10132	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10133	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10134	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10135	0 \
				10136	-c "HTTP/1.0 200 ok" \
				10137	-c "Protocol is TLSv1.3" \
				10138	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10139	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	10140	-c "NamedGroup: x25519 ( 1d )" \
				10141	-c "Verifying peer X.509 certificate... ok" \
				10142	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	10143
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10144	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10145	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10146	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10147	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	10148	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	10149	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10150	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10151	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10152	0 \
				10153	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	10154	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10155	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10156	-c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	10157	-c "NamedGroup: x448 ( 1e )" \
				10158	-c "Verifying peer X.509 certificate... ok" \
				10159	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	10160
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10161	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10162	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10163	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10164	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	10165	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10166	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10167	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10168	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10169	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10170	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	10171	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10172	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10173	-c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	10174	-c "NamedGroup: x448 ( 1e )" \
				10175	-c "Verifying peer X.509 certificate... ok" \
				10176	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	10177
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10178	requires_openssl_tls1_3
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10179	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10180	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10181	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	10182	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10183	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10184	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10185	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10186	0 \
				10187	-c "HTTP/1.0 200 ok" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	10188	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10189	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10190	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10191	-c "NamedGroup: x448 ( 1e )" \
				10192	-c "Verifying peer X.509 certificate... ok" \
				10193	-C "received HelloRetryRequest message"
				10194
				10195	requires_openssl_tls1_3
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10196	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10197	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10198	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10199	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10200	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10201	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	10202	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10203	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10204	0 \
				10205	-c "HTTP/1.0 200 ok" \
				10206	-c "Protocol is TLSv1.3" \
				10207	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10208	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10209	-c "NamedGroup: x448 ( 1e )" \
				10210	-c "Verifying peer X.509 certificate... ok" \
				10211	-C "received HelloRetryRequest message"
				10212
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	10213	requires_openssl_tls1_3
				10214	requires_openssl_3_x
				10215	requires_config_enabled MBEDTLS_SSL_CLI_C
				10216	requires_config_enabled MBEDTLS_DEBUG_C
				10217	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10218	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10219	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				10220	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10221	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				10222	0 \
				10223	-c "HTTP/1.0 200 ok" \
				10224	-c "Protocol is TLSv1.3" \
				10225	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10226	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10227	-c "NamedGroup: ffdhe2048 ( 100 )" \
				10228	-c "Verifying peer X.509 certificate... ok" \
				10229	-C "received HelloRetryRequest message"
				10230
				10231	requires_openssl_tls1_3
				10232	requires_openssl_3_x
				10233	requires_config_enabled MBEDTLS_SSL_CLI_C
				10234	requires_config_enabled MBEDTLS_DEBUG_C
				10235	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10236	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10237	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				10238	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10239	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				10240	0 \
				10241	-c "HTTP/1.0 200 ok" \
				10242	-c "Protocol is TLSv1.3" \
				10243	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10244	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10245	-c "NamedGroup: ffdhe2048 ( 100 )" \
				10246	-c "Verifying peer X.509 certificate... ok" \
				10247	-C "received HelloRetryRequest message"
				10248
				10249	requires_openssl_tls1_3
				10250	requires_openssl_3_x
				10251	requires_config_enabled MBEDTLS_SSL_CLI_C
				10252	requires_config_enabled MBEDTLS_DEBUG_C
				10253	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10254	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10255	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				10256	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10257	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				10258	0 \
				10259	-c "HTTP/1.0 200 ok" \
				10260	-c "Protocol is TLSv1.3" \
				10261	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10262	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10263	-c "NamedGroup: ffdhe2048 ( 100 )" \
				10264	-c "Verifying peer X.509 certificate... ok" \
				10265	-C "received HelloRetryRequest message"
				10266
				10267	requires_openssl_tls1_3
				10268	requires_openssl_3_x
				10269	requires_config_enabled MBEDTLS_SSL_CLI_C
				10270	requires_config_enabled MBEDTLS_DEBUG_C
				10271	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10272	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10273	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10274	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				10275	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10276	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				10277	0 \
				10278	-c "HTTP/1.0 200 ok" \
				10279	-c "Protocol is TLSv1.3" \
				10280	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10281	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10282	-c "NamedGroup: ffdhe2048 ( 100 )" \
				10283	-c "Verifying peer X.509 certificate... ok" \
				10284	-C "received HelloRetryRequest message"
				10285
				10286	requires_openssl_tls1_3
				10287	requires_openssl_3_x
				10288	requires_config_enabled MBEDTLS_SSL_CLI_C
				10289	requires_config_enabled MBEDTLS_DEBUG_C
				10290	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10291	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10292	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				10293	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10294	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				10295	0 \
				10296	-c "HTTP/1.0 200 ok" \
				10297	-c "Protocol is TLSv1.3" \
				10298	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10299	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10300	-c "NamedGroup: ffdhe3072 ( 101 )" \
				10301	-c "Verifying peer X.509 certificate... ok" \
				10302	-C "received HelloRetryRequest message"
				10303
				10304	requires_openssl_tls1_3
				10305	requires_openssl_3_x
				10306	requires_config_enabled MBEDTLS_SSL_CLI_C
				10307	requires_config_enabled MBEDTLS_DEBUG_C
				10308	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10309	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10310	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				10311	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10312	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				10313	0 \
				10314	-c "HTTP/1.0 200 ok" \
				10315	-c "Protocol is TLSv1.3" \
				10316	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10317	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10318	-c "NamedGroup: ffdhe3072 ( 101 )" \
				10319	-c "Verifying peer X.509 certificate... ok" \
				10320	-C "received HelloRetryRequest message"
				10321
				10322	requires_openssl_tls1_3
				10323	requires_openssl_3_x
				10324	requires_config_enabled MBEDTLS_SSL_CLI_C
				10325	requires_config_enabled MBEDTLS_DEBUG_C
				10326	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10327	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10328	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				10329	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10330	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				10331	0 \
				10332	-c "HTTP/1.0 200 ok" \
				10333	-c "Protocol is TLSv1.3" \
				10334	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10335	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10336	-c "NamedGroup: ffdhe3072 ( 101 )" \
				10337	-c "Verifying peer X.509 certificate... ok" \
				10338	-C "received HelloRetryRequest message"
				10339
				10340	requires_openssl_tls1_3
				10341	requires_openssl_3_x
				10342	requires_config_enabled MBEDTLS_SSL_CLI_C
				10343	requires_config_enabled MBEDTLS_DEBUG_C
				10344	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10345	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10346	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10347	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				10348	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10349	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				10350	0 \
				10351	-c "HTTP/1.0 200 ok" \
				10352	-c "Protocol is TLSv1.3" \
				10353	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10354	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10355	-c "NamedGroup: ffdhe3072 ( 101 )" \
				10356	-c "Verifying peer X.509 certificate... ok" \
				10357	-C "received HelloRetryRequest message"
				10358
				10359	requires_openssl_tls1_3
				10360	requires_openssl_3_x
				10361	requires_config_enabled MBEDTLS_SSL_CLI_C
				10362	requires_config_enabled MBEDTLS_DEBUG_C
				10363	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10364	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10365	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				10366	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10367	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				10368	0 \
				10369	-c "HTTP/1.0 200 ok" \
				10370	-c "Protocol is TLSv1.3" \
				10371	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10372	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10373	-c "NamedGroup: ffdhe4096 ( 102 )" \
				10374	-c "Verifying peer X.509 certificate... ok" \
				10375	-C "received HelloRetryRequest message"
				10376
				10377	requires_openssl_tls1_3
				10378	requires_openssl_3_x
				10379	requires_config_enabled MBEDTLS_SSL_CLI_C
				10380	requires_config_enabled MBEDTLS_DEBUG_C
				10381	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10382	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10383	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				10384	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10385	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				10386	0 \
				10387	-c "HTTP/1.0 200 ok" \
				10388	-c "Protocol is TLSv1.3" \
				10389	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10390	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10391	-c "NamedGroup: ffdhe4096 ( 102 )" \
				10392	-c "Verifying peer X.509 certificate... ok" \
				10393	-C "received HelloRetryRequest message"
				10394
				10395	requires_openssl_tls1_3
				10396	requires_openssl_3_x
				10397	requires_config_enabled MBEDTLS_SSL_CLI_C
				10398	requires_config_enabled MBEDTLS_DEBUG_C
				10399	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10400	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10401	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				10402	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10403	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				10404	0 \
				10405	-c "HTTP/1.0 200 ok" \
				10406	-c "Protocol is TLSv1.3" \
				10407	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10408	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10409	-c "NamedGroup: ffdhe4096 ( 102 )" \
				10410	-c "Verifying peer X.509 certificate... ok" \
				10411	-C "received HelloRetryRequest message"
				10412
				10413	requires_openssl_tls1_3
				10414	requires_openssl_3_x
				10415	requires_config_enabled MBEDTLS_SSL_CLI_C
				10416	requires_config_enabled MBEDTLS_DEBUG_C
				10417	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10418	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10419	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10420	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				10421	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10422	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				10423	0 \
				10424	-c "HTTP/1.0 200 ok" \
				10425	-c "Protocol is TLSv1.3" \
				10426	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10427	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10428	-c "NamedGroup: ffdhe4096 ( 102 )" \
				10429	-c "Verifying peer X.509 certificate... ok" \
				10430	-C "received HelloRetryRequest message"
				10431
				10432	requires_openssl_tls1_3
				10433	requires_openssl_3_x
				10434	requires_config_enabled MBEDTLS_SSL_CLI_C
				10435	requires_config_enabled MBEDTLS_DEBUG_C
				10436	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10437	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10438	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				10439	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10440	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				10441	0 \
				10442	-c "HTTP/1.0 200 ok" \
				10443	-c "Protocol is TLSv1.3" \
				10444	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10445	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10446	-c "NamedGroup: ffdhe6144 ( 103 )" \
				10447	-c "Verifying peer X.509 certificate... ok" \
				10448	-C "received HelloRetryRequest message"
				10449
				10450	requires_openssl_tls1_3
				10451	requires_openssl_3_x
				10452	requires_config_enabled MBEDTLS_SSL_CLI_C
				10453	requires_config_enabled MBEDTLS_DEBUG_C
				10454	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10455	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10456	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				10457	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10458	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				10459	0 \
				10460	-c "HTTP/1.0 200 ok" \
				10461	-c "Protocol is TLSv1.3" \
				10462	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10463	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10464	-c "NamedGroup: ffdhe6144 ( 103 )" \
				10465	-c "Verifying peer X.509 certificate... ok" \
				10466	-C "received HelloRetryRequest message"
				10467
				10468	requires_openssl_tls1_3
				10469	requires_openssl_3_x
				10470	requires_config_enabled MBEDTLS_SSL_CLI_C
				10471	requires_config_enabled MBEDTLS_DEBUG_C
				10472	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10473	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10474	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				10475	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10476	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				10477	0 \
				10478	-c "HTTP/1.0 200 ok" \
				10479	-c "Protocol is TLSv1.3" \
				10480	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10481	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10482	-c "NamedGroup: ffdhe6144 ( 103 )" \
				10483	-c "Verifying peer X.509 certificate... ok" \
				10484	-C "received HelloRetryRequest message"
				10485
				10486	requires_openssl_tls1_3
				10487	requires_openssl_3_x
				10488	requires_config_enabled MBEDTLS_SSL_CLI_C
				10489	requires_config_enabled MBEDTLS_DEBUG_C
				10490	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10491	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10492	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10493	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				10494	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10495	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				10496	0 \
				10497	-c "HTTP/1.0 200 ok" \
				10498	-c "Protocol is TLSv1.3" \
				10499	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10500	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10501	-c "NamedGroup: ffdhe6144 ( 103 )" \
				10502	-c "Verifying peer X.509 certificate... ok" \
				10503	-C "received HelloRetryRequest message"
				10504
				10505	requires_openssl_tls1_3
				10506	requires_openssl_3_x
				10507	requires_config_enabled MBEDTLS_SSL_CLI_C
				10508	requires_config_enabled MBEDTLS_DEBUG_C
				10509	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10510	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10511	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				10512	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10513	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				10514	0 \
				10515	-c "HTTP/1.0 200 ok" \
				10516	-c "Protocol is TLSv1.3" \
				10517	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10518	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10519	-c "NamedGroup: ffdhe8192 ( 104 )" \
				10520	-c "Verifying peer X.509 certificate... ok" \
				10521	-C "received HelloRetryRequest message"
				10522
				10523	requires_openssl_tls1_3
				10524	requires_openssl_3_x
				10525	requires_config_enabled MBEDTLS_SSL_CLI_C
				10526	requires_config_enabled MBEDTLS_DEBUG_C
				10527	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10528	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10529	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				10530	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10531	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				10532	0 \
				10533	-c "HTTP/1.0 200 ok" \
				10534	-c "Protocol is TLSv1.3" \
				10535	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10536	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10537	-c "NamedGroup: ffdhe8192 ( 104 )" \
				10538	-c "Verifying peer X.509 certificate... ok" \
				10539	-C "received HelloRetryRequest message"
				10540
				10541	requires_openssl_tls1_3
				10542	requires_openssl_3_x
				10543	requires_config_enabled MBEDTLS_SSL_CLI_C
				10544	requires_config_enabled MBEDTLS_DEBUG_C
				10545	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10546	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10547	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				10548	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10549	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				10550	0 \
				10551	-c "HTTP/1.0 200 ok" \
				10552	-c "Protocol is TLSv1.3" \
				10553	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10554	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10555	-c "NamedGroup: ffdhe8192 ( 104 )" \
				10556	-c "Verifying peer X.509 certificate... ok" \
				10557	-C "received HelloRetryRequest message"
				10558
				10559	requires_openssl_tls1_3
				10560	requires_openssl_3_x
				10561	requires_config_enabled MBEDTLS_SSL_CLI_C
				10562	requires_config_enabled MBEDTLS_DEBUG_C
				10563	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10564	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10565	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10566	run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				10567	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				10568	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				10569	0 \
				10570	-c "HTTP/1.0 200 ok" \
				10571	-c "Protocol is TLSv1.3" \
				10572	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				10573	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10574	-c "NamedGroup: ffdhe8192 ( 104 )" \
				10575	-c "Verifying peer X.509 certificate... ok" \
				10576	-C "received HelloRetryRequest message"
				10577
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10578	requires_gnutls_tls1_3
				10579	requires_gnutls_next_no_ticket
				10580	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10581	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10582	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10583	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10584	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10585	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10586	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10587	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10588	0 \
				10589	-c "HTTP/1.0 200 OK" \
				10590	-c "Protocol is TLSv1.3" \
				10591	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10592	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10593	-c "NamedGroup: secp256r1 ( 17 )" \
				10594	-c "Verifying peer X.509 certificate... ok" \
				10595	-C "received HelloRetryRequest message"
				10596
				10597	requires_gnutls_tls1_3
				10598	requires_gnutls_next_no_ticket
				10599	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10600	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10601	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10602	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10603	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10604	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10605	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10606	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10607	0 \
				10608	-c "HTTP/1.0 200 OK" \
				10609	-c "Protocol is TLSv1.3" \
				10610	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	10611	-c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	10612	-c "NamedGroup: secp256r1 ( 17 )" \
				10613	-c "Verifying peer X.509 certificate... ok" \
				10614	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	10615
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10616	requires_gnutls_tls1_3
				10617	requires_gnutls_next_no_ticket
				10618	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	10619	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10620	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10621	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	10622	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10623	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10624	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10625	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10626	0 \
				10627	-c "HTTP/1.0 200 OK" \
				10628	-c "Protocol is TLSv1.3" \
				10629	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10630	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10631	-c "NamedGroup: secp256r1 ( 17 )" \
				10632	-c "Verifying peer X.509 certificate... ok" \
				10633	-C "received HelloRetryRequest message"
				10634
				10635	requires_gnutls_tls1_3
				10636	requires_gnutls_next_no_ticket
				10637	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10638	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10639	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10640	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10641	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10642	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10643	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10644	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10645	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10646	0 \
				10647	-c "HTTP/1.0 200 OK" \
				10648	-c "Protocol is TLSv1.3" \
				10649	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10650	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10651	-c "NamedGroup: secp256r1 ( 17 )" \
				10652	-c "Verifying peer X.509 certificate... ok" \
				10653	-C "received HelloRetryRequest message"
				10654
				10655	requires_gnutls_tls1_3
				10656	requires_gnutls_next_no_ticket
				10657	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10658	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10659	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10660	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10661	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10662	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10663	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10664	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10665	0 \
				10666	-c "HTTP/1.0 200 OK" \
				10667	-c "Protocol is TLSv1.3" \
				10668	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10669	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10670	-c "NamedGroup: secp384r1 ( 18 )" \
				10671	-c "Verifying peer X.509 certificate... ok" \
				10672	-C "received HelloRetryRequest message"
				10673
				10674	requires_gnutls_tls1_3
				10675	requires_gnutls_next_no_ticket
				10676	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10677	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10678	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10679	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10680	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10681	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10682	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10683	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10684	0 \
				10685	-c "HTTP/1.0 200 OK" \
				10686	-c "Protocol is TLSv1.3" \
				10687	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10688	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10689	-c "NamedGroup: secp384r1 ( 18 )" \
				10690	-c "Verifying peer X.509 certificate... ok" \
				10691	-C "received HelloRetryRequest message"
				10692
				10693	requires_gnutls_tls1_3
				10694	requires_gnutls_next_no_ticket
				10695	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10696	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10697	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10698	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10699	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10700	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10701	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10702	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10703	0 \
				10704	-c "HTTP/1.0 200 OK" \
				10705	-c "Protocol is TLSv1.3" \
				10706	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10707	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10708	-c "NamedGroup: secp384r1 ( 18 )" \
				10709	-c "Verifying peer X.509 certificate... ok" \
				10710	-C "received HelloRetryRequest message"
				10711
				10712	requires_gnutls_tls1_3
				10713	requires_gnutls_next_no_ticket
				10714	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10715	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10716	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10717	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10718	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10719	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10720	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10721	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10722	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10723	0 \
				10724	-c "HTTP/1.0 200 OK" \
				10725	-c "Protocol is TLSv1.3" \
				10726	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10727	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10728	-c "NamedGroup: secp384r1 ( 18 )" \
				10729	-c "Verifying peer X.509 certificate... ok" \
				10730	-C "received HelloRetryRequest message"
				10731
				10732	requires_gnutls_tls1_3
				10733	requires_gnutls_next_no_ticket
				10734	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10735	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10736	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10737	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10738	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10739	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10740	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10741	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10742	0 \
				10743	-c "HTTP/1.0 200 OK" \
				10744	-c "Protocol is TLSv1.3" \
				10745	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10746	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10747	-c "NamedGroup: secp521r1 ( 19 )" \
				10748	-c "Verifying peer X.509 certificate... ok" \
				10749	-C "received HelloRetryRequest message"
				10750
				10751	requires_gnutls_tls1_3
				10752	requires_gnutls_next_no_ticket
				10753	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10754	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10755	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10756	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10757	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10758	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10759	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10760	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10761	0 \
				10762	-c "HTTP/1.0 200 OK" \
				10763	-c "Protocol is TLSv1.3" \
				10764	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10765	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10766	-c "NamedGroup: secp521r1 ( 19 )" \
				10767	-c "Verifying peer X.509 certificate... ok" \
				10768	-C "received HelloRetryRequest message"
				10769
				10770	requires_gnutls_tls1_3
				10771	requires_gnutls_next_no_ticket
				10772	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10773	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10774	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10775	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10776	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10777	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10778	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10779	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10780	0 \
				10781	-c "HTTP/1.0 200 OK" \
				10782	-c "Protocol is TLSv1.3" \
				10783	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10784	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10785	-c "NamedGroup: secp521r1 ( 19 )" \
				10786	-c "Verifying peer X.509 certificate... ok" \
				10787	-C "received HelloRetryRequest message"
				10788
				10789	requires_gnutls_tls1_3
				10790	requires_gnutls_next_no_ticket
				10791	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10792	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10793	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10794	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10795	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10796	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10797	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10798	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10799	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10800	0 \
				10801	-c "HTTP/1.0 200 OK" \
				10802	-c "Protocol is TLSv1.3" \
				10803	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10804	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10805	-c "NamedGroup: secp521r1 ( 19 )" \
				10806	-c "Verifying peer X.509 certificate... ok" \
				10807	-C "received HelloRetryRequest message"
				10808
				10809	requires_gnutls_tls1_3
				10810	requires_gnutls_next_no_ticket
				10811	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10812	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10813	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10814	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10815	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10816	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10817	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10818	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10819	0 \
				10820	-c "HTTP/1.0 200 OK" \
				10821	-c "Protocol is TLSv1.3" \
				10822	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10823	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10824	-c "NamedGroup: x25519 ( 1d )" \
				10825	-c "Verifying peer X.509 certificate... ok" \
				10826	-C "received HelloRetryRequest message"
				10827
				10828	requires_gnutls_tls1_3
				10829	requires_gnutls_next_no_ticket
				10830	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10831	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10832	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10833	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10834	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10835	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10836	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10837	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10838	0 \
				10839	-c "HTTP/1.0 200 OK" \
				10840	-c "Protocol is TLSv1.3" \
				10841	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10842	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10843	-c "NamedGroup: x25519 ( 1d )" \
				10844	-c "Verifying peer X.509 certificate... ok" \
				10845	-C "received HelloRetryRequest message"
				10846
				10847	requires_gnutls_tls1_3
				10848	requires_gnutls_next_no_ticket
				10849	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10850	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10851	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10852	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10853	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10854	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10855	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10856	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10857	0 \
				10858	-c "HTTP/1.0 200 OK" \
				10859	-c "Protocol is TLSv1.3" \
				10860	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10861	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10862	-c "NamedGroup: x25519 ( 1d )" \
				10863	-c "Verifying peer X.509 certificate... ok" \
				10864	-C "received HelloRetryRequest message"
				10865
				10866	requires_gnutls_tls1_3
				10867	requires_gnutls_next_no_ticket
				10868	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10869	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10870	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10871	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10872	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10873	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10874	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10875	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10876	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10877	0 \
				10878	-c "HTTP/1.0 200 OK" \
				10879	-c "Protocol is TLSv1.3" \
				10880	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10881	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10882	-c "NamedGroup: x25519 ( 1d )" \
				10883	-c "Verifying peer X.509 certificate... ok" \
				10884	-C "received HelloRetryRequest message"
				10885
				10886	requires_gnutls_tls1_3
				10887	requires_gnutls_next_no_ticket
				10888	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10889	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10890	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10891	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10892	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10893	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10894	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10895	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10896	0 \
				10897	-c "HTTP/1.0 200 OK" \
				10898	-c "Protocol is TLSv1.3" \
				10899	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10900	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10901	-c "NamedGroup: x448 ( 1e )" \
				10902	-c "Verifying peer X.509 certificate... ok" \
				10903	-C "received HelloRetryRequest message"
				10904
				10905	requires_gnutls_tls1_3
				10906	requires_gnutls_next_no_ticket
				10907	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10908	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10909	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10910	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10911	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10912	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10913	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10914	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10915	0 \
				10916	-c "HTTP/1.0 200 OK" \
				10917	-c "Protocol is TLSv1.3" \
				10918	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10919	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10920	-c "NamedGroup: x448 ( 1e )" \
				10921	-c "Verifying peer X.509 certificate... ok" \
				10922	-C "received HelloRetryRequest message"
				10923
				10924	requires_gnutls_tls1_3
				10925	requires_gnutls_next_no_ticket
				10926	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10927	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10928	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10929	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10930	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10931	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10932	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10933	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10934	0 \
				10935	-c "HTTP/1.0 200 OK" \
				10936	-c "Protocol is TLSv1.3" \
				10937	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10938	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				10939	-c "NamedGroup: x448 ( 1e )" \
				10940	-c "Verifying peer X.509 certificate... ok" \
				10941	-C "received HelloRetryRequest message"
				10942
				10943	requires_gnutls_tls1_3
				10944	requires_gnutls_next_no_ticket
				10945	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10946	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10947	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10948	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10949	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10950	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				10951	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	10952	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	10953	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10954	0 \
				10955	-c "HTTP/1.0 200 OK" \
				10956	-c "Protocol is TLSv1.3" \
				10957	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10958	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				10959	-c "NamedGroup: x448 ( 1e )" \
				10960	-c "Verifying peer X.509 certificate... ok" \
				10961	-C "received HelloRetryRequest message"
				10962
				10963	requires_gnutls_tls1_3
				10964	requires_gnutls_next_no_ticket
				10965	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10966	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	10967	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	10968	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	10969	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	10970	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				10971	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				10972	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				10973	0 \
				10974	-c "HTTP/1.0 200 OK" \
				10975	-c "Protocol is TLSv1.3" \
				10976	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10977	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				10978	-c "NamedGroup: ffdhe2048 ( 100 )" \
				10979	-c "Verifying peer X.509 certificate... ok" \
				10980	-C "received HelloRetryRequest message"
				10981
				10982	requires_gnutls_tls1_3
				10983	requires_gnutls_next_no_ticket
				10984	requires_gnutls_next_disable_tls13_compat
				10985	requires_config_enabled MBEDTLS_SSL_CLI_C
				10986	requires_config_enabled MBEDTLS_DEBUG_C
				10987	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				10988	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				10989	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				10990	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				10991	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				10992	0 \
				10993	-c "HTTP/1.0 200 OK" \
				10994	-c "Protocol is TLSv1.3" \
				10995	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				10996	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				10997	-c "NamedGroup: ffdhe2048 ( 100 )" \
				10998	-c "Verifying peer X.509 certificate... ok" \
				10999	-C "received HelloRetryRequest message"
				11000
				11001	requires_gnutls_tls1_3
				11002	requires_gnutls_next_no_ticket
				11003	requires_gnutls_next_disable_tls13_compat
				11004	requires_config_enabled MBEDTLS_SSL_CLI_C
				11005	requires_config_enabled MBEDTLS_DEBUG_C
				11006	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11007	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11008	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				11009	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				11010	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				11011	0 \
				11012	-c "HTTP/1.0 200 OK" \
				11013	-c "Protocol is TLSv1.3" \
				11014	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11015	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11016	-c "NamedGroup: ffdhe2048 ( 100 )" \
				11017	-c "Verifying peer X.509 certificate... ok" \
				11018	-C "received HelloRetryRequest message"
				11019
				11020	requires_gnutls_tls1_3
				11021	requires_gnutls_next_no_ticket
				11022	requires_gnutls_next_disable_tls13_compat
				11023	requires_config_enabled MBEDTLS_SSL_CLI_C
				11024	requires_config_enabled MBEDTLS_DEBUG_C
				11025	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11026	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11027	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11028	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				11029	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				11030	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				11031	0 \
				11032	-c "HTTP/1.0 200 OK" \
				11033	-c "Protocol is TLSv1.3" \
				11034	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11035	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11036	-c "NamedGroup: ffdhe2048 ( 100 )" \
				11037	-c "Verifying peer X.509 certificate... ok" \
				11038	-C "received HelloRetryRequest message"
				11039
				11040	requires_gnutls_tls1_3
				11041	requires_gnutls_next_no_ticket
				11042	requires_gnutls_next_disable_tls13_compat
				11043	requires_config_enabled MBEDTLS_SSL_CLI_C
				11044	requires_config_enabled MBEDTLS_DEBUG_C
				11045	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11046	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11047	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				11048	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				11049	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				11050	0 \
				11051	-c "HTTP/1.0 200 OK" \
				11052	-c "Protocol is TLSv1.3" \
				11053	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11054	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11055	-c "NamedGroup: ffdhe3072 ( 101 )" \
				11056	-c "Verifying peer X.509 certificate... ok" \
				11057	-C "received HelloRetryRequest message"
				11058
				11059	requires_gnutls_tls1_3
				11060	requires_gnutls_next_no_ticket
				11061	requires_gnutls_next_disable_tls13_compat
				11062	requires_config_enabled MBEDTLS_SSL_CLI_C
				11063	requires_config_enabled MBEDTLS_DEBUG_C
				11064	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11065	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11066	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				11067	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				11068	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				11069	0 \
				11070	-c "HTTP/1.0 200 OK" \
				11071	-c "Protocol is TLSv1.3" \
				11072	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11073	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11074	-c "NamedGroup: ffdhe3072 ( 101 )" \
				11075	-c "Verifying peer X.509 certificate... ok" \
				11076	-C "received HelloRetryRequest message"
				11077
				11078	requires_gnutls_tls1_3
				11079	requires_gnutls_next_no_ticket
				11080	requires_gnutls_next_disable_tls13_compat
				11081	requires_config_enabled MBEDTLS_SSL_CLI_C
				11082	requires_config_enabled MBEDTLS_DEBUG_C
				11083	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11084	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11085	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				11086	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				11087	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				11088	0 \
				11089	-c "HTTP/1.0 200 OK" \
				11090	-c "Protocol is TLSv1.3" \
				11091	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11092	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11093	-c "NamedGroup: ffdhe3072 ( 101 )" \
				11094	-c "Verifying peer X.509 certificate... ok" \
				11095	-C "received HelloRetryRequest message"
				11096
				11097	requires_gnutls_tls1_3
				11098	requires_gnutls_next_no_ticket
				11099	requires_gnutls_next_disable_tls13_compat
				11100	requires_config_enabled MBEDTLS_SSL_CLI_C
				11101	requires_config_enabled MBEDTLS_DEBUG_C
				11102	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11103	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11104	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11105	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				11106	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				11107	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				11108	0 \
				11109	-c "HTTP/1.0 200 OK" \
				11110	-c "Protocol is TLSv1.3" \
				11111	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11112	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11113	-c "NamedGroup: ffdhe3072 ( 101 )" \
				11114	-c "Verifying peer X.509 certificate... ok" \
				11115	-C "received HelloRetryRequest message"
				11116
				11117	requires_gnutls_tls1_3
				11118	requires_gnutls_next_no_ticket
				11119	requires_gnutls_next_disable_tls13_compat
				11120	requires_config_enabled MBEDTLS_SSL_CLI_C
				11121	requires_config_enabled MBEDTLS_DEBUG_C
				11122	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11123	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11124	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				11125	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				11126	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				11127	0 \
				11128	-c "HTTP/1.0 200 OK" \
				11129	-c "Protocol is TLSv1.3" \
				11130	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11131	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11132	-c "NamedGroup: ffdhe4096 ( 102 )" \
				11133	-c "Verifying peer X.509 certificate... ok" \
				11134	-C "received HelloRetryRequest message"
				11135
				11136	requires_gnutls_tls1_3
				11137	requires_gnutls_next_no_ticket
				11138	requires_gnutls_next_disable_tls13_compat
				11139	requires_config_enabled MBEDTLS_SSL_CLI_C
				11140	requires_config_enabled MBEDTLS_DEBUG_C
				11141	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11142	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11143	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				11144	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				11145	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				11146	0 \
				11147	-c "HTTP/1.0 200 OK" \
				11148	-c "Protocol is TLSv1.3" \
				11149	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11150	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11151	-c "NamedGroup: ffdhe4096 ( 102 )" \
				11152	-c "Verifying peer X.509 certificate... ok" \
				11153	-C "received HelloRetryRequest message"
				11154
				11155	requires_gnutls_tls1_3
				11156	requires_gnutls_next_no_ticket
				11157	requires_gnutls_next_disable_tls13_compat
				11158	requires_config_enabled MBEDTLS_SSL_CLI_C
				11159	requires_config_enabled MBEDTLS_DEBUG_C
				11160	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11161	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11162	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				11163	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				11164	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				11165	0 \
				11166	-c "HTTP/1.0 200 OK" \
				11167	-c "Protocol is TLSv1.3" \
				11168	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11169	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11170	-c "NamedGroup: ffdhe4096 ( 102 )" \
				11171	-c "Verifying peer X.509 certificate... ok" \
				11172	-C "received HelloRetryRequest message"
				11173
				11174	requires_gnutls_tls1_3
				11175	requires_gnutls_next_no_ticket
				11176	requires_gnutls_next_disable_tls13_compat
				11177	requires_config_enabled MBEDTLS_SSL_CLI_C
				11178	requires_config_enabled MBEDTLS_DEBUG_C
				11179	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11180	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11181	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11182	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				11183	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				11184	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				11185	0 \
				11186	-c "HTTP/1.0 200 OK" \
				11187	-c "Protocol is TLSv1.3" \
				11188	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11189	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11190	-c "NamedGroup: ffdhe4096 ( 102 )" \
				11191	-c "Verifying peer X.509 certificate... ok" \
				11192	-C "received HelloRetryRequest message"
				11193
				11194	requires_gnutls_tls1_3
				11195	requires_gnutls_next_no_ticket
				11196	requires_gnutls_next_disable_tls13_compat
				11197	requires_config_enabled MBEDTLS_SSL_CLI_C
				11198	requires_config_enabled MBEDTLS_DEBUG_C
				11199	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11200	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11201	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				11202	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				11203	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				11204	0 \
				11205	-c "HTTP/1.0 200 OK" \
				11206	-c "Protocol is TLSv1.3" \
				11207	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11208	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11209	-c "NamedGroup: ffdhe6144 ( 103 )" \
				11210	-c "Verifying peer X.509 certificate... ok" \
				11211	-C "received HelloRetryRequest message"
				11212
				11213	requires_gnutls_tls1_3
				11214	requires_gnutls_next_no_ticket
				11215	requires_gnutls_next_disable_tls13_compat
				11216	requires_config_enabled MBEDTLS_SSL_CLI_C
				11217	requires_config_enabled MBEDTLS_DEBUG_C
				11218	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11219	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11220	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				11221	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				11222	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				11223	0 \
				11224	-c "HTTP/1.0 200 OK" \
				11225	-c "Protocol is TLSv1.3" \
				11226	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11227	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11228	-c "NamedGroup: ffdhe6144 ( 103 )" \
				11229	-c "Verifying peer X.509 certificate... ok" \
				11230	-C "received HelloRetryRequest message"
				11231
				11232	requires_gnutls_tls1_3
				11233	requires_gnutls_next_no_ticket
				11234	requires_gnutls_next_disable_tls13_compat
				11235	requires_config_enabled MBEDTLS_SSL_CLI_C
				11236	requires_config_enabled MBEDTLS_DEBUG_C
				11237	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11238	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11239	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				11240	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				11241	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				11242	0 \
				11243	-c "HTTP/1.0 200 OK" \
				11244	-c "Protocol is TLSv1.3" \
				11245	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11246	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11247	-c "NamedGroup: ffdhe6144 ( 103 )" \
				11248	-c "Verifying peer X.509 certificate... ok" \
				11249	-C "received HelloRetryRequest message"
				11250
				11251	requires_gnutls_tls1_3
				11252	requires_gnutls_next_no_ticket
				11253	requires_gnutls_next_disable_tls13_compat
				11254	requires_config_enabled MBEDTLS_SSL_CLI_C
				11255	requires_config_enabled MBEDTLS_DEBUG_C
				11256	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11257	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11258	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11259	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				11260	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				11261	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				11262	0 \
				11263	-c "HTTP/1.0 200 OK" \
				11264	-c "Protocol is TLSv1.3" \
				11265	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11266	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11267	-c "NamedGroup: ffdhe6144 ( 103 )" \
				11268	-c "Verifying peer X.509 certificate... ok" \
				11269	-C "received HelloRetryRequest message"
				11270
				11271	requires_gnutls_tls1_3
				11272	requires_gnutls_next_no_ticket
				11273	requires_gnutls_next_disable_tls13_compat
				11274	requires_config_enabled MBEDTLS_SSL_CLI_C
				11275	requires_config_enabled MBEDTLS_DEBUG_C
				11276	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11277	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11278	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				11279	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				11280	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				11281	0 \
				11282	-c "HTTP/1.0 200 OK" \
				11283	-c "Protocol is TLSv1.3" \
				11284	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11285	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11286	-c "NamedGroup: ffdhe8192 ( 104 )" \
				11287	-c "Verifying peer X.509 certificate... ok" \
				11288	-C "received HelloRetryRequest message"
				11289
				11290	requires_gnutls_tls1_3
				11291	requires_gnutls_next_no_ticket
				11292	requires_gnutls_next_disable_tls13_compat
				11293	requires_config_enabled MBEDTLS_SSL_CLI_C
				11294	requires_config_enabled MBEDTLS_DEBUG_C
				11295	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11296	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11297	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				11298	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				11299	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				11300	0 \
				11301	-c "HTTP/1.0 200 OK" \
				11302	-c "Protocol is TLSv1.3" \
				11303	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11304	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11305	-c "NamedGroup: ffdhe8192 ( 104 )" \
				11306	-c "Verifying peer X.509 certificate... ok" \
				11307	-C "received HelloRetryRequest message"
				11308
				11309	requires_gnutls_tls1_3
				11310	requires_gnutls_next_no_ticket
				11311	requires_gnutls_next_disable_tls13_compat
				11312	requires_config_enabled MBEDTLS_SSL_CLI_C
				11313	requires_config_enabled MBEDTLS_DEBUG_C
				11314	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11315	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11316	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				11317	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				11318	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				11319	0 \
				11320	-c "HTTP/1.0 200 OK" \
				11321	-c "Protocol is TLSv1.3" \
				11322	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11323	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11324	-c "NamedGroup: ffdhe8192 ( 104 )" \
				11325	-c "Verifying peer X.509 certificate... ok" \
				11326	-C "received HelloRetryRequest message"
				11327
				11328	requires_gnutls_tls1_3
				11329	requires_gnutls_next_no_ticket
				11330	requires_gnutls_next_disable_tls13_compat
				11331	requires_config_enabled MBEDTLS_SSL_CLI_C
				11332	requires_config_enabled MBEDTLS_DEBUG_C
				11333	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11334	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11335	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11336	run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				11337	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				11338	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				11339	0 \
				11340	-c "HTTP/1.0 200 OK" \
				11341	-c "Protocol is TLSv1.3" \
				11342	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				11343	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11344	-c "NamedGroup: ffdhe8192 ( 104 )" \
				11345	-c "Verifying peer X.509 certificate... ok" \
				11346	-C "received HelloRetryRequest message"
				11347
				11348	requires_gnutls_tls1_3
				11349	requires_gnutls_next_no_ticket
				11350	requires_gnutls_next_disable_tls13_compat
				11351	requires_config_enabled MBEDTLS_SSL_CLI_C
				11352	requires_config_enabled MBEDTLS_DEBUG_C
				11353	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11354	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11355	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11356	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11357	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11358	0 \
				11359	-c "HTTP/1.0 200 OK" \
				11360	-c "Protocol is TLSv1.3" \
				11361	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11362	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11363	-c "NamedGroup: secp256r1 ( 17 )" \
				11364	-c "Verifying peer X.509 certificate... ok" \
				11365	-C "received HelloRetryRequest message"
				11366
				11367	requires_gnutls_tls1_3
				11368	requires_gnutls_next_no_ticket
				11369	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11370	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11371	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11372	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11373	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11374	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11375	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11376	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11377	0 \
				11378	-c "HTTP/1.0 200 OK" \
				11379	-c "Protocol is TLSv1.3" \
				11380	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11381	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11382	-c "NamedGroup: secp256r1 ( 17 )" \
				11383	-c "Verifying peer X.509 certificate... ok" \
				11384	-C "received HelloRetryRequest message"
				11385
				11386	requires_gnutls_tls1_3
				11387	requires_gnutls_next_no_ticket
				11388	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11389	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11390	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11391	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11392	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11393	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11394	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11395	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11396	0 \
				11397	-c "HTTP/1.0 200 OK" \
				11398	-c "Protocol is TLSv1.3" \
				11399	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11400	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11401	-c "NamedGroup: secp256r1 ( 17 )" \
				11402	-c "Verifying peer X.509 certificate... ok" \
				11403	-C "received HelloRetryRequest message"
				11404
				11405	requires_gnutls_tls1_3
				11406	requires_gnutls_next_no_ticket
				11407	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11408	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11409	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11410	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11411	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11412	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11413	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11414	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11415	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11416	0 \
				11417	-c "HTTP/1.0 200 OK" \
				11418	-c "Protocol is TLSv1.3" \
				11419	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11420	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11421	-c "NamedGroup: secp256r1 ( 17 )" \
				11422	-c "Verifying peer X.509 certificate... ok" \
				11423	-C "received HelloRetryRequest message"
				11424
				11425	requires_gnutls_tls1_3
				11426	requires_gnutls_next_no_ticket
				11427	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11428	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11429	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11430	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11431	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11432	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11433	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11434	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11435	0 \
				11436	-c "HTTP/1.0 200 OK" \
				11437	-c "Protocol is TLSv1.3" \
				11438	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11439	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11440	-c "NamedGroup: secp384r1 ( 18 )" \
				11441	-c "Verifying peer X.509 certificate... ok" \
				11442	-C "received HelloRetryRequest message"
				11443
				11444	requires_gnutls_tls1_3
				11445	requires_gnutls_next_no_ticket
				11446	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11447	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11448	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11449	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11450	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11451	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11452	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11453	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11454	0 \
				11455	-c "HTTP/1.0 200 OK" \
				11456	-c "Protocol is TLSv1.3" \
				11457	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11458	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11459	-c "NamedGroup: secp384r1 ( 18 )" \
				11460	-c "Verifying peer X.509 certificate... ok" \
				11461	-C "received HelloRetryRequest message"
				11462
				11463	requires_gnutls_tls1_3
				11464	requires_gnutls_next_no_ticket
				11465	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11466	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11467	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11468	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11469	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11470	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11471	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11472	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11473	0 \
				11474	-c "HTTP/1.0 200 OK" \
				11475	-c "Protocol is TLSv1.3" \
				11476	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11477	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11478	-c "NamedGroup: secp384r1 ( 18 )" \
				11479	-c "Verifying peer X.509 certificate... ok" \
				11480	-C "received HelloRetryRequest message"
				11481
				11482	requires_gnutls_tls1_3
				11483	requires_gnutls_next_no_ticket
				11484	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11485	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11486	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11487	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11488	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11489	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11490	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11491	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11492	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11493	0 \
				11494	-c "HTTP/1.0 200 OK" \
				11495	-c "Protocol is TLSv1.3" \
				11496	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11497	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11498	-c "NamedGroup: secp384r1 ( 18 )" \
				11499	-c "Verifying peer X.509 certificate... ok" \
				11500	-C "received HelloRetryRequest message"
				11501
				11502	requires_gnutls_tls1_3
				11503	requires_gnutls_next_no_ticket
				11504	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11505	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11506	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11507	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11508	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11509	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11510	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11511	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11512	0 \
				11513	-c "HTTP/1.0 200 OK" \
				11514	-c "Protocol is TLSv1.3" \
				11515	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11516	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11517	-c "NamedGroup: secp521r1 ( 19 )" \
				11518	-c "Verifying peer X.509 certificate... ok" \
				11519	-C "received HelloRetryRequest message"
				11520
				11521	requires_gnutls_tls1_3
				11522	requires_gnutls_next_no_ticket
				11523	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11524	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11525	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11526	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11527	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11528	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11529	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11530	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11531	0 \
				11532	-c "HTTP/1.0 200 OK" \
				11533	-c "Protocol is TLSv1.3" \
				11534	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11535	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11536	-c "NamedGroup: secp521r1 ( 19 )" \
				11537	-c "Verifying peer X.509 certificate... ok" \
				11538	-C "received HelloRetryRequest message"
				11539
				11540	requires_gnutls_tls1_3
				11541	requires_gnutls_next_no_ticket
				11542	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11543	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11544	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11545	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11546	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11547	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11548	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11549	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11550	0 \
				11551	-c "HTTP/1.0 200 OK" \
				11552	-c "Protocol is TLSv1.3" \
				11553	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11554	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11555	-c "NamedGroup: secp521r1 ( 19 )" \
				11556	-c "Verifying peer X.509 certificate... ok" \
				11557	-C "received HelloRetryRequest message"
				11558
				11559	requires_gnutls_tls1_3
				11560	requires_gnutls_next_no_ticket
				11561	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11562	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11563	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11564	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11565	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11566	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11567	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11568	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11569	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11570	0 \
				11571	-c "HTTP/1.0 200 OK" \
				11572	-c "Protocol is TLSv1.3" \
				11573	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11574	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11575	-c "NamedGroup: secp521r1 ( 19 )" \
				11576	-c "Verifying peer X.509 certificate... ok" \
				11577	-C "received HelloRetryRequest message"
				11578
				11579	requires_gnutls_tls1_3
				11580	requires_gnutls_next_no_ticket
				11581	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11582	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11583	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11584	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11585	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11586	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11587	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11588	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11589	0 \
				11590	-c "HTTP/1.0 200 OK" \
				11591	-c "Protocol is TLSv1.3" \
				11592	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11593	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11594	-c "NamedGroup: x25519 ( 1d )" \
				11595	-c "Verifying peer X.509 certificate... ok" \
				11596	-C "received HelloRetryRequest message"
				11597
				11598	requires_gnutls_tls1_3
				11599	requires_gnutls_next_no_ticket
				11600	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11601	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11602	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11603	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11604	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11605	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11606	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11607	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11608	0 \
				11609	-c "HTTP/1.0 200 OK" \
				11610	-c "Protocol is TLSv1.3" \
				11611	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11612	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11613	-c "NamedGroup: x25519 ( 1d )" \
				11614	-c "Verifying peer X.509 certificate... ok" \
				11615	-C "received HelloRetryRequest message"
				11616
				11617	requires_gnutls_tls1_3
				11618	requires_gnutls_next_no_ticket
				11619	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11620	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11621	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11622	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11623	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11624	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11625	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11626	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11627	0 \
				11628	-c "HTTP/1.0 200 OK" \
				11629	-c "Protocol is TLSv1.3" \
				11630	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11631	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11632	-c "NamedGroup: x25519 ( 1d )" \
				11633	-c "Verifying peer X.509 certificate... ok" \
				11634	-C "received HelloRetryRequest message"
				11635
				11636	requires_gnutls_tls1_3
				11637	requires_gnutls_next_no_ticket
				11638	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11639	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11640	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11641	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11642	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11643	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11644	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11645	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11646	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11647	0 \
				11648	-c "HTTP/1.0 200 OK" \
				11649	-c "Protocol is TLSv1.3" \
				11650	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11651	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11652	-c "NamedGroup: x25519 ( 1d )" \
				11653	-c "Verifying peer X.509 certificate... ok" \
				11654	-C "received HelloRetryRequest message"
				11655
				11656	requires_gnutls_tls1_3
				11657	requires_gnutls_next_no_ticket
				11658	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11659	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11660	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11661	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11662	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11663	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11664	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11665	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11666	0 \
				11667	-c "HTTP/1.0 200 OK" \
				11668	-c "Protocol is TLSv1.3" \
				11669	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11670	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11671	-c "NamedGroup: x448 ( 1e )" \
				11672	-c "Verifying peer X.509 certificate... ok" \
				11673	-C "received HelloRetryRequest message"
				11674
				11675	requires_gnutls_tls1_3
				11676	requires_gnutls_next_no_ticket
				11677	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11678	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11679	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11680	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11681	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11682	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11683	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11684	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11685	0 \
				11686	-c "HTTP/1.0 200 OK" \
				11687	-c "Protocol is TLSv1.3" \
				11688	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11689	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11690	-c "NamedGroup: x448 ( 1e )" \
				11691	-c "Verifying peer X.509 certificate... ok" \
				11692	-C "received HelloRetryRequest message"
				11693
				11694	requires_gnutls_tls1_3
				11695	requires_gnutls_next_no_ticket
				11696	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11697	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11698	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11699	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11700	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11701	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11702	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11703	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11704	0 \
				11705	-c "HTTP/1.0 200 OK" \
				11706	-c "Protocol is TLSv1.3" \
				11707	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11708	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11709	-c "NamedGroup: x448 ( 1e )" \
				11710	-c "Verifying peer X.509 certificate... ok" \
				11711	-C "received HelloRetryRequest message"
				11712
				11713	requires_gnutls_tls1_3
				11714	requires_gnutls_next_no_ticket
				11715	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11716	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11717	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11718	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11719	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11720	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11721	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	11722	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	11723	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11724	0 \
				11725	-c "HTTP/1.0 200 OK" \
				11726	-c "Protocol is TLSv1.3" \
				11727	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11728	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11729	-c "NamedGroup: x448 ( 1e )" \
				11730	-c "Verifying peer X.509 certificate... ok" \
				11731	-C "received HelloRetryRequest message"
				11732
				11733	requires_gnutls_tls1_3
				11734	requires_gnutls_next_no_ticket
				11735	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11736	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	11737	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	11738	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	11739	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	11740	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
				11741	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				11742	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				11743	0 \
				11744	-c "HTTP/1.0 200 OK" \
				11745	-c "Protocol is TLSv1.3" \
				11746	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11747	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11748	-c "NamedGroup: ffdhe2048 ( 100 )" \
				11749	-c "Verifying peer X.509 certificate... ok" \
				11750	-C "received HelloRetryRequest message"
				11751
				11752	requires_gnutls_tls1_3
				11753	requires_gnutls_next_no_ticket
				11754	requires_gnutls_next_disable_tls13_compat
				11755	requires_config_enabled MBEDTLS_SSL_CLI_C
				11756	requires_config_enabled MBEDTLS_DEBUG_C
				11757	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11758	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11759	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
				11760	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				11761	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				11762	0 \
				11763	-c "HTTP/1.0 200 OK" \
				11764	-c "Protocol is TLSv1.3" \
				11765	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11766	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11767	-c "NamedGroup: ffdhe2048 ( 100 )" \
				11768	-c "Verifying peer X.509 certificate... ok" \
				11769	-C "received HelloRetryRequest message"
				11770
				11771	requires_gnutls_tls1_3
				11772	requires_gnutls_next_no_ticket
				11773	requires_gnutls_next_disable_tls13_compat
				11774	requires_config_enabled MBEDTLS_SSL_CLI_C
				11775	requires_config_enabled MBEDTLS_DEBUG_C
				11776	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11777	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11778	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
				11779	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				11780	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				11781	0 \
				11782	-c "HTTP/1.0 200 OK" \
				11783	-c "Protocol is TLSv1.3" \
				11784	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11785	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11786	-c "NamedGroup: ffdhe2048 ( 100 )" \
				11787	-c "Verifying peer X.509 certificate... ok" \
				11788	-C "received HelloRetryRequest message"
				11789
				11790	requires_gnutls_tls1_3
				11791	requires_gnutls_next_no_ticket
				11792	requires_gnutls_next_disable_tls13_compat
				11793	requires_config_enabled MBEDTLS_SSL_CLI_C
				11794	requires_config_enabled MBEDTLS_DEBUG_C
				11795	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11796	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11797	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11798	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
				11799	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				11800	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				11801	0 \
				11802	-c "HTTP/1.0 200 OK" \
				11803	-c "Protocol is TLSv1.3" \
				11804	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11805	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11806	-c "NamedGroup: ffdhe2048 ( 100 )" \
				11807	-c "Verifying peer X.509 certificate... ok" \
				11808	-C "received HelloRetryRequest message"
				11809
				11810	requires_gnutls_tls1_3
				11811	requires_gnutls_next_no_ticket
				11812	requires_gnutls_next_disable_tls13_compat
				11813	requires_config_enabled MBEDTLS_SSL_CLI_C
				11814	requires_config_enabled MBEDTLS_DEBUG_C
				11815	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11816	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11817	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp256r1_sha256" \
				11818	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				11819	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				11820	0 \
				11821	-c "HTTP/1.0 200 OK" \
				11822	-c "Protocol is TLSv1.3" \
				11823	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11824	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11825	-c "NamedGroup: ffdhe3072 ( 101 )" \
				11826	-c "Verifying peer X.509 certificate... ok" \
				11827	-C "received HelloRetryRequest message"
				11828
				11829	requires_gnutls_tls1_3
				11830	requires_gnutls_next_no_ticket
				11831	requires_gnutls_next_disable_tls13_compat
				11832	requires_config_enabled MBEDTLS_SSL_CLI_C
				11833	requires_config_enabled MBEDTLS_DEBUG_C
				11834	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11835	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11836	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp384r1_sha384" \
				11837	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				11838	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				11839	0 \
				11840	-c "HTTP/1.0 200 OK" \
				11841	-c "Protocol is TLSv1.3" \
				11842	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11843	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11844	-c "NamedGroup: ffdhe3072 ( 101 )" \
				11845	-c "Verifying peer X.509 certificate... ok" \
				11846	-C "received HelloRetryRequest message"
				11847
				11848	requires_gnutls_tls1_3
				11849	requires_gnutls_next_no_ticket
				11850	requires_gnutls_next_disable_tls13_compat
				11851	requires_config_enabled MBEDTLS_SSL_CLI_C
				11852	requires_config_enabled MBEDTLS_DEBUG_C
				11853	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11854	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11855	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp521r1_sha512" \
				11856	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				11857	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				11858	0 \
				11859	-c "HTTP/1.0 200 OK" \
				11860	-c "Protocol is TLSv1.3" \
				11861	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11862	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11863	-c "NamedGroup: ffdhe3072 ( 101 )" \
				11864	-c "Verifying peer X.509 certificate... ok" \
				11865	-C "received HelloRetryRequest message"
				11866
				11867	requires_gnutls_tls1_3
				11868	requires_gnutls_next_no_ticket
				11869	requires_gnutls_next_disable_tls13_compat
				11870	requires_config_enabled MBEDTLS_SSL_CLI_C
				11871	requires_config_enabled MBEDTLS_DEBUG_C
				11872	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11873	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11874	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11875	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe3072,rsa_pss_rsae_sha256" \
				11876	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				11877	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				11878	0 \
				11879	-c "HTTP/1.0 200 OK" \
				11880	-c "Protocol is TLSv1.3" \
				11881	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11882	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11883	-c "NamedGroup: ffdhe3072 ( 101 )" \
				11884	-c "Verifying peer X.509 certificate... ok" \
				11885	-C "received HelloRetryRequest message"
				11886
				11887	requires_gnutls_tls1_3
				11888	requires_gnutls_next_no_ticket
				11889	requires_gnutls_next_disable_tls13_compat
				11890	requires_config_enabled MBEDTLS_SSL_CLI_C
				11891	requires_config_enabled MBEDTLS_DEBUG_C
				11892	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11893	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11894	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp256r1_sha256" \
				11895	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				11896	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				11897	0 \
				11898	-c "HTTP/1.0 200 OK" \
				11899	-c "Protocol is TLSv1.3" \
				11900	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11901	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11902	-c "NamedGroup: ffdhe4096 ( 102 )" \
				11903	-c "Verifying peer X.509 certificate... ok" \
				11904	-C "received HelloRetryRequest message"
				11905
				11906	requires_gnutls_tls1_3
				11907	requires_gnutls_next_no_ticket
				11908	requires_gnutls_next_disable_tls13_compat
				11909	requires_config_enabled MBEDTLS_SSL_CLI_C
				11910	requires_config_enabled MBEDTLS_DEBUG_C
				11911	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11912	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11913	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp384r1_sha384" \
				11914	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				11915	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				11916	0 \
				11917	-c "HTTP/1.0 200 OK" \
				11918	-c "Protocol is TLSv1.3" \
				11919	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11920	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11921	-c "NamedGroup: ffdhe4096 ( 102 )" \
				11922	-c "Verifying peer X.509 certificate... ok" \
				11923	-C "received HelloRetryRequest message"
				11924
				11925	requires_gnutls_tls1_3
				11926	requires_gnutls_next_no_ticket
				11927	requires_gnutls_next_disable_tls13_compat
				11928	requires_config_enabled MBEDTLS_SSL_CLI_C
				11929	requires_config_enabled MBEDTLS_DEBUG_C
				11930	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11931	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11932	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp521r1_sha512" \
				11933	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				11934	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				11935	0 \
				11936	-c "HTTP/1.0 200 OK" \
				11937	-c "Protocol is TLSv1.3" \
				11938	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11939	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				11940	-c "NamedGroup: ffdhe4096 ( 102 )" \
				11941	-c "Verifying peer X.509 certificate... ok" \
				11942	-C "received HelloRetryRequest message"
				11943
				11944	requires_gnutls_tls1_3
				11945	requires_gnutls_next_no_ticket
				11946	requires_gnutls_next_disable_tls13_compat
				11947	requires_config_enabled MBEDTLS_SSL_CLI_C
				11948	requires_config_enabled MBEDTLS_DEBUG_C
				11949	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11950	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11951	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				11952	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe4096,rsa_pss_rsae_sha256" \
				11953	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				11954	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				11955	0 \
				11956	-c "HTTP/1.0 200 OK" \
				11957	-c "Protocol is TLSv1.3" \
				11958	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11959	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				11960	-c "NamedGroup: ffdhe4096 ( 102 )" \
				11961	-c "Verifying peer X.509 certificate... ok" \
				11962	-C "received HelloRetryRequest message"
				11963
				11964	requires_gnutls_tls1_3
				11965	requires_gnutls_next_no_ticket
				11966	requires_gnutls_next_disable_tls13_compat
				11967	requires_config_enabled MBEDTLS_SSL_CLI_C
				11968	requires_config_enabled MBEDTLS_DEBUG_C
				11969	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11970	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11971	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp256r1_sha256" \
				11972	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				11973	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				11974	0 \
				11975	-c "HTTP/1.0 200 OK" \
				11976	-c "Protocol is TLSv1.3" \
				11977	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11978	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				11979	-c "NamedGroup: ffdhe6144 ( 103 )" \
				11980	-c "Verifying peer X.509 certificate... ok" \
				11981	-C "received HelloRetryRequest message"
				11982
				11983	requires_gnutls_tls1_3
				11984	requires_gnutls_next_no_ticket
				11985	requires_gnutls_next_disable_tls13_compat
				11986	requires_config_enabled MBEDTLS_SSL_CLI_C
				11987	requires_config_enabled MBEDTLS_DEBUG_C
				11988	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				11989	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				11990	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp384r1_sha384" \
				11991	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				11992	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				11993	0 \
				11994	-c "HTTP/1.0 200 OK" \
				11995	-c "Protocol is TLSv1.3" \
				11996	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				11997	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				11998	-c "NamedGroup: ffdhe6144 ( 103 )" \
				11999	-c "Verifying peer X.509 certificate... ok" \
				12000	-C "received HelloRetryRequest message"
				12001
				12002	requires_gnutls_tls1_3
				12003	requires_gnutls_next_no_ticket
				12004	requires_gnutls_next_disable_tls13_compat
				12005	requires_config_enabled MBEDTLS_SSL_CLI_C
				12006	requires_config_enabled MBEDTLS_DEBUG_C
				12007	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12008	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12009	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp521r1_sha512" \
				12010	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				12011	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				12012	0 \
				12013	-c "HTTP/1.0 200 OK" \
				12014	-c "Protocol is TLSv1.3" \
				12015	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				12016	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12017	-c "NamedGroup: ffdhe6144 ( 103 )" \
				12018	-c "Verifying peer X.509 certificate... ok" \
				12019	-C "received HelloRetryRequest message"
				12020
				12021	requires_gnutls_tls1_3
				12022	requires_gnutls_next_no_ticket
				12023	requires_gnutls_next_disable_tls13_compat
				12024	requires_config_enabled MBEDTLS_SSL_CLI_C
				12025	requires_config_enabled MBEDTLS_DEBUG_C
				12026	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12027	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12028	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12029	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe6144,rsa_pss_rsae_sha256" \
				12030	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				12031	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				12032	0 \
				12033	-c "HTTP/1.0 200 OK" \
				12034	-c "Protocol is TLSv1.3" \
				12035	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				12036	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12037	-c "NamedGroup: ffdhe6144 ( 103 )" \
				12038	-c "Verifying peer X.509 certificate... ok" \
				12039	-C "received HelloRetryRequest message"
				12040
				12041	requires_gnutls_tls1_3
				12042	requires_gnutls_next_no_ticket
				12043	requires_gnutls_next_disable_tls13_compat
				12044	requires_config_enabled MBEDTLS_SSL_CLI_C
				12045	requires_config_enabled MBEDTLS_DEBUG_C
				12046	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12047	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12048	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp256r1_sha256" \
				12049	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				12050	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				12051	0 \
				12052	-c "HTTP/1.0 200 OK" \
				12053	-c "Protocol is TLSv1.3" \
				12054	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				12055	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12056	-c "NamedGroup: ffdhe8192 ( 104 )" \
				12057	-c "Verifying peer X.509 certificate... ok" \
				12058	-C "received HelloRetryRequest message"
				12059
				12060	requires_gnutls_tls1_3
				12061	requires_gnutls_next_no_ticket
				12062	requires_gnutls_next_disable_tls13_compat
				12063	requires_config_enabled MBEDTLS_SSL_CLI_C
				12064	requires_config_enabled MBEDTLS_DEBUG_C
				12065	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12066	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12067	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp384r1_sha384" \
				12068	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				12069	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				12070	0 \
				12071	-c "HTTP/1.0 200 OK" \
				12072	-c "Protocol is TLSv1.3" \
				12073	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				12074	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12075	-c "NamedGroup: ffdhe8192 ( 104 )" \
				12076	-c "Verifying peer X.509 certificate... ok" \
				12077	-C "received HelloRetryRequest message"
				12078
				12079	requires_gnutls_tls1_3
				12080	requires_gnutls_next_no_ticket
				12081	requires_gnutls_next_disable_tls13_compat
				12082	requires_config_enabled MBEDTLS_SSL_CLI_C
				12083	requires_config_enabled MBEDTLS_DEBUG_C
				12084	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12085	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12086	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp521r1_sha512" \
				12087	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				12088	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				12089	0 \
				12090	-c "HTTP/1.0 200 OK" \
				12091	-c "Protocol is TLSv1.3" \
				12092	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				12093	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12094	-c "NamedGroup: ffdhe8192 ( 104 )" \
				12095	-c "Verifying peer X.509 certificate... ok" \
				12096	-C "received HelloRetryRequest message"
				12097
				12098	requires_gnutls_tls1_3
				12099	requires_gnutls_next_no_ticket
				12100	requires_gnutls_next_disable_tls13_compat
				12101	requires_config_enabled MBEDTLS_SSL_CLI_C
				12102	requires_config_enabled MBEDTLS_DEBUG_C
				12103	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12104	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12105	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12106	run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe8192,rsa_pss_rsae_sha256" \
				12107	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				12108	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				12109	0 \
				12110	-c "HTTP/1.0 200 OK" \
				12111	-c "Protocol is TLSv1.3" \
				12112	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				12113	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12114	-c "NamedGroup: ffdhe8192 ( 104 )" \
				12115	-c "Verifying peer X.509 certificate... ok" \
				12116	-C "received HelloRetryRequest message"
				12117
				12118	requires_gnutls_tls1_3
				12119	requires_gnutls_next_no_ticket
				12120	requires_gnutls_next_disable_tls13_compat
				12121	requires_config_enabled MBEDTLS_SSL_CLI_C
				12122	requires_config_enabled MBEDTLS_DEBUG_C
				12123	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12124	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12125	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12126	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12127	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12128	0 \
				12129	-c "HTTP/1.0 200 OK" \
				12130	-c "Protocol is TLSv1.3" \
				12131	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12132	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12133	-c "NamedGroup: secp256r1 ( 17 )" \
				12134	-c "Verifying peer X.509 certificate... ok" \
				12135	-C "received HelloRetryRequest message"
				12136
				12137	requires_gnutls_tls1_3
				12138	requires_gnutls_next_no_ticket
				12139	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12140	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12141	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12142	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12143	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12144	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12145	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12146	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12147	0 \
				12148	-c "HTTP/1.0 200 OK" \
				12149	-c "Protocol is TLSv1.3" \
				12150	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12151	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12152	-c "NamedGroup: secp256r1 ( 17 )" \
				12153	-c "Verifying peer X.509 certificate... ok" \
				12154	-C "received HelloRetryRequest message"
				12155
				12156	requires_gnutls_tls1_3
				12157	requires_gnutls_next_no_ticket
				12158	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12159	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12160	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12161	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12162	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12163	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12164	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12165	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12166	0 \
				12167	-c "HTTP/1.0 200 OK" \
				12168	-c "Protocol is TLSv1.3" \
				12169	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12170	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12171	-c "NamedGroup: secp256r1 ( 17 )" \
				12172	-c "Verifying peer X.509 certificate... ok" \
				12173	-C "received HelloRetryRequest message"
				12174
				12175	requires_gnutls_tls1_3
				12176	requires_gnutls_next_no_ticket
				12177	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12178	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12179	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12180	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12181	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12182	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12183	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12184	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12185	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12186	0 \
				12187	-c "HTTP/1.0 200 OK" \
				12188	-c "Protocol is TLSv1.3" \
				12189	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12190	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12191	-c "NamedGroup: secp256r1 ( 17 )" \
				12192	-c "Verifying peer X.509 certificate... ok" \
				12193	-C "received HelloRetryRequest message"
				12194
				12195	requires_gnutls_tls1_3
				12196	requires_gnutls_next_no_ticket
				12197	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12198	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12199	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12200	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12201	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12202	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12203	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12204	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12205	0 \
				12206	-c "HTTP/1.0 200 OK" \
				12207	-c "Protocol is TLSv1.3" \
				12208	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12209	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12210	-c "NamedGroup: secp384r1 ( 18 )" \
				12211	-c "Verifying peer X.509 certificate... ok" \
				12212	-C "received HelloRetryRequest message"
				12213
				12214	requires_gnutls_tls1_3
				12215	requires_gnutls_next_no_ticket
				12216	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12217	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12218	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12219	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12220	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12221	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12222	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12223	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12224	0 \
				12225	-c "HTTP/1.0 200 OK" \
				12226	-c "Protocol is TLSv1.3" \
				12227	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12228	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12229	-c "NamedGroup: secp384r1 ( 18 )" \
				12230	-c "Verifying peer X.509 certificate... ok" \
				12231	-C "received HelloRetryRequest message"
				12232
				12233	requires_gnutls_tls1_3
				12234	requires_gnutls_next_no_ticket
				12235	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12236	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12237	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12238	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12239	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12240	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12241	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12242	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12243	0 \
				12244	-c "HTTP/1.0 200 OK" \
				12245	-c "Protocol is TLSv1.3" \
				12246	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12247	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12248	-c "NamedGroup: secp384r1 ( 18 )" \
				12249	-c "Verifying peer X.509 certificate... ok" \
				12250	-C "received HelloRetryRequest message"
				12251
				12252	requires_gnutls_tls1_3
				12253	requires_gnutls_next_no_ticket
				12254	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12255	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12256	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12257	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12258	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12259	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12260	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12261	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12262	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12263	0 \
				12264	-c "HTTP/1.0 200 OK" \
				12265	-c "Protocol is TLSv1.3" \
				12266	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12267	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12268	-c "NamedGroup: secp384r1 ( 18 )" \
				12269	-c "Verifying peer X.509 certificate... ok" \
				12270	-C "received HelloRetryRequest message"
				12271
				12272	requires_gnutls_tls1_3
				12273	requires_gnutls_next_no_ticket
				12274	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12275	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12276	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12277	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12278	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12279	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12280	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12281	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12282	0 \
				12283	-c "HTTP/1.0 200 OK" \
				12284	-c "Protocol is TLSv1.3" \
				12285	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12286	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12287	-c "NamedGroup: secp521r1 ( 19 )" \
				12288	-c "Verifying peer X.509 certificate... ok" \
				12289	-C "received HelloRetryRequest message"
				12290
				12291	requires_gnutls_tls1_3
				12292	requires_gnutls_next_no_ticket
				12293	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12294	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12295	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12296	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12297	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12298	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12299	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12300	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12301	0 \
				12302	-c "HTTP/1.0 200 OK" \
				12303	-c "Protocol is TLSv1.3" \
				12304	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12305	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12306	-c "NamedGroup: secp521r1 ( 19 )" \
				12307	-c "Verifying peer X.509 certificate... ok" \
				12308	-C "received HelloRetryRequest message"
				12309
				12310	requires_gnutls_tls1_3
				12311	requires_gnutls_next_no_ticket
				12312	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12313	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12314	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12315	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12316	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12317	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12318	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12319	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12320	0 \
				12321	-c "HTTP/1.0 200 OK" \
				12322	-c "Protocol is TLSv1.3" \
				12323	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12324	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12325	-c "NamedGroup: secp521r1 ( 19 )" \
				12326	-c "Verifying peer X.509 certificate... ok" \
				12327	-C "received HelloRetryRequest message"
				12328
				12329	requires_gnutls_tls1_3
				12330	requires_gnutls_next_no_ticket
				12331	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12332	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12333	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12334	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12335	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12336	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12337	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12338	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12339	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12340	0 \
				12341	-c "HTTP/1.0 200 OK" \
				12342	-c "Protocol is TLSv1.3" \
				12343	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12344	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12345	-c "NamedGroup: secp521r1 ( 19 )" \
				12346	-c "Verifying peer X.509 certificate... ok" \
				12347	-C "received HelloRetryRequest message"
				12348
				12349	requires_gnutls_tls1_3
				12350	requires_gnutls_next_no_ticket
				12351	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12352	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12353	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12354	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12355	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12356	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12357	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12358	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12359	0 \
				12360	-c "HTTP/1.0 200 OK" \
				12361	-c "Protocol is TLSv1.3" \
				12362	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12363	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12364	-c "NamedGroup: x25519 ( 1d )" \
				12365	-c "Verifying peer X.509 certificate... ok" \
				12366	-C "received HelloRetryRequest message"
				12367
				12368	requires_gnutls_tls1_3
				12369	requires_gnutls_next_no_ticket
				12370	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12371	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12372	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12373	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12374	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12375	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12376	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12377	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12378	0 \
				12379	-c "HTTP/1.0 200 OK" \
				12380	-c "Protocol is TLSv1.3" \
				12381	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12382	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12383	-c "NamedGroup: x25519 ( 1d )" \
				12384	-c "Verifying peer X.509 certificate... ok" \
				12385	-C "received HelloRetryRequest message"
				12386
				12387	requires_gnutls_tls1_3
				12388	requires_gnutls_next_no_ticket
				12389	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12390	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12391	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12392	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12393	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12394	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12395	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12396	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12397	0 \
				12398	-c "HTTP/1.0 200 OK" \
				12399	-c "Protocol is TLSv1.3" \
				12400	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12401	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12402	-c "NamedGroup: x25519 ( 1d )" \
				12403	-c "Verifying peer X.509 certificate... ok" \
				12404	-C "received HelloRetryRequest message"
				12405
				12406	requires_gnutls_tls1_3
				12407	requires_gnutls_next_no_ticket
				12408	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12409	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12410	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12411	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12412	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12413	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12414	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12415	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12416	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12417	0 \
				12418	-c "HTTP/1.0 200 OK" \
				12419	-c "Protocol is TLSv1.3" \
				12420	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12421	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12422	-c "NamedGroup: x25519 ( 1d )" \
				12423	-c "Verifying peer X.509 certificate... ok" \
				12424	-C "received HelloRetryRequest message"
				12425
				12426	requires_gnutls_tls1_3
				12427	requires_gnutls_next_no_ticket
				12428	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12429	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12430	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12431	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12432	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12433	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12434	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12435	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12436	0 \
				12437	-c "HTTP/1.0 200 OK" \
				12438	-c "Protocol is TLSv1.3" \
				12439	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12440	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12441	-c "NamedGroup: x448 ( 1e )" \
				12442	-c "Verifying peer X.509 certificate... ok" \
				12443	-C "received HelloRetryRequest message"
				12444
				12445	requires_gnutls_tls1_3
				12446	requires_gnutls_next_no_ticket
				12447	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12448	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12449	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12450	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12451	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12452	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12453	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12454	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12455	0 \
				12456	-c "HTTP/1.0 200 OK" \
				12457	-c "Protocol is TLSv1.3" \
				12458	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12459	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12460	-c "NamedGroup: x448 ( 1e )" \
				12461	-c "Verifying peer X.509 certificate... ok" \
				12462	-C "received HelloRetryRequest message"
				12463
				12464	requires_gnutls_tls1_3
				12465	requires_gnutls_next_no_ticket
				12466	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12467	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12468	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12469	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12470	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12471	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12472	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12473	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12474	0 \
				12475	-c "HTTP/1.0 200 OK" \
				12476	-c "Protocol is TLSv1.3" \
				12477	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12478	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12479	-c "NamedGroup: x448 ( 1e )" \
				12480	-c "Verifying peer X.509 certificate... ok" \
				12481	-C "received HelloRetryRequest message"
				12482
				12483	requires_gnutls_tls1_3
				12484	requires_gnutls_next_no_ticket
				12485	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12486	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12487	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12488	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12489	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12490	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12491	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12492	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12493	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12494	0 \
				12495	-c "HTTP/1.0 200 OK" \
				12496	-c "Protocol is TLSv1.3" \
				12497	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12498	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12499	-c "NamedGroup: x448 ( 1e )" \
				12500	-c "Verifying peer X.509 certificate... ok" \
				12501	-C "received HelloRetryRequest message"
				12502
				12503	requires_gnutls_tls1_3
				12504	requires_gnutls_next_no_ticket
				12505	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12506	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12507	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12508	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12509	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	12510	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				12511	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				12512	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				12513	0 \
				12514	-c "HTTP/1.0 200 OK" \
				12515	-c "Protocol is TLSv1.3" \
				12516	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12517	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12518	-c "NamedGroup: ffdhe2048 ( 100 )" \
				12519	-c "Verifying peer X.509 certificate... ok" \
				12520	-C "received HelloRetryRequest message"
				12521
				12522	requires_gnutls_tls1_3
				12523	requires_gnutls_next_no_ticket
				12524	requires_gnutls_next_disable_tls13_compat
				12525	requires_config_enabled MBEDTLS_SSL_CLI_C
				12526	requires_config_enabled MBEDTLS_DEBUG_C
				12527	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12528	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12529	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				12530	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				12531	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				12532	0 \
				12533	-c "HTTP/1.0 200 OK" \
				12534	-c "Protocol is TLSv1.3" \
				12535	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12536	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12537	-c "NamedGroup: ffdhe2048 ( 100 )" \
				12538	-c "Verifying peer X.509 certificate... ok" \
				12539	-C "received HelloRetryRequest message"
				12540
				12541	requires_gnutls_tls1_3
				12542	requires_gnutls_next_no_ticket
				12543	requires_gnutls_next_disable_tls13_compat
				12544	requires_config_enabled MBEDTLS_SSL_CLI_C
				12545	requires_config_enabled MBEDTLS_DEBUG_C
				12546	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12547	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12548	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				12549	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				12550	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				12551	0 \
				12552	-c "HTTP/1.0 200 OK" \
				12553	-c "Protocol is TLSv1.3" \
				12554	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12555	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12556	-c "NamedGroup: ffdhe2048 ( 100 )" \
				12557	-c "Verifying peer X.509 certificate... ok" \
				12558	-C "received HelloRetryRequest message"
				12559
				12560	requires_gnutls_tls1_3
				12561	requires_gnutls_next_no_ticket
				12562	requires_gnutls_next_disable_tls13_compat
				12563	requires_config_enabled MBEDTLS_SSL_CLI_C
				12564	requires_config_enabled MBEDTLS_DEBUG_C
				12565	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12566	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12567	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12568	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				12569	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				12570	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				12571	0 \
				12572	-c "HTTP/1.0 200 OK" \
				12573	-c "Protocol is TLSv1.3" \
				12574	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12575	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12576	-c "NamedGroup: ffdhe2048 ( 100 )" \
				12577	-c "Verifying peer X.509 certificate... ok" \
				12578	-C "received HelloRetryRequest message"
				12579
				12580	requires_gnutls_tls1_3
				12581	requires_gnutls_next_no_ticket
				12582	requires_gnutls_next_disable_tls13_compat
				12583	requires_config_enabled MBEDTLS_SSL_CLI_C
				12584	requires_config_enabled MBEDTLS_DEBUG_C
				12585	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12586	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12587	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				12588	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				12589	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				12590	0 \
				12591	-c "HTTP/1.0 200 OK" \
				12592	-c "Protocol is TLSv1.3" \
				12593	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12594	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12595	-c "NamedGroup: ffdhe3072 ( 101 )" \
				12596	-c "Verifying peer X.509 certificate... ok" \
				12597	-C "received HelloRetryRequest message"
				12598
				12599	requires_gnutls_tls1_3
				12600	requires_gnutls_next_no_ticket
				12601	requires_gnutls_next_disable_tls13_compat
				12602	requires_config_enabled MBEDTLS_SSL_CLI_C
				12603	requires_config_enabled MBEDTLS_DEBUG_C
				12604	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12605	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12606	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				12607	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				12608	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				12609	0 \
				12610	-c "HTTP/1.0 200 OK" \
				12611	-c "Protocol is TLSv1.3" \
				12612	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12613	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12614	-c "NamedGroup: ffdhe3072 ( 101 )" \
				12615	-c "Verifying peer X.509 certificate... ok" \
				12616	-C "received HelloRetryRequest message"
				12617
				12618	requires_gnutls_tls1_3
				12619	requires_gnutls_next_no_ticket
				12620	requires_gnutls_next_disable_tls13_compat
				12621	requires_config_enabled MBEDTLS_SSL_CLI_C
				12622	requires_config_enabled MBEDTLS_DEBUG_C
				12623	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12624	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12625	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				12626	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				12627	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				12628	0 \
				12629	-c "HTTP/1.0 200 OK" \
				12630	-c "Protocol is TLSv1.3" \
				12631	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12632	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12633	-c "NamedGroup: ffdhe3072 ( 101 )" \
				12634	-c "Verifying peer X.509 certificate... ok" \
				12635	-C "received HelloRetryRequest message"
				12636
				12637	requires_gnutls_tls1_3
				12638	requires_gnutls_next_no_ticket
				12639	requires_gnutls_next_disable_tls13_compat
				12640	requires_config_enabled MBEDTLS_SSL_CLI_C
				12641	requires_config_enabled MBEDTLS_DEBUG_C
				12642	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12643	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12644	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12645	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				12646	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				12647	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				12648	0 \
				12649	-c "HTTP/1.0 200 OK" \
				12650	-c "Protocol is TLSv1.3" \
				12651	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12652	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12653	-c "NamedGroup: ffdhe3072 ( 101 )" \
				12654	-c "Verifying peer X.509 certificate... ok" \
				12655	-C "received HelloRetryRequest message"
				12656
				12657	requires_gnutls_tls1_3
				12658	requires_gnutls_next_no_ticket
				12659	requires_gnutls_next_disable_tls13_compat
				12660	requires_config_enabled MBEDTLS_SSL_CLI_C
				12661	requires_config_enabled MBEDTLS_DEBUG_C
				12662	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12663	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12664	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				12665	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				12666	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				12667	0 \
				12668	-c "HTTP/1.0 200 OK" \
				12669	-c "Protocol is TLSv1.3" \
				12670	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12671	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12672	-c "NamedGroup: ffdhe4096 ( 102 )" \
				12673	-c "Verifying peer X.509 certificate... ok" \
				12674	-C "received HelloRetryRequest message"
				12675
				12676	requires_gnutls_tls1_3
				12677	requires_gnutls_next_no_ticket
				12678	requires_gnutls_next_disable_tls13_compat
				12679	requires_config_enabled MBEDTLS_SSL_CLI_C
				12680	requires_config_enabled MBEDTLS_DEBUG_C
				12681	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12682	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12683	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				12684	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				12685	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				12686	0 \
				12687	-c "HTTP/1.0 200 OK" \
				12688	-c "Protocol is TLSv1.3" \
				12689	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12690	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12691	-c "NamedGroup: ffdhe4096 ( 102 )" \
				12692	-c "Verifying peer X.509 certificate... ok" \
				12693	-C "received HelloRetryRequest message"
				12694
				12695	requires_gnutls_tls1_3
				12696	requires_gnutls_next_no_ticket
				12697	requires_gnutls_next_disable_tls13_compat
				12698	requires_config_enabled MBEDTLS_SSL_CLI_C
				12699	requires_config_enabled MBEDTLS_DEBUG_C
				12700	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12701	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12702	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				12703	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				12704	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				12705	0 \
				12706	-c "HTTP/1.0 200 OK" \
				12707	-c "Protocol is TLSv1.3" \
				12708	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12709	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12710	-c "NamedGroup: ffdhe4096 ( 102 )" \
				12711	-c "Verifying peer X.509 certificate... ok" \
				12712	-C "received HelloRetryRequest message"
				12713
				12714	requires_gnutls_tls1_3
				12715	requires_gnutls_next_no_ticket
				12716	requires_gnutls_next_disable_tls13_compat
				12717	requires_config_enabled MBEDTLS_SSL_CLI_C
				12718	requires_config_enabled MBEDTLS_DEBUG_C
				12719	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12720	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12721	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12722	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				12723	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				12724	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				12725	0 \
				12726	-c "HTTP/1.0 200 OK" \
				12727	-c "Protocol is TLSv1.3" \
				12728	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12729	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12730	-c "NamedGroup: ffdhe4096 ( 102 )" \
				12731	-c "Verifying peer X.509 certificate... ok" \
				12732	-C "received HelloRetryRequest message"
				12733
				12734	requires_gnutls_tls1_3
				12735	requires_gnutls_next_no_ticket
				12736	requires_gnutls_next_disable_tls13_compat
				12737	requires_config_enabled MBEDTLS_SSL_CLI_C
				12738	requires_config_enabled MBEDTLS_DEBUG_C
				12739	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12740	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12741	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				12742	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				12743	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				12744	0 \
				12745	-c "HTTP/1.0 200 OK" \
				12746	-c "Protocol is TLSv1.3" \
				12747	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12748	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12749	-c "NamedGroup: ffdhe6144 ( 103 )" \
				12750	-c "Verifying peer X.509 certificate... ok" \
				12751	-C "received HelloRetryRequest message"
				12752
				12753	requires_gnutls_tls1_3
				12754	requires_gnutls_next_no_ticket
				12755	requires_gnutls_next_disable_tls13_compat
				12756	requires_config_enabled MBEDTLS_SSL_CLI_C
				12757	requires_config_enabled MBEDTLS_DEBUG_C
				12758	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12759	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12760	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				12761	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				12762	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				12763	0 \
				12764	-c "HTTP/1.0 200 OK" \
				12765	-c "Protocol is TLSv1.3" \
				12766	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12767	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12768	-c "NamedGroup: ffdhe6144 ( 103 )" \
				12769	-c "Verifying peer X.509 certificate... ok" \
				12770	-C "received HelloRetryRequest message"
				12771
				12772	requires_gnutls_tls1_3
				12773	requires_gnutls_next_no_ticket
				12774	requires_gnutls_next_disable_tls13_compat
				12775	requires_config_enabled MBEDTLS_SSL_CLI_C
				12776	requires_config_enabled MBEDTLS_DEBUG_C
				12777	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12778	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12779	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				12780	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				12781	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				12782	0 \
				12783	-c "HTTP/1.0 200 OK" \
				12784	-c "Protocol is TLSv1.3" \
				12785	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12786	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12787	-c "NamedGroup: ffdhe6144 ( 103 )" \
				12788	-c "Verifying peer X.509 certificate... ok" \
				12789	-C "received HelloRetryRequest message"
				12790
				12791	requires_gnutls_tls1_3
				12792	requires_gnutls_next_no_ticket
				12793	requires_gnutls_next_disable_tls13_compat
				12794	requires_config_enabled MBEDTLS_SSL_CLI_C
				12795	requires_config_enabled MBEDTLS_DEBUG_C
				12796	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12797	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12798	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12799	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				12800	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				12801	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				12802	0 \
				12803	-c "HTTP/1.0 200 OK" \
				12804	-c "Protocol is TLSv1.3" \
				12805	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12806	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12807	-c "NamedGroup: ffdhe6144 ( 103 )" \
				12808	-c "Verifying peer X.509 certificate... ok" \
				12809	-C "received HelloRetryRequest message"
				12810
				12811	requires_gnutls_tls1_3
				12812	requires_gnutls_next_no_ticket
				12813	requires_gnutls_next_disable_tls13_compat
				12814	requires_config_enabled MBEDTLS_SSL_CLI_C
				12815	requires_config_enabled MBEDTLS_DEBUG_C
				12816	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12817	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12818	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				12819	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				12820	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				12821	0 \
				12822	-c "HTTP/1.0 200 OK" \
				12823	-c "Protocol is TLSv1.3" \
				12824	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12825	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12826	-c "NamedGroup: ffdhe8192 ( 104 )" \
				12827	-c "Verifying peer X.509 certificate... ok" \
				12828	-C "received HelloRetryRequest message"
				12829
				12830	requires_gnutls_tls1_3
				12831	requires_gnutls_next_no_ticket
				12832	requires_gnutls_next_disable_tls13_compat
				12833	requires_config_enabled MBEDTLS_SSL_CLI_C
				12834	requires_config_enabled MBEDTLS_DEBUG_C
				12835	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12836	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12837	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				12838	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				12839	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				12840	0 \
				12841	-c "HTTP/1.0 200 OK" \
				12842	-c "Protocol is TLSv1.3" \
				12843	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12844	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12845	-c "NamedGroup: ffdhe8192 ( 104 )" \
				12846	-c "Verifying peer X.509 certificate... ok" \
				12847	-C "received HelloRetryRequest message"
				12848
				12849	requires_gnutls_tls1_3
				12850	requires_gnutls_next_no_ticket
				12851	requires_gnutls_next_disable_tls13_compat
				12852	requires_config_enabled MBEDTLS_SSL_CLI_C
				12853	requires_config_enabled MBEDTLS_DEBUG_C
				12854	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12855	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12856	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				12857	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				12858	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				12859	0 \
				12860	-c "HTTP/1.0 200 OK" \
				12861	-c "Protocol is TLSv1.3" \
				12862	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12863	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12864	-c "NamedGroup: ffdhe8192 ( 104 )" \
				12865	-c "Verifying peer X.509 certificate... ok" \
				12866	-C "received HelloRetryRequest message"
				12867
				12868	requires_gnutls_tls1_3
				12869	requires_gnutls_next_no_ticket
				12870	requires_gnutls_next_disable_tls13_compat
				12871	requires_config_enabled MBEDTLS_SSL_CLI_C
				12872	requires_config_enabled MBEDTLS_DEBUG_C
				12873	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12874	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12875	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12876	run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				12877	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				12878	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				12879	0 \
				12880	-c "HTTP/1.0 200 OK" \
				12881	-c "Protocol is TLSv1.3" \
				12882	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				12883	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12884	-c "NamedGroup: ffdhe8192 ( 104 )" \
				12885	-c "Verifying peer X.509 certificate... ok" \
				12886	-C "received HelloRetryRequest message"
				12887
				12888	requires_gnutls_tls1_3
				12889	requires_gnutls_next_no_ticket
				12890	requires_gnutls_next_disable_tls13_compat
				12891	requires_config_enabled MBEDTLS_SSL_CLI_C
				12892	requires_config_enabled MBEDTLS_DEBUG_C
				12893	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				12894	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12895	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12896	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12897	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12898	0 \
				12899	-c "HTTP/1.0 200 OK" \
				12900	-c "Protocol is TLSv1.3" \
				12901	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				12902	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12903	-c "NamedGroup: secp256r1 ( 17 )" \
				12904	-c "Verifying peer X.509 certificate... ok" \
				12905	-C "received HelloRetryRequest message"
				12906
				12907	requires_gnutls_tls1_3
				12908	requires_gnutls_next_no_ticket
				12909	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12910	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12911	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12912	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12913	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12914	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12915	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12916	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12917	0 \
				12918	-c "HTTP/1.0 200 OK" \
				12919	-c "Protocol is TLSv1.3" \
				12920	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				12921	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12922	-c "NamedGroup: secp256r1 ( 17 )" \
				12923	-c "Verifying peer X.509 certificate... ok" \
				12924	-C "received HelloRetryRequest message"
				12925
				12926	requires_gnutls_tls1_3
				12927	requires_gnutls_next_no_ticket
				12928	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12929	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12930	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12931	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12932	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12933	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12934	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12935	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12936	0 \
				12937	-c "HTTP/1.0 200 OK" \
				12938	-c "Protocol is TLSv1.3" \
				12939	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				12940	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				12941	-c "NamedGroup: secp256r1 ( 17 )" \
				12942	-c "Verifying peer X.509 certificate... ok" \
				12943	-C "received HelloRetryRequest message"
				12944
				12945	requires_gnutls_tls1_3
				12946	requires_gnutls_next_no_ticket
				12947	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12948	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12949	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12950	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12951	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12952	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				12953	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12954	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12955	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12956	0 \
				12957	-c "HTTP/1.0 200 OK" \
				12958	-c "Protocol is TLSv1.3" \
				12959	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				12960	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				12961	-c "NamedGroup: secp256r1 ( 17 )" \
				12962	-c "Verifying peer X.509 certificate... ok" \
				12963	-C "received HelloRetryRequest message"
				12964
				12965	requires_gnutls_tls1_3
				12966	requires_gnutls_next_no_ticket
				12967	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12968	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12969	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12970	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12971	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12972	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12973	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12974	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12975	0 \
				12976	-c "HTTP/1.0 200 OK" \
				12977	-c "Protocol is TLSv1.3" \
				12978	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				12979	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				12980	-c "NamedGroup: secp384r1 ( 18 )" \
				12981	-c "Verifying peer X.509 certificate... ok" \
				12982	-C "received HelloRetryRequest message"
				12983
				12984	requires_gnutls_tls1_3
				12985	requires_gnutls_next_no_ticket
				12986	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12987	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	12988	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	12989	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12990	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				12991	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	12992	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	12993	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	12994	0 \
				12995	-c "HTTP/1.0 200 OK" \
				12996	-c "Protocol is TLSv1.3" \
				12997	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				12998	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				12999	-c "NamedGroup: secp384r1 ( 18 )" \
				13000	-c "Verifying peer X.509 certificate... ok" \
				13001	-C "received HelloRetryRequest message"
				13002
				13003	requires_gnutls_tls1_3
				13004	requires_gnutls_next_no_ticket
				13005	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13006	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13007	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13008	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13009	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13010	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13011	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13012	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13013	0 \
				13014	-c "HTTP/1.0 200 OK" \
				13015	-c "Protocol is TLSv1.3" \
				13016	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13017	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13018	-c "NamedGroup: secp384r1 ( 18 )" \
				13019	-c "Verifying peer X.509 certificate... ok" \
				13020	-C "received HelloRetryRequest message"
				13021
				13022	requires_gnutls_tls1_3
				13023	requires_gnutls_next_no_ticket
				13024	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13025	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13026	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13027	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13028	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13029	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13030	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13031	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13032	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13033	0 \
				13034	-c "HTTP/1.0 200 OK" \
				13035	-c "Protocol is TLSv1.3" \
				13036	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13037	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13038	-c "NamedGroup: secp384r1 ( 18 )" \
				13039	-c "Verifying peer X.509 certificate... ok" \
				13040	-C "received HelloRetryRequest message"
				13041
				13042	requires_gnutls_tls1_3
				13043	requires_gnutls_next_no_ticket
				13044	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13045	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13046	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13047	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13048	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13049	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13050	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13051	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13052	0 \
				13053	-c "HTTP/1.0 200 OK" \
				13054	-c "Protocol is TLSv1.3" \
				13055	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13056	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13057	-c "NamedGroup: secp521r1 ( 19 )" \
				13058	-c "Verifying peer X.509 certificate... ok" \
				13059	-C "received HelloRetryRequest message"
				13060
				13061	requires_gnutls_tls1_3
				13062	requires_gnutls_next_no_ticket
				13063	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13064	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13065	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13066	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13067	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13068	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13069	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13070	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13071	0 \
				13072	-c "HTTP/1.0 200 OK" \
				13073	-c "Protocol is TLSv1.3" \
				13074	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13075	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13076	-c "NamedGroup: secp521r1 ( 19 )" \
				13077	-c "Verifying peer X.509 certificate... ok" \
				13078	-C "received HelloRetryRequest message"
				13079
				13080	requires_gnutls_tls1_3
				13081	requires_gnutls_next_no_ticket
				13082	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13083	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13084	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13085	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13086	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13087	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13088	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13089	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13090	0 \
				13091	-c "HTTP/1.0 200 OK" \
				13092	-c "Protocol is TLSv1.3" \
				13093	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13094	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13095	-c "NamedGroup: secp521r1 ( 19 )" \
				13096	-c "Verifying peer X.509 certificate... ok" \
				13097	-C "received HelloRetryRequest message"
				13098
				13099	requires_gnutls_tls1_3
				13100	requires_gnutls_next_no_ticket
				13101	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13102	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13103	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13104	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13105	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13106	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13107	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13108	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13109	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13110	0 \
				13111	-c "HTTP/1.0 200 OK" \
				13112	-c "Protocol is TLSv1.3" \
				13113	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13114	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13115	-c "NamedGroup: secp521r1 ( 19 )" \
				13116	-c "Verifying peer X.509 certificate... ok" \
				13117	-C "received HelloRetryRequest message"
				13118
				13119	requires_gnutls_tls1_3
				13120	requires_gnutls_next_no_ticket
				13121	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13122	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13123	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13124	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13125	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13126	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13127	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13128	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13129	0 \
				13130	-c "HTTP/1.0 200 OK" \
				13131	-c "Protocol is TLSv1.3" \
				13132	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13133	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13134	-c "NamedGroup: x25519 ( 1d )" \
				13135	-c "Verifying peer X.509 certificate... ok" \
				13136	-C "received HelloRetryRequest message"
				13137
				13138	requires_gnutls_tls1_3
				13139	requires_gnutls_next_no_ticket
				13140	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13141	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13142	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13143	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13144	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13145	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13146	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13147	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13148	0 \
				13149	-c "HTTP/1.0 200 OK" \
				13150	-c "Protocol is TLSv1.3" \
				13151	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13152	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13153	-c "NamedGroup: x25519 ( 1d )" \
				13154	-c "Verifying peer X.509 certificate... ok" \
				13155	-C "received HelloRetryRequest message"
				13156
				13157	requires_gnutls_tls1_3
				13158	requires_gnutls_next_no_ticket
				13159	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13160	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13161	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13162	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13163	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13164	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13165	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13166	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13167	0 \
				13168	-c "HTTP/1.0 200 OK" \
				13169	-c "Protocol is TLSv1.3" \
				13170	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13171	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13172	-c "NamedGroup: x25519 ( 1d )" \
				13173	-c "Verifying peer X.509 certificate... ok" \
				13174	-C "received HelloRetryRequest message"
				13175
				13176	requires_gnutls_tls1_3
				13177	requires_gnutls_next_no_ticket
				13178	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13179	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13180	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13181	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13182	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13183	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13184	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13185	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13186	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13187	0 \
				13188	-c "HTTP/1.0 200 OK" \
				13189	-c "Protocol is TLSv1.3" \
				13190	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13191	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13192	-c "NamedGroup: x25519 ( 1d )" \
				13193	-c "Verifying peer X.509 certificate... ok" \
				13194	-C "received HelloRetryRequest message"
				13195
				13196	requires_gnutls_tls1_3
				13197	requires_gnutls_next_no_ticket
				13198	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13199	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13200	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13201	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13202	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13203	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13204	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13205	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13206	0 \
				13207	-c "HTTP/1.0 200 OK" \
				13208	-c "Protocol is TLSv1.3" \
				13209	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13210	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13211	-c "NamedGroup: x448 ( 1e )" \
				13212	-c "Verifying peer X.509 certificate... ok" \
				13213	-C "received HelloRetryRequest message"
				13214
				13215	requires_gnutls_tls1_3
				13216	requires_gnutls_next_no_ticket
				13217	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13218	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13219	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13220	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13221	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13222	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13223	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13224	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13225	0 \
				13226	-c "HTTP/1.0 200 OK" \
				13227	-c "Protocol is TLSv1.3" \
				13228	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13229	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13230	-c "NamedGroup: x448 ( 1e )" \
				13231	-c "Verifying peer X.509 certificate... ok" \
				13232	-C "received HelloRetryRequest message"
				13233
				13234	requires_gnutls_tls1_3
				13235	requires_gnutls_next_no_ticket
				13236	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13237	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13238	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13239	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13240	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13241	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13242	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13243	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13244	0 \
				13245	-c "HTTP/1.0 200 OK" \
				13246	-c "Protocol is TLSv1.3" \
				13247	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13248	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13249	-c "NamedGroup: x448 ( 1e )" \
				13250	-c "Verifying peer X.509 certificate... ok" \
				13251	-C "received HelloRetryRequest message"
				13252
				13253	requires_gnutls_tls1_3
				13254	requires_gnutls_next_no_ticket
				13255	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13256	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13257	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13258	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13259	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13260	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13261	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13262	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13263	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13264	0 \
				13265	-c "HTTP/1.0 200 OK" \
				13266	-c "Protocol is TLSv1.3" \
				13267	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13268	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13269	-c "NamedGroup: x448 ( 1e )" \
				13270	-c "Verifying peer X.509 certificate... ok" \
				13271	-C "received HelloRetryRequest message"
				13272
				13273	requires_gnutls_tls1_3
				13274	requires_gnutls_next_no_ticket
				13275	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13276	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13277	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13278	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13279	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	13280	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				13281	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				13282	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				13283	0 \
				13284	-c "HTTP/1.0 200 OK" \
				13285	-c "Protocol is TLSv1.3" \
				13286	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13287	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13288	-c "NamedGroup: ffdhe2048 ( 100 )" \
				13289	-c "Verifying peer X.509 certificate... ok" \
				13290	-C "received HelloRetryRequest message"
				13291
				13292	requires_gnutls_tls1_3
				13293	requires_gnutls_next_no_ticket
				13294	requires_gnutls_next_disable_tls13_compat
				13295	requires_config_enabled MBEDTLS_SSL_CLI_C
				13296	requires_config_enabled MBEDTLS_DEBUG_C
				13297	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13298	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13299	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				13300	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				13301	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				13302	0 \
				13303	-c "HTTP/1.0 200 OK" \
				13304	-c "Protocol is TLSv1.3" \
				13305	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13306	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13307	-c "NamedGroup: ffdhe2048 ( 100 )" \
				13308	-c "Verifying peer X.509 certificate... ok" \
				13309	-C "received HelloRetryRequest message"
				13310
				13311	requires_gnutls_tls1_3
				13312	requires_gnutls_next_no_ticket
				13313	requires_gnutls_next_disable_tls13_compat
				13314	requires_config_enabled MBEDTLS_SSL_CLI_C
				13315	requires_config_enabled MBEDTLS_DEBUG_C
				13316	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13317	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13318	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				13319	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				13320	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				13321	0 \
				13322	-c "HTTP/1.0 200 OK" \
				13323	-c "Protocol is TLSv1.3" \
				13324	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13325	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13326	-c "NamedGroup: ffdhe2048 ( 100 )" \
				13327	-c "Verifying peer X.509 certificate... ok" \
				13328	-C "received HelloRetryRequest message"
				13329
				13330	requires_gnutls_tls1_3
				13331	requires_gnutls_next_no_ticket
				13332	requires_gnutls_next_disable_tls13_compat
				13333	requires_config_enabled MBEDTLS_SSL_CLI_C
				13334	requires_config_enabled MBEDTLS_DEBUG_C
				13335	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13336	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13337	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13338	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				13339	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				13340	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				13341	0 \
				13342	-c "HTTP/1.0 200 OK" \
				13343	-c "Protocol is TLSv1.3" \
				13344	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13345	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13346	-c "NamedGroup: ffdhe2048 ( 100 )" \
				13347	-c "Verifying peer X.509 certificate... ok" \
				13348	-C "received HelloRetryRequest message"
				13349
				13350	requires_gnutls_tls1_3
				13351	requires_gnutls_next_no_ticket
				13352	requires_gnutls_next_disable_tls13_compat
				13353	requires_config_enabled MBEDTLS_SSL_CLI_C
				13354	requires_config_enabled MBEDTLS_DEBUG_C
				13355	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13356	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13357	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				13358	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				13359	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				13360	0 \
				13361	-c "HTTP/1.0 200 OK" \
				13362	-c "Protocol is TLSv1.3" \
				13363	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13364	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13365	-c "NamedGroup: ffdhe3072 ( 101 )" \
				13366	-c "Verifying peer X.509 certificate... ok" \
				13367	-C "received HelloRetryRequest message"
				13368
				13369	requires_gnutls_tls1_3
				13370	requires_gnutls_next_no_ticket
				13371	requires_gnutls_next_disable_tls13_compat
				13372	requires_config_enabled MBEDTLS_SSL_CLI_C
				13373	requires_config_enabled MBEDTLS_DEBUG_C
				13374	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13375	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13376	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				13377	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				13378	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				13379	0 \
				13380	-c "HTTP/1.0 200 OK" \
				13381	-c "Protocol is TLSv1.3" \
				13382	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13383	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13384	-c "NamedGroup: ffdhe3072 ( 101 )" \
				13385	-c "Verifying peer X.509 certificate... ok" \
				13386	-C "received HelloRetryRequest message"
				13387
				13388	requires_gnutls_tls1_3
				13389	requires_gnutls_next_no_ticket
				13390	requires_gnutls_next_disable_tls13_compat
				13391	requires_config_enabled MBEDTLS_SSL_CLI_C
				13392	requires_config_enabled MBEDTLS_DEBUG_C
				13393	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13394	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13395	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				13396	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				13397	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				13398	0 \
				13399	-c "HTTP/1.0 200 OK" \
				13400	-c "Protocol is TLSv1.3" \
				13401	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13402	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13403	-c "NamedGroup: ffdhe3072 ( 101 )" \
				13404	-c "Verifying peer X.509 certificate... ok" \
				13405	-C "received HelloRetryRequest message"
				13406
				13407	requires_gnutls_tls1_3
				13408	requires_gnutls_next_no_ticket
				13409	requires_gnutls_next_disable_tls13_compat
				13410	requires_config_enabled MBEDTLS_SSL_CLI_C
				13411	requires_config_enabled MBEDTLS_DEBUG_C
				13412	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13413	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13414	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13415	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				13416	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				13417	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				13418	0 \
				13419	-c "HTTP/1.0 200 OK" \
				13420	-c "Protocol is TLSv1.3" \
				13421	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13422	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13423	-c "NamedGroup: ffdhe3072 ( 101 )" \
				13424	-c "Verifying peer X.509 certificate... ok" \
				13425	-C "received HelloRetryRequest message"
				13426
				13427	requires_gnutls_tls1_3
				13428	requires_gnutls_next_no_ticket
				13429	requires_gnutls_next_disable_tls13_compat
				13430	requires_config_enabled MBEDTLS_SSL_CLI_C
				13431	requires_config_enabled MBEDTLS_DEBUG_C
				13432	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13433	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13434	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				13435	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				13436	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				13437	0 \
				13438	-c "HTTP/1.0 200 OK" \
				13439	-c "Protocol is TLSv1.3" \
				13440	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13441	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13442	-c "NamedGroup: ffdhe4096 ( 102 )" \
				13443	-c "Verifying peer X.509 certificate... ok" \
				13444	-C "received HelloRetryRequest message"
				13445
				13446	requires_gnutls_tls1_3
				13447	requires_gnutls_next_no_ticket
				13448	requires_gnutls_next_disable_tls13_compat
				13449	requires_config_enabled MBEDTLS_SSL_CLI_C
				13450	requires_config_enabled MBEDTLS_DEBUG_C
				13451	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13452	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13453	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				13454	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				13455	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				13456	0 \
				13457	-c "HTTP/1.0 200 OK" \
				13458	-c "Protocol is TLSv1.3" \
				13459	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13460	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13461	-c "NamedGroup: ffdhe4096 ( 102 )" \
				13462	-c "Verifying peer X.509 certificate... ok" \
				13463	-C "received HelloRetryRequest message"
				13464
				13465	requires_gnutls_tls1_3
				13466	requires_gnutls_next_no_ticket
				13467	requires_gnutls_next_disable_tls13_compat
				13468	requires_config_enabled MBEDTLS_SSL_CLI_C
				13469	requires_config_enabled MBEDTLS_DEBUG_C
				13470	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13471	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13472	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				13473	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				13474	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				13475	0 \
				13476	-c "HTTP/1.0 200 OK" \
				13477	-c "Protocol is TLSv1.3" \
				13478	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13479	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13480	-c "NamedGroup: ffdhe4096 ( 102 )" \
				13481	-c "Verifying peer X.509 certificate... ok" \
				13482	-C "received HelloRetryRequest message"
				13483
				13484	requires_gnutls_tls1_3
				13485	requires_gnutls_next_no_ticket
				13486	requires_gnutls_next_disable_tls13_compat
				13487	requires_config_enabled MBEDTLS_SSL_CLI_C
				13488	requires_config_enabled MBEDTLS_DEBUG_C
				13489	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13490	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13491	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13492	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				13493	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				13494	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				13495	0 \
				13496	-c "HTTP/1.0 200 OK" \
				13497	-c "Protocol is TLSv1.3" \
				13498	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13499	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13500	-c "NamedGroup: ffdhe4096 ( 102 )" \
				13501	-c "Verifying peer X.509 certificate... ok" \
				13502	-C "received HelloRetryRequest message"
				13503
				13504	requires_gnutls_tls1_3
				13505	requires_gnutls_next_no_ticket
				13506	requires_gnutls_next_disable_tls13_compat
				13507	requires_config_enabled MBEDTLS_SSL_CLI_C
				13508	requires_config_enabled MBEDTLS_DEBUG_C
				13509	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13510	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13511	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				13512	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				13513	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				13514	0 \
				13515	-c "HTTP/1.0 200 OK" \
				13516	-c "Protocol is TLSv1.3" \
				13517	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13518	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13519	-c "NamedGroup: ffdhe6144 ( 103 )" \
				13520	-c "Verifying peer X.509 certificate... ok" \
				13521	-C "received HelloRetryRequest message"
				13522
				13523	requires_gnutls_tls1_3
				13524	requires_gnutls_next_no_ticket
				13525	requires_gnutls_next_disable_tls13_compat
				13526	requires_config_enabled MBEDTLS_SSL_CLI_C
				13527	requires_config_enabled MBEDTLS_DEBUG_C
				13528	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13529	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13530	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				13531	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				13532	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				13533	0 \
				13534	-c "HTTP/1.0 200 OK" \
				13535	-c "Protocol is TLSv1.3" \
				13536	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13537	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13538	-c "NamedGroup: ffdhe6144 ( 103 )" \
				13539	-c "Verifying peer X.509 certificate... ok" \
				13540	-C "received HelloRetryRequest message"
				13541
				13542	requires_gnutls_tls1_3
				13543	requires_gnutls_next_no_ticket
				13544	requires_gnutls_next_disable_tls13_compat
				13545	requires_config_enabled MBEDTLS_SSL_CLI_C
				13546	requires_config_enabled MBEDTLS_DEBUG_C
				13547	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13548	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13549	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				13550	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				13551	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				13552	0 \
				13553	-c "HTTP/1.0 200 OK" \
				13554	-c "Protocol is TLSv1.3" \
				13555	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13556	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13557	-c "NamedGroup: ffdhe6144 ( 103 )" \
				13558	-c "Verifying peer X.509 certificate... ok" \
				13559	-C "received HelloRetryRequest message"
				13560
				13561	requires_gnutls_tls1_3
				13562	requires_gnutls_next_no_ticket
				13563	requires_gnutls_next_disable_tls13_compat
				13564	requires_config_enabled MBEDTLS_SSL_CLI_C
				13565	requires_config_enabled MBEDTLS_DEBUG_C
				13566	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13567	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13568	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13569	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				13570	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				13571	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				13572	0 \
				13573	-c "HTTP/1.0 200 OK" \
				13574	-c "Protocol is TLSv1.3" \
				13575	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13576	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13577	-c "NamedGroup: ffdhe6144 ( 103 )" \
				13578	-c "Verifying peer X.509 certificate... ok" \
				13579	-C "received HelloRetryRequest message"
				13580
				13581	requires_gnutls_tls1_3
				13582	requires_gnutls_next_no_ticket
				13583	requires_gnutls_next_disable_tls13_compat
				13584	requires_config_enabled MBEDTLS_SSL_CLI_C
				13585	requires_config_enabled MBEDTLS_DEBUG_C
				13586	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13587	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13588	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				13589	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				13590	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				13591	0 \
				13592	-c "HTTP/1.0 200 OK" \
				13593	-c "Protocol is TLSv1.3" \
				13594	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13595	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13596	-c "NamedGroup: ffdhe8192 ( 104 )" \
				13597	-c "Verifying peer X.509 certificate... ok" \
				13598	-C "received HelloRetryRequest message"
				13599
				13600	requires_gnutls_tls1_3
				13601	requires_gnutls_next_no_ticket
				13602	requires_gnutls_next_disable_tls13_compat
				13603	requires_config_enabled MBEDTLS_SSL_CLI_C
				13604	requires_config_enabled MBEDTLS_DEBUG_C
				13605	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13606	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13607	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				13608	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				13609	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				13610	0 \
				13611	-c "HTTP/1.0 200 OK" \
				13612	-c "Protocol is TLSv1.3" \
				13613	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13614	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13615	-c "NamedGroup: ffdhe8192 ( 104 )" \
				13616	-c "Verifying peer X.509 certificate... ok" \
				13617	-C "received HelloRetryRequest message"
				13618
				13619	requires_gnutls_tls1_3
				13620	requires_gnutls_next_no_ticket
				13621	requires_gnutls_next_disable_tls13_compat
				13622	requires_config_enabled MBEDTLS_SSL_CLI_C
				13623	requires_config_enabled MBEDTLS_DEBUG_C
				13624	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13625	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13626	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				13627	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				13628	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				13629	0 \
				13630	-c "HTTP/1.0 200 OK" \
				13631	-c "Protocol is TLSv1.3" \
				13632	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13633	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				13634	-c "NamedGroup: ffdhe8192 ( 104 )" \
				13635	-c "Verifying peer X.509 certificate... ok" \
				13636	-C "received HelloRetryRequest message"
				13637
				13638	requires_gnutls_tls1_3
				13639	requires_gnutls_next_no_ticket
				13640	requires_gnutls_next_disable_tls13_compat
				13641	requires_config_enabled MBEDTLS_SSL_CLI_C
				13642	requires_config_enabled MBEDTLS_DEBUG_C
				13643	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13644	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13645	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				13646	run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				13647	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				13648	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				13649	0 \
				13650	-c "HTTP/1.0 200 OK" \
				13651	-c "Protocol is TLSv1.3" \
				13652	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				13653	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				13654	-c "NamedGroup: ffdhe8192 ( 104 )" \
				13655	-c "Verifying peer X.509 certificate... ok" \
				13656	-C "received HelloRetryRequest message"
				13657
				13658	requires_gnutls_tls1_3
				13659	requires_gnutls_next_no_ticket
				13660	requires_gnutls_next_disable_tls13_compat
				13661	requires_config_enabled MBEDTLS_SSL_CLI_C
				13662	requires_config_enabled MBEDTLS_DEBUG_C
				13663	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				13664	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13665	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13666	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13667	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13668	0 \
				13669	-c "HTTP/1.0 200 OK" \
				13670	-c "Protocol is TLSv1.3" \
				13671	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13672	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13673	-c "NamedGroup: secp256r1 ( 17 )" \
				13674	-c "Verifying peer X.509 certificate... ok" \
				13675	-C "received HelloRetryRequest message"
				13676
				13677	requires_gnutls_tls1_3
				13678	requires_gnutls_next_no_ticket
				13679	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13680	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13681	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13682	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13683	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	13684	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13685	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13686	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13687	0 \
				13688	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13689	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13690	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13691	-c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13692	-c "NamedGroup: secp256r1 ( 17 )" \
				13693	-c "Verifying peer X.509 certificate... ok" \
				13694	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13695
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13696	requires_gnutls_tls1_3
				13697	requires_gnutls_next_no_ticket
				13698	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13699	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13700	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13701	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13702	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	13703	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13704	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13705	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13706	0 \
				13707	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13708	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13709	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13710	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13711	-c "NamedGroup: secp256r1 ( 17 )" \
				13712	-c "Verifying peer X.509 certificate... ok" \
				13713	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13714
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13715	requires_gnutls_tls1_3
				13716	requires_gnutls_next_no_ticket
				13717	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13718	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13719	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13720	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13721	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13722	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	13723	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13724	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13725	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13726	0 \
				13727	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13728	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13729	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13730	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13731	-c "NamedGroup: secp256r1 ( 17 )" \
				13732	-c "Verifying peer X.509 certificate... ok" \
				13733	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13734
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13735	requires_gnutls_tls1_3
				13736	requires_gnutls_next_no_ticket
				13737	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13738	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13739	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13740	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13741	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13742	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13743	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13744	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13745	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13746	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13747	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13748	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13749	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13750	-c "NamedGroup: secp384r1 ( 18 )" \
				13751	-c "Verifying peer X.509 certificate... ok" \
				13752	-C "received HelloRetryRequest message"
				13753
				13754	requires_gnutls_tls1_3
				13755	requires_gnutls_next_no_ticket
				13756	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13757	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13758	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13759	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13760	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13761	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13762	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13763	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13764	0 \
				13765	-c "HTTP/1.0 200 OK" \
				13766	-c "Protocol is TLSv1.3" \
				13767	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13768	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13769	-c "NamedGroup: secp384r1 ( 18 )" \
				13770	-c "Verifying peer X.509 certificate... ok" \
				13771	-C "received HelloRetryRequest message"
				13772
				13773	requires_gnutls_tls1_3
				13774	requires_gnutls_next_no_ticket
				13775	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13776	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13777	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13778	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13779	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13780	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13781	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13782	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13783	0 \
				13784	-c "HTTP/1.0 200 OK" \
				13785	-c "Protocol is TLSv1.3" \
				13786	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13787	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13788	-c "NamedGroup: secp384r1 ( 18 )" \
				13789	-c "Verifying peer X.509 certificate... ok" \
				13790	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13791
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13792	requires_gnutls_tls1_3
				13793	requires_gnutls_next_no_ticket
				13794	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13795	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13796	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13797	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13798	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13799	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	13800	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13801	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13802	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13803	0 \
				13804	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13805	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13806	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13807	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13808	-c "NamedGroup: secp384r1 ( 18 )" \
				13809	-c "Verifying peer X.509 certificate... ok" \
				13810	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13811
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13812	requires_gnutls_tls1_3
				13813	requires_gnutls_next_no_ticket
				13814	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13815	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13816	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13817	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13818	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13819	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13820	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13821	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13822	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13823	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13824	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13825	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13826	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13827	-c "NamedGroup: secp521r1 ( 19 )" \
				13828	-c "Verifying peer X.509 certificate... ok" \
				13829	-C "received HelloRetryRequest message"
				13830
				13831	requires_gnutls_tls1_3
				13832	requires_gnutls_next_no_ticket
				13833	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13834	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13835	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13836	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13837	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13838	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13839	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13840	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13841	0 \
				13842	-c "HTTP/1.0 200 OK" \
				13843	-c "Protocol is TLSv1.3" \
				13844	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13845	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13846	-c "NamedGroup: secp521r1 ( 19 )" \
				13847	-c "Verifying peer X.509 certificate... ok" \
				13848	-C "received HelloRetryRequest message"
				13849
				13850	requires_gnutls_tls1_3
				13851	requires_gnutls_next_no_ticket
				13852	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13853	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13854	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13855	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13856	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13857	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13858	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13859	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13860	0 \
				13861	-c "HTTP/1.0 200 OK" \
				13862	-c "Protocol is TLSv1.3" \
				13863	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13864	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13865	-c "NamedGroup: secp521r1 ( 19 )" \
				13866	-c "Verifying peer X.509 certificate... ok" \
				13867	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13868
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13869	requires_gnutls_tls1_3
				13870	requires_gnutls_next_no_ticket
				13871	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13872	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13873	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13874	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13875	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13876	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	13877	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13878	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13879	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13880	0 \
				13881	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13882	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13883	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13884	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13885	-c "NamedGroup: secp521r1 ( 19 )" \
				13886	-c "Verifying peer X.509 certificate... ok" \
				13887	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13888
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13889	requires_gnutls_tls1_3
				13890	requires_gnutls_next_no_ticket
				13891	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13892	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13893	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13894	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13895	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13896	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13897	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13898	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13899	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13900	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13901	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13902	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13903	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13904	-c "NamedGroup: x25519 ( 1d )" \
				13905	-c "Verifying peer X.509 certificate... ok" \
				13906	-C "received HelloRetryRequest message"
				13907
				13908	requires_gnutls_tls1_3
				13909	requires_gnutls_next_no_ticket
				13910	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13911	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13912	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13913	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13914	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13915	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13916	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13917	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13918	0 \
				13919	-c "HTTP/1.0 200 OK" \
				13920	-c "Protocol is TLSv1.3" \
				13921	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13922	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				13923	-c "NamedGroup: x25519 ( 1d )" \
				13924	-c "Verifying peer X.509 certificate... ok" \
				13925	-C "received HelloRetryRequest message"
				13926
				13927	requires_gnutls_tls1_3
				13928	requires_gnutls_next_no_ticket
				13929	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13930	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13931	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13932	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13933	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13934	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13935	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13936	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13937	0 \
				13938	-c "HTTP/1.0 200 OK" \
				13939	-c "Protocol is TLSv1.3" \
				13940	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13941	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13942	-c "NamedGroup: x25519 ( 1d )" \
				13943	-c "Verifying peer X.509 certificate... ok" \
				13944	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13945
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13946	requires_gnutls_tls1_3
				13947	requires_gnutls_next_no_ticket
				13948	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13949	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13950	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13951	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13952	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13953	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	13954	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13955	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13956	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13957	0 \
				13958	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13959	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13960	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13961	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	13962	-c "NamedGroup: x25519 ( 1d )" \
				13963	-c "Verifying peer X.509 certificate... ok" \
				13964	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	13965
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13966	requires_gnutls_tls1_3
				13967	requires_gnutls_next_no_ticket
				13968	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	13969	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13970	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13971	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	13972	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13973	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13974	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13975	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13976	0 \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13977	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	13978	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	13979	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13980	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				13981	-c "NamedGroup: x448 ( 1e )" \
				13982	-c "Verifying peer X.509 certificate... ok" \
				13983	-C "received HelloRetryRequest message"
				13984
				13985	requires_gnutls_tls1_3
				13986	requires_gnutls_next_no_ticket
				13987	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13988	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	13989	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	13990	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13991	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13992	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	13993	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	13994	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	13995	0 \
				13996	-c "HTTP/1.0 200 OK" \
				13997	-c "Protocol is TLSv1.3" \
				13998	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				13999	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14000	-c "NamedGroup: x448 ( 1e )" \
				14001	-c "Verifying peer X.509 certificate... ok" \
				14002	-C "received HelloRetryRequest message"
				14003
				14004	requires_gnutls_tls1_3
				14005	requires_gnutls_next_no_ticket
				14006	requires_gnutls_next_disable_tls13_compat
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	14007	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14008	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14009	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	14010	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14011	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14012	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14013	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
Ronald Cron	9d0a3e8	2022-04-05 16:13:38 +0200	[diff] [blame]	14014	0 \
				14015	-c "HTTP/1.0 200 OK" \
				14016	-c "Protocol is TLSv1.3" \
				14017	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14018	-c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	14019	-c "NamedGroup: x448 ( 1e )" \
				14020	-c "Verifying peer X.509 certificate... ok" \
				14021	-C "received HelloRetryRequest message"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame]	14022
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	14023	requires_gnutls_tls1_3
				14024	requires_gnutls_next_no_ticket
				14025	requires_gnutls_next_disable_tls13_compat
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	14026	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14027	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14028	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron	ae93725	2021-12-10 09:55:15 +0100	[diff] [blame]	14029	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	14030	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	14031	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14032	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14033	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	14034	0 \
				14035	-c "HTTP/1.0 200 OK" \
Ronald Cron	a1b8f6e	2022-03-18 14:04:12 +0100	[diff] [blame]	14036	-c "Protocol is TLSv1.3" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	14037	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
XiaokangQian	8031ba7	2022-03-22 12:53:45 +0000	[diff] [blame]	14038	-c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu	7de7985	2022-03-23 16:50:47 +0800	[diff] [blame]	14039	-c "NamedGroup: x448 ( 1e )" \
				14040	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	8031ba7	2022-03-22 12:53:45 +0000	[diff] [blame]	14041	-C "received HelloRetryRequest message"
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	14042
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	14043	requires_gnutls_tls1_3
				14044	requires_gnutls_next_no_ticket
				14045	requires_gnutls_next_disable_tls13_compat
				14046	requires_config_enabled MBEDTLS_SSL_CLI_C
				14047	requires_config_enabled MBEDTLS_DEBUG_C
				14048	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14049	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14050	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				14051	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				14052	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				14053	0 \
				14054	-c "HTTP/1.0 200 OK" \
				14055	-c "Protocol is TLSv1.3" \
				14056	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14057	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14058	-c "NamedGroup: ffdhe2048 ( 100 )" \
				14059	-c "Verifying peer X.509 certificate... ok" \
				14060	-C "received HelloRetryRequest message"
				14061
				14062	requires_gnutls_tls1_3
				14063	requires_gnutls_next_no_ticket
				14064	requires_gnutls_next_disable_tls13_compat
				14065	requires_config_enabled MBEDTLS_SSL_CLI_C
				14066	requires_config_enabled MBEDTLS_DEBUG_C
				14067	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14068	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14069	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				14070	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				14071	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				14072	0 \
				14073	-c "HTTP/1.0 200 OK" \
				14074	-c "Protocol is TLSv1.3" \
				14075	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14076	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14077	-c "NamedGroup: ffdhe2048 ( 100 )" \
				14078	-c "Verifying peer X.509 certificate... ok" \
				14079	-C "received HelloRetryRequest message"
				14080
				14081	requires_gnutls_tls1_3
				14082	requires_gnutls_next_no_ticket
				14083	requires_gnutls_next_disable_tls13_compat
				14084	requires_config_enabled MBEDTLS_SSL_CLI_C
				14085	requires_config_enabled MBEDTLS_DEBUG_C
				14086	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14087	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14088	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				14089	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				14090	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				14091	0 \
				14092	-c "HTTP/1.0 200 OK" \
				14093	-c "Protocol is TLSv1.3" \
				14094	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14095	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14096	-c "NamedGroup: ffdhe2048 ( 100 )" \
				14097	-c "Verifying peer X.509 certificate... ok" \
				14098	-C "received HelloRetryRequest message"
				14099
				14100	requires_gnutls_tls1_3
				14101	requires_gnutls_next_no_ticket
				14102	requires_gnutls_next_disable_tls13_compat
				14103	requires_config_enabled MBEDTLS_SSL_CLI_C
				14104	requires_config_enabled MBEDTLS_DEBUG_C
				14105	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14106	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14107	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14108	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				14109	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				14110	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				14111	0 \
				14112	-c "HTTP/1.0 200 OK" \
				14113	-c "Protocol is TLSv1.3" \
				14114	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14115	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14116	-c "NamedGroup: ffdhe2048 ( 100 )" \
				14117	-c "Verifying peer X.509 certificate... ok" \
				14118	-C "received HelloRetryRequest message"
				14119
				14120	requires_gnutls_tls1_3
				14121	requires_gnutls_next_no_ticket
				14122	requires_gnutls_next_disable_tls13_compat
				14123	requires_config_enabled MBEDTLS_SSL_CLI_C
				14124	requires_config_enabled MBEDTLS_DEBUG_C
				14125	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14126	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14127	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				14128	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				14129	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				14130	0 \
				14131	-c "HTTP/1.0 200 OK" \
				14132	-c "Protocol is TLSv1.3" \
				14133	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14134	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14135	-c "NamedGroup: ffdhe3072 ( 101 )" \
				14136	-c "Verifying peer X.509 certificate... ok" \
				14137	-C "received HelloRetryRequest message"
				14138
				14139	requires_gnutls_tls1_3
				14140	requires_gnutls_next_no_ticket
				14141	requires_gnutls_next_disable_tls13_compat
				14142	requires_config_enabled MBEDTLS_SSL_CLI_C
				14143	requires_config_enabled MBEDTLS_DEBUG_C
				14144	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14145	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14146	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				14147	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				14148	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				14149	0 \
				14150	-c "HTTP/1.0 200 OK" \
				14151	-c "Protocol is TLSv1.3" \
				14152	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14153	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14154	-c "NamedGroup: ffdhe3072 ( 101 )" \
				14155	-c "Verifying peer X.509 certificate... ok" \
				14156	-C "received HelloRetryRequest message"
				14157
				14158	requires_gnutls_tls1_3
				14159	requires_gnutls_next_no_ticket
				14160	requires_gnutls_next_disable_tls13_compat
				14161	requires_config_enabled MBEDTLS_SSL_CLI_C
				14162	requires_config_enabled MBEDTLS_DEBUG_C
				14163	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14164	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14165	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				14166	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				14167	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				14168	0 \
				14169	-c "HTTP/1.0 200 OK" \
				14170	-c "Protocol is TLSv1.3" \
				14171	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14172	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14173	-c "NamedGroup: ffdhe3072 ( 101 )" \
				14174	-c "Verifying peer X.509 certificate... ok" \
				14175	-C "received HelloRetryRequest message"
				14176
				14177	requires_gnutls_tls1_3
				14178	requires_gnutls_next_no_ticket
				14179	requires_gnutls_next_disable_tls13_compat
				14180	requires_config_enabled MBEDTLS_SSL_CLI_C
				14181	requires_config_enabled MBEDTLS_DEBUG_C
				14182	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14183	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14184	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14185	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				14186	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				14187	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				14188	0 \
				14189	-c "HTTP/1.0 200 OK" \
				14190	-c "Protocol is TLSv1.3" \
				14191	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14192	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14193	-c "NamedGroup: ffdhe3072 ( 101 )" \
				14194	-c "Verifying peer X.509 certificate... ok" \
				14195	-C "received HelloRetryRequest message"
				14196
				14197	requires_gnutls_tls1_3
				14198	requires_gnutls_next_no_ticket
				14199	requires_gnutls_next_disable_tls13_compat
				14200	requires_config_enabled MBEDTLS_SSL_CLI_C
				14201	requires_config_enabled MBEDTLS_DEBUG_C
				14202	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14203	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14204	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				14205	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				14206	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				14207	0 \
				14208	-c "HTTP/1.0 200 OK" \
				14209	-c "Protocol is TLSv1.3" \
				14210	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14211	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14212	-c "NamedGroup: ffdhe4096 ( 102 )" \
				14213	-c "Verifying peer X.509 certificate... ok" \
				14214	-C "received HelloRetryRequest message"
				14215
				14216	requires_gnutls_tls1_3
				14217	requires_gnutls_next_no_ticket
				14218	requires_gnutls_next_disable_tls13_compat
				14219	requires_config_enabled MBEDTLS_SSL_CLI_C
				14220	requires_config_enabled MBEDTLS_DEBUG_C
				14221	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14222	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14223	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				14224	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				14225	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				14226	0 \
				14227	-c "HTTP/1.0 200 OK" \
				14228	-c "Protocol is TLSv1.3" \
				14229	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14230	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14231	-c "NamedGroup: ffdhe4096 ( 102 )" \
				14232	-c "Verifying peer X.509 certificate... ok" \
				14233	-C "received HelloRetryRequest message"
				14234
				14235	requires_gnutls_tls1_3
				14236	requires_gnutls_next_no_ticket
				14237	requires_gnutls_next_disable_tls13_compat
				14238	requires_config_enabled MBEDTLS_SSL_CLI_C
				14239	requires_config_enabled MBEDTLS_DEBUG_C
				14240	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14241	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14242	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				14243	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				14244	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				14245	0 \
				14246	-c "HTTP/1.0 200 OK" \
				14247	-c "Protocol is TLSv1.3" \
				14248	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14249	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14250	-c "NamedGroup: ffdhe4096 ( 102 )" \
				14251	-c "Verifying peer X.509 certificate... ok" \
				14252	-C "received HelloRetryRequest message"
				14253
				14254	requires_gnutls_tls1_3
				14255	requires_gnutls_next_no_ticket
				14256	requires_gnutls_next_disable_tls13_compat
				14257	requires_config_enabled MBEDTLS_SSL_CLI_C
				14258	requires_config_enabled MBEDTLS_DEBUG_C
				14259	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14260	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14261	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14262	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				14263	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				14264	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				14265	0 \
				14266	-c "HTTP/1.0 200 OK" \
				14267	-c "Protocol is TLSv1.3" \
				14268	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14269	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14270	-c "NamedGroup: ffdhe4096 ( 102 )" \
				14271	-c "Verifying peer X.509 certificate... ok" \
				14272	-C "received HelloRetryRequest message"
				14273
				14274	requires_gnutls_tls1_3
				14275	requires_gnutls_next_no_ticket
				14276	requires_gnutls_next_disable_tls13_compat
				14277	requires_config_enabled MBEDTLS_SSL_CLI_C
				14278	requires_config_enabled MBEDTLS_DEBUG_C
				14279	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14280	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14281	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				14282	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				14283	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				14284	0 \
				14285	-c "HTTP/1.0 200 OK" \
				14286	-c "Protocol is TLSv1.3" \
				14287	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14288	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14289	-c "NamedGroup: ffdhe6144 ( 103 )" \
				14290	-c "Verifying peer X.509 certificate... ok" \
				14291	-C "received HelloRetryRequest message"
				14292
				14293	requires_gnutls_tls1_3
				14294	requires_gnutls_next_no_ticket
				14295	requires_gnutls_next_disable_tls13_compat
				14296	requires_config_enabled MBEDTLS_SSL_CLI_C
				14297	requires_config_enabled MBEDTLS_DEBUG_C
				14298	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14299	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14300	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				14301	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				14302	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				14303	0 \
				14304	-c "HTTP/1.0 200 OK" \
				14305	-c "Protocol is TLSv1.3" \
				14306	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14307	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14308	-c "NamedGroup: ffdhe6144 ( 103 )" \
				14309	-c "Verifying peer X.509 certificate... ok" \
				14310	-C "received HelloRetryRequest message"
				14311
				14312	requires_gnutls_tls1_3
				14313	requires_gnutls_next_no_ticket
				14314	requires_gnutls_next_disable_tls13_compat
				14315	requires_config_enabled MBEDTLS_SSL_CLI_C
				14316	requires_config_enabled MBEDTLS_DEBUG_C
				14317	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14318	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14319	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				14320	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				14321	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				14322	0 \
				14323	-c "HTTP/1.0 200 OK" \
				14324	-c "Protocol is TLSv1.3" \
				14325	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14326	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14327	-c "NamedGroup: ffdhe6144 ( 103 )" \
				14328	-c "Verifying peer X.509 certificate... ok" \
				14329	-C "received HelloRetryRequest message"
				14330
				14331	requires_gnutls_tls1_3
				14332	requires_gnutls_next_no_ticket
				14333	requires_gnutls_next_disable_tls13_compat
				14334	requires_config_enabled MBEDTLS_SSL_CLI_C
				14335	requires_config_enabled MBEDTLS_DEBUG_C
				14336	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14337	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14338	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14339	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				14340	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				14341	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				14342	0 \
				14343	-c "HTTP/1.0 200 OK" \
				14344	-c "Protocol is TLSv1.3" \
				14345	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14346	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14347	-c "NamedGroup: ffdhe6144 ( 103 )" \
				14348	-c "Verifying peer X.509 certificate... ok" \
				14349	-C "received HelloRetryRequest message"
				14350
				14351	requires_gnutls_tls1_3
				14352	requires_gnutls_next_no_ticket
				14353	requires_gnutls_next_disable_tls13_compat
				14354	requires_config_enabled MBEDTLS_SSL_CLI_C
				14355	requires_config_enabled MBEDTLS_DEBUG_C
				14356	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14357	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14358	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				14359	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				14360	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				14361	0 \
				14362	-c "HTTP/1.0 200 OK" \
				14363	-c "Protocol is TLSv1.3" \
				14364	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14365	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14366	-c "NamedGroup: ffdhe8192 ( 104 )" \
				14367	-c "Verifying peer X.509 certificate... ok" \
				14368	-C "received HelloRetryRequest message"
				14369
				14370	requires_gnutls_tls1_3
				14371	requires_gnutls_next_no_ticket
				14372	requires_gnutls_next_disable_tls13_compat
				14373	requires_config_enabled MBEDTLS_SSL_CLI_C
				14374	requires_config_enabled MBEDTLS_DEBUG_C
				14375	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14376	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14377	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				14378	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				14379	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				14380	0 \
				14381	-c "HTTP/1.0 200 OK" \
				14382	-c "Protocol is TLSv1.3" \
				14383	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14384	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14385	-c "NamedGroup: ffdhe8192 ( 104 )" \
				14386	-c "Verifying peer X.509 certificate... ok" \
				14387	-C "received HelloRetryRequest message"
				14388
				14389	requires_gnutls_tls1_3
				14390	requires_gnutls_next_no_ticket
				14391	requires_gnutls_next_disable_tls13_compat
				14392	requires_config_enabled MBEDTLS_SSL_CLI_C
				14393	requires_config_enabled MBEDTLS_DEBUG_C
				14394	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14395	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14396	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				14397	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				14398	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				14399	0 \
				14400	-c "HTTP/1.0 200 OK" \
				14401	-c "Protocol is TLSv1.3" \
				14402	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14403	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14404	-c "NamedGroup: ffdhe8192 ( 104 )" \
				14405	-c "Verifying peer X.509 certificate... ok" \
				14406	-C "received HelloRetryRequest message"
				14407
				14408	requires_gnutls_tls1_3
				14409	requires_gnutls_next_no_ticket
				14410	requires_gnutls_next_disable_tls13_compat
				14411	requires_config_enabled MBEDTLS_SSL_CLI_C
				14412	requires_config_enabled MBEDTLS_DEBUG_C
				14413	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14414	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14415	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14416	run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				14417	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				14418	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				14419	0 \
				14420	-c "HTTP/1.0 200 OK" \
				14421	-c "Protocol is TLSv1.3" \
				14422	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				14423	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14424	-c "NamedGroup: ffdhe8192 ( 104 )" \
				14425	-c "Verifying peer X.509 certificate... ok" \
				14426	-C "received HelloRetryRequest message"
				14427
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14428	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14429	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14430	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14431	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14432	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14433	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14434	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14435	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14436	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14437	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14438	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14439	0 \
				14440	-s "Protocol is TLSv1.3" \
				14441	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14442	-s "received signature algorithm: 0x403" \
				14443	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14444	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14445	-c "Protocol is TLSv1.3" \
				14446	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14447	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14448	-c "NamedGroup: secp256r1 ( 17 )" \
				14449	-c "Verifying peer X.509 certificate... ok" \
				14450	-C "received HelloRetryRequest message"
				14451
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14452	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14453	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14454	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14455	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14456	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14457	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14458	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14459	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14460	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14461	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14462	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14463	0 \
				14464	-s "Protocol is TLSv1.3" \
				14465	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14466	-s "received signature algorithm: 0x503" \
				14467	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14468	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14469	-c "Protocol is TLSv1.3" \
				14470	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14471	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14472	-c "NamedGroup: secp256r1 ( 17 )" \
				14473	-c "Verifying peer X.509 certificate... ok" \
				14474	-C "received HelloRetryRequest message"
				14475
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14476	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14477	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14478	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14479	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14480	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14481	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14482	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14483	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14484	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14485	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14486	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14487	0 \
				14488	-s "Protocol is TLSv1.3" \
				14489	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14490	-s "received signature algorithm: 0x603" \
				14491	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14492	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14493	-c "Protocol is TLSv1.3" \
				14494	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14495	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14496	-c "NamedGroup: secp256r1 ( 17 )" \
				14497	-c "Verifying peer X.509 certificate... ok" \
				14498	-C "received HelloRetryRequest message"
				14499
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14500	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14501	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14502	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14503	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14504	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14505	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14506	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14507	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14508	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14509	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14510	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14511	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14512	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14513	0 \
				14514	-s "Protocol is TLSv1.3" \
				14515	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14516	-s "received signature algorithm: 0x804" \
				14517	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14518	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14519	-c "Protocol is TLSv1.3" \
				14520	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14521	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14522	-c "NamedGroup: secp256r1 ( 17 )" \
				14523	-c "Verifying peer X.509 certificate... ok" \
				14524	-C "received HelloRetryRequest message"
				14525
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14526	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14527	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14528	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14529	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14530	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14531	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14532	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14533	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14534	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14535	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14536	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14537	0 \
				14538	-s "Protocol is TLSv1.3" \
				14539	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14540	-s "received signature algorithm: 0x403" \
				14541	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14542	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14543	-c "Protocol is TLSv1.3" \
				14544	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14545	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14546	-c "NamedGroup: secp384r1 ( 18 )" \
				14547	-c "Verifying peer X.509 certificate... ok" \
				14548	-C "received HelloRetryRequest message"
				14549
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14550	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14551	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14552	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14553	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14554	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14555	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14556	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14557	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14558	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14559	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14560	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14561	0 \
				14562	-s "Protocol is TLSv1.3" \
				14563	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14564	-s "received signature algorithm: 0x503" \
				14565	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14566	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14567	-c "Protocol is TLSv1.3" \
				14568	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14569	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14570	-c "NamedGroup: secp384r1 ( 18 )" \
				14571	-c "Verifying peer X.509 certificate... ok" \
				14572	-C "received HelloRetryRequest message"
				14573
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14574	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14575	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14576	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14577	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14578	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14579	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14580	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14581	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14582	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14583	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14584	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14585	0 \
				14586	-s "Protocol is TLSv1.3" \
				14587	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14588	-s "received signature algorithm: 0x603" \
				14589	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14590	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14591	-c "Protocol is TLSv1.3" \
				14592	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14593	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14594	-c "NamedGroup: secp384r1 ( 18 )" \
				14595	-c "Verifying peer X.509 certificate... ok" \
				14596	-C "received HelloRetryRequest message"
				14597
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14598	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14599	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14600	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14601	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14602	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14603	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14604	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14605	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14606	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14607	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14608	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14609	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14610	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14611	0 \
				14612	-s "Protocol is TLSv1.3" \
				14613	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14614	-s "received signature algorithm: 0x804" \
				14615	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14616	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14617	-c "Protocol is TLSv1.3" \
				14618	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14619	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14620	-c "NamedGroup: secp384r1 ( 18 )" \
				14621	-c "Verifying peer X.509 certificate... ok" \
				14622	-C "received HelloRetryRequest message"
				14623
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14624	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14625	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14626	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14627	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14628	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14629	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14630	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14631	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14632	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14633	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14634	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14635	0 \
				14636	-s "Protocol is TLSv1.3" \
				14637	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14638	-s "received signature algorithm: 0x403" \
				14639	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14640	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14641	-c "Protocol is TLSv1.3" \
				14642	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14643	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14644	-c "NamedGroup: secp521r1 ( 19 )" \
				14645	-c "Verifying peer X.509 certificate... ok" \
				14646	-C "received HelloRetryRequest message"
				14647
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14648	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14649	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14650	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14651	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14652	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14653	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14654	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14655	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14656	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14657	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14658	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14659	0 \
				14660	-s "Protocol is TLSv1.3" \
				14661	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14662	-s "received signature algorithm: 0x503" \
				14663	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14664	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14665	-c "Protocol is TLSv1.3" \
				14666	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14667	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14668	-c "NamedGroup: secp521r1 ( 19 )" \
				14669	-c "Verifying peer X.509 certificate... ok" \
				14670	-C "received HelloRetryRequest message"
				14671
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14672	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14673	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14674	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14675	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14676	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14677	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14678	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14679	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14680	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14681	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14682	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14683	0 \
				14684	-s "Protocol is TLSv1.3" \
				14685	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14686	-s "received signature algorithm: 0x603" \
				14687	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14688	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14689	-c "Protocol is TLSv1.3" \
				14690	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14691	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14692	-c "NamedGroup: secp521r1 ( 19 )" \
				14693	-c "Verifying peer X.509 certificate... ok" \
				14694	-C "received HelloRetryRequest message"
				14695
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14696	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14697	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14698	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14699	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14700	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14701	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14702	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14703	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14704	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14705	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14706	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14707	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14708	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14709	0 \
				14710	-s "Protocol is TLSv1.3" \
				14711	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14712	-s "received signature algorithm: 0x804" \
				14713	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14714	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14715	-c "Protocol is TLSv1.3" \
				14716	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14717	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14718	-c "NamedGroup: secp521r1 ( 19 )" \
				14719	-c "Verifying peer X.509 certificate... ok" \
				14720	-C "received HelloRetryRequest message"
				14721
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14722	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14723	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14724	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14725	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14726	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14727	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14728	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14729	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14730	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14731	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14732	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14733	0 \
				14734	-s "Protocol is TLSv1.3" \
				14735	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14736	-s "received signature algorithm: 0x403" \
				14737	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14738	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14739	-c "Protocol is TLSv1.3" \
				14740	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14741	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14742	-c "NamedGroup: x25519 ( 1d )" \
				14743	-c "Verifying peer X.509 certificate... ok" \
				14744	-C "received HelloRetryRequest message"
				14745
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14746	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14747	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14748	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14749	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14750	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14751	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14752	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14753	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14754	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14755	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14756	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14757	0 \
				14758	-s "Protocol is TLSv1.3" \
				14759	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14760	-s "received signature algorithm: 0x503" \
				14761	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14762	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14763	-c "Protocol is TLSv1.3" \
				14764	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14765	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14766	-c "NamedGroup: x25519 ( 1d )" \
				14767	-c "Verifying peer X.509 certificate... ok" \
				14768	-C "received HelloRetryRequest message"
				14769
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14770	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14771	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14772	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14773	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14774	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14775	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14776	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14777	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14778	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14779	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14780	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14781	0 \
				14782	-s "Protocol is TLSv1.3" \
				14783	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14784	-s "received signature algorithm: 0x603" \
				14785	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14786	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14787	-c "Protocol is TLSv1.3" \
				14788	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14789	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14790	-c "NamedGroup: x25519 ( 1d )" \
				14791	-c "Verifying peer X.509 certificate... ok" \
				14792	-C "received HelloRetryRequest message"
				14793
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14794	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14795	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14796	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14797	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14798	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14799	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14800	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14801	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14802	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14803	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14804	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14805	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14806	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14807	0 \
				14808	-s "Protocol is TLSv1.3" \
				14809	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14810	-s "received signature algorithm: 0x804" \
				14811	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14812	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14813	-c "Protocol is TLSv1.3" \
				14814	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14815	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14816	-c "NamedGroup: x25519 ( 1d )" \
				14817	-c "Verifying peer X.509 certificate... ok" \
				14818	-C "received HelloRetryRequest message"
				14819
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14820	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14821	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14822	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14823	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14824	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14825	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14826	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14827	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14828	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14829	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14830	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14831	0 \
				14832	-s "Protocol is TLSv1.3" \
				14833	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14834	-s "received signature algorithm: 0x403" \
				14835	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14836	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14837	-c "Protocol is TLSv1.3" \
				14838	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14839	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14840	-c "NamedGroup: x448 ( 1e )" \
				14841	-c "Verifying peer X.509 certificate... ok" \
				14842	-C "received HelloRetryRequest message"
				14843
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14844	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14845	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14846	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14847	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14848	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14849	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14850	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14851	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14852	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14853	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14854	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14855	0 \
				14856	-s "Protocol is TLSv1.3" \
				14857	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14858	-s "received signature algorithm: 0x503" \
				14859	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14860	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14861	-c "Protocol is TLSv1.3" \
				14862	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14863	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14864	-c "NamedGroup: x448 ( 1e )" \
				14865	-c "Verifying peer X.509 certificate... ok" \
				14866	-C "received HelloRetryRequest message"
				14867
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14868	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14869	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14870	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14871	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14872	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14873	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14874	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14875	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14876	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14877	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14878	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14879	0 \
				14880	-s "Protocol is TLSv1.3" \
				14881	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14882	-s "received signature algorithm: 0x603" \
				14883	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14884	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14885	-c "Protocol is TLSv1.3" \
				14886	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14887	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14888	-c "NamedGroup: x448 ( 1e )" \
				14889	-c "Verifying peer X.509 certificate... ok" \
				14890	-C "received HelloRetryRequest message"
				14891
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14892	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14893	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14894	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14895	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14896	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14897	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14898	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14899	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14900	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14901	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14902	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	14903	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14904	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14905	0 \
				14906	-s "Protocol is TLSv1.3" \
				14907	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14908	-s "received signature algorithm: 0x804" \
				14909	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	14910	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14911	-c "Protocol is TLSv1.3" \
				14912	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14913	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				14914	-c "NamedGroup: x448 ( 1e )" \
				14915	-c "Verifying peer X.509 certificate... ok" \
				14916	-C "received HelloRetryRequest message"
				14917
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	14918	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14919	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14920	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14921	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14922	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	14923	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	14924	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	14925	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	14926	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				14927	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14928	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				14929	0 \
				14930	-s "Protocol is TLSv1.3" \
				14931	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14932	-s "received signature algorithm: 0x403" \
				14933	-s "got named group: ffdhe2048(0100)" \
				14934	-s "Certificate verification was skipped" \
				14935	-c "Protocol is TLSv1.3" \
				14936	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14937	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				14938	-c "NamedGroup: ffdhe2048 ( 100 )" \
				14939	-c "Verifying peer X.509 certificate... ok" \
				14940	-C "received HelloRetryRequest message"
				14941
				14942	requires_config_enabled MBEDTLS_SSL_SRV_C
				14943	requires_config_enabled MBEDTLS_DEBUG_C
				14944	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14945	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14946	requires_config_enabled MBEDTLS_SSL_CLI_C
				14947	requires_config_enabled MBEDTLS_DEBUG_C
				14948	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14949	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14950	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				14951	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14952	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				14953	0 \
				14954	-s "Protocol is TLSv1.3" \
				14955	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14956	-s "received signature algorithm: 0x503" \
				14957	-s "got named group: ffdhe2048(0100)" \
				14958	-s "Certificate verification was skipped" \
				14959	-c "Protocol is TLSv1.3" \
				14960	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14961	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				14962	-c "NamedGroup: ffdhe2048 ( 100 )" \
				14963	-c "Verifying peer X.509 certificate... ok" \
				14964	-C "received HelloRetryRequest message"
				14965
				14966	requires_config_enabled MBEDTLS_SSL_SRV_C
				14967	requires_config_enabled MBEDTLS_DEBUG_C
				14968	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14969	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14970	requires_config_enabled MBEDTLS_SSL_CLI_C
				14971	requires_config_enabled MBEDTLS_DEBUG_C
				14972	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14973	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14974	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				14975	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				14976	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				14977	0 \
				14978	-s "Protocol is TLSv1.3" \
				14979	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				14980	-s "received signature algorithm: 0x603" \
				14981	-s "got named group: ffdhe2048(0100)" \
				14982	-s "Certificate verification was skipped" \
				14983	-c "Protocol is TLSv1.3" \
				14984	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				14985	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				14986	-c "NamedGroup: ffdhe2048 ( 100 )" \
				14987	-c "Verifying peer X.509 certificate... ok" \
				14988	-C "received HelloRetryRequest message"
				14989
				14990	requires_config_enabled MBEDTLS_SSL_SRV_C
				14991	requires_config_enabled MBEDTLS_DEBUG_C
				14992	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14993	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14994	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				14995	requires_config_enabled MBEDTLS_SSL_CLI_C
				14996	requires_config_enabled MBEDTLS_DEBUG_C
				14997	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				14998	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				14999	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15000	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				15001	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15002	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				15003	0 \
				15004	-s "Protocol is TLSv1.3" \
				15005	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15006	-s "received signature algorithm: 0x804" \
				15007	-s "got named group: ffdhe2048(0100)" \
				15008	-s "Certificate verification was skipped" \
				15009	-c "Protocol is TLSv1.3" \
				15010	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15011	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15012	-c "NamedGroup: ffdhe2048 ( 100 )" \
				15013	-c "Verifying peer X.509 certificate... ok" \
				15014	-C "received HelloRetryRequest message"
				15015
				15016	requires_config_enabled MBEDTLS_SSL_SRV_C
				15017	requires_config_enabled MBEDTLS_DEBUG_C
				15018	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15019	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15020	requires_config_enabled MBEDTLS_SSL_CLI_C
				15021	requires_config_enabled MBEDTLS_DEBUG_C
				15022	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15023	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15024	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				15025	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15026	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				15027	0 \
				15028	-s "Protocol is TLSv1.3" \
				15029	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15030	-s "received signature algorithm: 0x403" \
				15031	-s "got named group: ffdhe3072(0101)" \
				15032	-s "Certificate verification was skipped" \
				15033	-c "Protocol is TLSv1.3" \
				15034	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15035	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15036	-c "NamedGroup: ffdhe3072 ( 101 )" \
				15037	-c "Verifying peer X.509 certificate... ok" \
				15038	-C "received HelloRetryRequest message"
				15039
				15040	requires_config_enabled MBEDTLS_SSL_SRV_C
				15041	requires_config_enabled MBEDTLS_DEBUG_C
				15042	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15043	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15044	requires_config_enabled MBEDTLS_SSL_CLI_C
				15045	requires_config_enabled MBEDTLS_DEBUG_C
				15046	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15047	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15048	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				15049	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15050	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				15051	0 \
				15052	-s "Protocol is TLSv1.3" \
				15053	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15054	-s "received signature algorithm: 0x503" \
				15055	-s "got named group: ffdhe3072(0101)" \
				15056	-s "Certificate verification was skipped" \
				15057	-c "Protocol is TLSv1.3" \
				15058	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15059	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15060	-c "NamedGroup: ffdhe3072 ( 101 )" \
				15061	-c "Verifying peer X.509 certificate... ok" \
				15062	-C "received HelloRetryRequest message"
				15063
				15064	requires_config_enabled MBEDTLS_SSL_SRV_C
				15065	requires_config_enabled MBEDTLS_DEBUG_C
				15066	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15067	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15068	requires_config_enabled MBEDTLS_SSL_CLI_C
				15069	requires_config_enabled MBEDTLS_DEBUG_C
				15070	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15071	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15072	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				15073	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15074	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				15075	0 \
				15076	-s "Protocol is TLSv1.3" \
				15077	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15078	-s "received signature algorithm: 0x603" \
				15079	-s "got named group: ffdhe3072(0101)" \
				15080	-s "Certificate verification was skipped" \
				15081	-c "Protocol is TLSv1.3" \
				15082	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15083	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15084	-c "NamedGroup: ffdhe3072 ( 101 )" \
				15085	-c "Verifying peer X.509 certificate... ok" \
				15086	-C "received HelloRetryRequest message"
				15087
				15088	requires_config_enabled MBEDTLS_SSL_SRV_C
				15089	requires_config_enabled MBEDTLS_DEBUG_C
				15090	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15091	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15092	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15093	requires_config_enabled MBEDTLS_SSL_CLI_C
				15094	requires_config_enabled MBEDTLS_DEBUG_C
				15095	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15096	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15097	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15098	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				15099	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15100	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				15101	0 \
				15102	-s "Protocol is TLSv1.3" \
				15103	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15104	-s "received signature algorithm: 0x804" \
				15105	-s "got named group: ffdhe3072(0101)" \
				15106	-s "Certificate verification was skipped" \
				15107	-c "Protocol is TLSv1.3" \
				15108	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15109	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15110	-c "NamedGroup: ffdhe3072 ( 101 )" \
				15111	-c "Verifying peer X.509 certificate... ok" \
				15112	-C "received HelloRetryRequest message"
				15113
				15114	requires_config_enabled MBEDTLS_SSL_SRV_C
				15115	requires_config_enabled MBEDTLS_DEBUG_C
				15116	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15117	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15118	requires_config_enabled MBEDTLS_SSL_CLI_C
				15119	requires_config_enabled MBEDTLS_DEBUG_C
				15120	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15121	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15122	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				15123	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15124	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				15125	0 \
				15126	-s "Protocol is TLSv1.3" \
				15127	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15128	-s "received signature algorithm: 0x403" \
				15129	-s "got named group: ffdhe4096(0102)" \
				15130	-s "Certificate verification was skipped" \
				15131	-c "Protocol is TLSv1.3" \
				15132	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15133	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15134	-c "NamedGroup: ffdhe4096 ( 102 )" \
				15135	-c "Verifying peer X.509 certificate... ok" \
				15136	-C "received HelloRetryRequest message"
				15137
				15138	requires_config_enabled MBEDTLS_SSL_SRV_C
				15139	requires_config_enabled MBEDTLS_DEBUG_C
				15140	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15141	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15142	requires_config_enabled MBEDTLS_SSL_CLI_C
				15143	requires_config_enabled MBEDTLS_DEBUG_C
				15144	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15145	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15146	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				15147	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15148	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				15149	0 \
				15150	-s "Protocol is TLSv1.3" \
				15151	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15152	-s "received signature algorithm: 0x503" \
				15153	-s "got named group: ffdhe4096(0102)" \
				15154	-s "Certificate verification was skipped" \
				15155	-c "Protocol is TLSv1.3" \
				15156	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15157	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15158	-c "NamedGroup: ffdhe4096 ( 102 )" \
				15159	-c "Verifying peer X.509 certificate... ok" \
				15160	-C "received HelloRetryRequest message"
				15161
				15162	requires_config_enabled MBEDTLS_SSL_SRV_C
				15163	requires_config_enabled MBEDTLS_DEBUG_C
				15164	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15165	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15166	requires_config_enabled MBEDTLS_SSL_CLI_C
				15167	requires_config_enabled MBEDTLS_DEBUG_C
				15168	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15169	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15170	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				15171	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15172	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				15173	0 \
				15174	-s "Protocol is TLSv1.3" \
				15175	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15176	-s "received signature algorithm: 0x603" \
				15177	-s "got named group: ffdhe4096(0102)" \
				15178	-s "Certificate verification was skipped" \
				15179	-c "Protocol is TLSv1.3" \
				15180	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15181	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15182	-c "NamedGroup: ffdhe4096 ( 102 )" \
				15183	-c "Verifying peer X.509 certificate... ok" \
				15184	-C "received HelloRetryRequest message"
				15185
				15186	requires_config_enabled MBEDTLS_SSL_SRV_C
				15187	requires_config_enabled MBEDTLS_DEBUG_C
				15188	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15189	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15190	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15191	requires_config_enabled MBEDTLS_SSL_CLI_C
				15192	requires_config_enabled MBEDTLS_DEBUG_C
				15193	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15194	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15195	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15196	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				15197	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15198	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				15199	0 \
				15200	-s "Protocol is TLSv1.3" \
				15201	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15202	-s "received signature algorithm: 0x804" \
				15203	-s "got named group: ffdhe4096(0102)" \
				15204	-s "Certificate verification was skipped" \
				15205	-c "Protocol is TLSv1.3" \
				15206	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15207	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15208	-c "NamedGroup: ffdhe4096 ( 102 )" \
				15209	-c "Verifying peer X.509 certificate... ok" \
				15210	-C "received HelloRetryRequest message"
				15211
				15212	requires_config_enabled MBEDTLS_SSL_SRV_C
				15213	requires_config_enabled MBEDTLS_DEBUG_C
				15214	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15215	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15216	requires_config_enabled MBEDTLS_SSL_CLI_C
				15217	requires_config_enabled MBEDTLS_DEBUG_C
				15218	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15219	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15220	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				15221	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15222	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				15223	0 \
				15224	-s "Protocol is TLSv1.3" \
				15225	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15226	-s "received signature algorithm: 0x403" \
				15227	-s "got named group: ffdhe6144(0103)" \
				15228	-s "Certificate verification was skipped" \
				15229	-c "Protocol is TLSv1.3" \
				15230	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15231	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15232	-c "NamedGroup: ffdhe6144 ( 103 )" \
				15233	-c "Verifying peer X.509 certificate... ok" \
				15234	-C "received HelloRetryRequest message"
				15235
				15236	requires_config_enabled MBEDTLS_SSL_SRV_C
				15237	requires_config_enabled MBEDTLS_DEBUG_C
				15238	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15239	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15240	requires_config_enabled MBEDTLS_SSL_CLI_C
				15241	requires_config_enabled MBEDTLS_DEBUG_C
				15242	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15243	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15244	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				15245	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15246	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				15247	0 \
				15248	-s "Protocol is TLSv1.3" \
				15249	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15250	-s "received signature algorithm: 0x503" \
				15251	-s "got named group: ffdhe6144(0103)" \
				15252	-s "Certificate verification was skipped" \
				15253	-c "Protocol is TLSv1.3" \
				15254	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15255	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15256	-c "NamedGroup: ffdhe6144 ( 103 )" \
				15257	-c "Verifying peer X.509 certificate... ok" \
				15258	-C "received HelloRetryRequest message"
				15259
				15260	requires_config_enabled MBEDTLS_SSL_SRV_C
				15261	requires_config_enabled MBEDTLS_DEBUG_C
				15262	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15263	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15264	requires_config_enabled MBEDTLS_SSL_CLI_C
				15265	requires_config_enabled MBEDTLS_DEBUG_C
				15266	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15267	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15268	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				15269	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15270	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				15271	0 \
				15272	-s "Protocol is TLSv1.3" \
				15273	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15274	-s "received signature algorithm: 0x603" \
				15275	-s "got named group: ffdhe6144(0103)" \
				15276	-s "Certificate verification was skipped" \
				15277	-c "Protocol is TLSv1.3" \
				15278	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15279	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15280	-c "NamedGroup: ffdhe6144 ( 103 )" \
				15281	-c "Verifying peer X.509 certificate... ok" \
				15282	-C "received HelloRetryRequest message"
				15283
				15284	requires_config_enabled MBEDTLS_SSL_SRV_C
				15285	requires_config_enabled MBEDTLS_DEBUG_C
				15286	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15287	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15288	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15289	requires_config_enabled MBEDTLS_SSL_CLI_C
				15290	requires_config_enabled MBEDTLS_DEBUG_C
				15291	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15292	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15293	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15294	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				15295	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15296	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				15297	0 \
				15298	-s "Protocol is TLSv1.3" \
				15299	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15300	-s "received signature algorithm: 0x804" \
				15301	-s "got named group: ffdhe6144(0103)" \
				15302	-s "Certificate verification was skipped" \
				15303	-c "Protocol is TLSv1.3" \
				15304	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15305	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15306	-c "NamedGroup: ffdhe6144 ( 103 )" \
				15307	-c "Verifying peer X.509 certificate... ok" \
				15308	-C "received HelloRetryRequest message"
				15309
				15310	requires_config_enabled MBEDTLS_SSL_SRV_C
				15311	requires_config_enabled MBEDTLS_DEBUG_C
				15312	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15313	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15314	requires_config_enabled MBEDTLS_SSL_CLI_C
				15315	requires_config_enabled MBEDTLS_DEBUG_C
				15316	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15317	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15318	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				15319	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15320	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				15321	0 \
				15322	-s "Protocol is TLSv1.3" \
				15323	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15324	-s "received signature algorithm: 0x403" \
				15325	-s "got named group: ffdhe8192(0104)" \
				15326	-s "Certificate verification was skipped" \
				15327	-c "Protocol is TLSv1.3" \
				15328	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15329	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15330	-c "NamedGroup: ffdhe8192 ( 104 )" \
				15331	-c "Verifying peer X.509 certificate... ok" \
				15332	-C "received HelloRetryRequest message"
				15333
				15334	requires_config_enabled MBEDTLS_SSL_SRV_C
				15335	requires_config_enabled MBEDTLS_DEBUG_C
				15336	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15337	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15338	requires_config_enabled MBEDTLS_SSL_CLI_C
				15339	requires_config_enabled MBEDTLS_DEBUG_C
				15340	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15341	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15342	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				15343	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15344	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				15345	0 \
				15346	-s "Protocol is TLSv1.3" \
				15347	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15348	-s "received signature algorithm: 0x503" \
				15349	-s "got named group: ffdhe8192(0104)" \
				15350	-s "Certificate verification was skipped" \
				15351	-c "Protocol is TLSv1.3" \
				15352	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15353	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15354	-c "NamedGroup: ffdhe8192 ( 104 )" \
				15355	-c "Verifying peer X.509 certificate... ok" \
				15356	-C "received HelloRetryRequest message"
				15357
				15358	requires_config_enabled MBEDTLS_SSL_SRV_C
				15359	requires_config_enabled MBEDTLS_DEBUG_C
				15360	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15361	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15362	requires_config_enabled MBEDTLS_SSL_CLI_C
				15363	requires_config_enabled MBEDTLS_DEBUG_C
				15364	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15365	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15366	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				15367	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15368	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				15369	0 \
				15370	-s "Protocol is TLSv1.3" \
				15371	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15372	-s "received signature algorithm: 0x603" \
				15373	-s "got named group: ffdhe8192(0104)" \
				15374	-s "Certificate verification was skipped" \
				15375	-c "Protocol is TLSv1.3" \
				15376	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15377	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15378	-c "NamedGroup: ffdhe8192 ( 104 )" \
				15379	-c "Verifying peer X.509 certificate... ok" \
				15380	-C "received HelloRetryRequest message"
				15381
				15382	requires_config_enabled MBEDTLS_SSL_SRV_C
				15383	requires_config_enabled MBEDTLS_DEBUG_C
				15384	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15385	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15386	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15387	requires_config_enabled MBEDTLS_SSL_CLI_C
				15388	requires_config_enabled MBEDTLS_DEBUG_C
				15389	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15390	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15391	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15392	run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				15393	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15394	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				15395	0 \
				15396	-s "Protocol is TLSv1.3" \
				15397	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
				15398	-s "received signature algorithm: 0x804" \
				15399	-s "got named group: ffdhe8192(0104)" \
				15400	-s "Certificate verification was skipped" \
				15401	-c "Protocol is TLSv1.3" \
				15402	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				15403	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15404	-c "NamedGroup: ffdhe8192 ( 104 )" \
				15405	-c "Verifying peer X.509 certificate... ok" \
				15406	-C "received HelloRetryRequest message"
				15407
				15408	requires_config_enabled MBEDTLS_SSL_SRV_C
				15409	requires_config_enabled MBEDTLS_DEBUG_C
				15410	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15411	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15412	requires_config_enabled MBEDTLS_SSL_CLI_C
				15413	requires_config_enabled MBEDTLS_DEBUG_C
				15414	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15415	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15416	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15417	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15418	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15419	0 \
				15420	-s "Protocol is TLSv1.3" \
				15421	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15422	-s "received signature algorithm: 0x403" \
				15423	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15424	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15425	-c "Protocol is TLSv1.3" \
				15426	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15427	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15428	-c "NamedGroup: secp256r1 ( 17 )" \
				15429	-c "Verifying peer X.509 certificate... ok" \
				15430	-C "received HelloRetryRequest message"
				15431
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15432	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15433	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15434	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15435	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15436	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15437	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15438	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15439	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15440	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15441	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15442	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15443	0 \
				15444	-s "Protocol is TLSv1.3" \
				15445	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15446	-s "received signature algorithm: 0x503" \
				15447	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15448	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15449	-c "Protocol is TLSv1.3" \
				15450	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15451	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15452	-c "NamedGroup: secp256r1 ( 17 )" \
				15453	-c "Verifying peer X.509 certificate... ok" \
				15454	-C "received HelloRetryRequest message"
				15455
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15456	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15457	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15458	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15459	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15460	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15461	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15462	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15463	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15464	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15465	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15466	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15467	0 \
				15468	-s "Protocol is TLSv1.3" \
				15469	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15470	-s "received signature algorithm: 0x603" \
				15471	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15472	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15473	-c "Protocol is TLSv1.3" \
				15474	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15475	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15476	-c "NamedGroup: secp256r1 ( 17 )" \
				15477	-c "Verifying peer X.509 certificate... ok" \
				15478	-C "received HelloRetryRequest message"
				15479
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15480	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15481	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15482	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15483	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15484	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15485	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15486	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15487	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15488	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15489	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15490	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15491	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15492	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15493	0 \
				15494	-s "Protocol is TLSv1.3" \
				15495	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15496	-s "received signature algorithm: 0x804" \
				15497	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15498	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15499	-c "Protocol is TLSv1.3" \
				15500	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15501	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15502	-c "NamedGroup: secp256r1 ( 17 )" \
				15503	-c "Verifying peer X.509 certificate... ok" \
				15504	-C "received HelloRetryRequest message"
				15505
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15506	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15507	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15508	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15509	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15510	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15511	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15512	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15513	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15514	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15515	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15516	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15517	0 \
				15518	-s "Protocol is TLSv1.3" \
				15519	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15520	-s "received signature algorithm: 0x403" \
				15521	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15522	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15523	-c "Protocol is TLSv1.3" \
				15524	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15525	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15526	-c "NamedGroup: secp384r1 ( 18 )" \
				15527	-c "Verifying peer X.509 certificate... ok" \
				15528	-C "received HelloRetryRequest message"
				15529
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15530	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15531	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15532	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15533	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15534	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15535	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15536	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15537	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15538	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15539	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15540	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15541	0 \
				15542	-s "Protocol is TLSv1.3" \
				15543	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15544	-s "received signature algorithm: 0x503" \
				15545	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15546	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15547	-c "Protocol is TLSv1.3" \
				15548	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15549	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15550	-c "NamedGroup: secp384r1 ( 18 )" \
				15551	-c "Verifying peer X.509 certificate... ok" \
				15552	-C "received HelloRetryRequest message"
				15553
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15554	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15555	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15556	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15557	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15558	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15559	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15560	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15561	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15562	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15563	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15564	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15565	0 \
				15566	-s "Protocol is TLSv1.3" \
				15567	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15568	-s "received signature algorithm: 0x603" \
				15569	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15570	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15571	-c "Protocol is TLSv1.3" \
				15572	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15573	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15574	-c "NamedGroup: secp384r1 ( 18 )" \
				15575	-c "Verifying peer X.509 certificate... ok" \
				15576	-C "received HelloRetryRequest message"
				15577
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15578	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15579	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15580	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15581	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15582	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15583	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15584	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15585	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15586	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15587	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15588	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15589	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15590	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15591	0 \
				15592	-s "Protocol is TLSv1.3" \
				15593	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15594	-s "received signature algorithm: 0x804" \
				15595	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15596	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15597	-c "Protocol is TLSv1.3" \
				15598	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15599	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15600	-c "NamedGroup: secp384r1 ( 18 )" \
				15601	-c "Verifying peer X.509 certificate... ok" \
				15602	-C "received HelloRetryRequest message"
				15603
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15604	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15605	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15606	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15607	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15608	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15609	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15610	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15611	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15612	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15613	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15614	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15615	0 \
				15616	-s "Protocol is TLSv1.3" \
				15617	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15618	-s "received signature algorithm: 0x403" \
				15619	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15620	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15621	-c "Protocol is TLSv1.3" \
				15622	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15623	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15624	-c "NamedGroup: secp521r1 ( 19 )" \
				15625	-c "Verifying peer X.509 certificate... ok" \
				15626	-C "received HelloRetryRequest message"
				15627
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15628	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15629	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15630	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15631	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15632	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15633	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15634	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15635	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15636	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15637	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15638	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15639	0 \
				15640	-s "Protocol is TLSv1.3" \
				15641	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15642	-s "received signature algorithm: 0x503" \
				15643	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15644	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15645	-c "Protocol is TLSv1.3" \
				15646	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15647	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15648	-c "NamedGroup: secp521r1 ( 19 )" \
				15649	-c "Verifying peer X.509 certificate... ok" \
				15650	-C "received HelloRetryRequest message"
				15651
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15652	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15653	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15654	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15655	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15656	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15657	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15658	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15659	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15660	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15661	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15662	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15663	0 \
				15664	-s "Protocol is TLSv1.3" \
				15665	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15666	-s "received signature algorithm: 0x603" \
				15667	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15668	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15669	-c "Protocol is TLSv1.3" \
				15670	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15671	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15672	-c "NamedGroup: secp521r1 ( 19 )" \
				15673	-c "Verifying peer X.509 certificate... ok" \
				15674	-C "received HelloRetryRequest message"
				15675
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15676	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15677	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15678	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15679	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15680	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15681	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15682	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15683	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15684	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15685	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15686	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15687	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15688	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15689	0 \
				15690	-s "Protocol is TLSv1.3" \
				15691	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15692	-s "received signature algorithm: 0x804" \
				15693	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15694	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15695	-c "Protocol is TLSv1.3" \
				15696	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15697	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15698	-c "NamedGroup: secp521r1 ( 19 )" \
				15699	-c "Verifying peer X.509 certificate... ok" \
				15700	-C "received HelloRetryRequest message"
				15701
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15702	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15703	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15704	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15705	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15706	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15707	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15708	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15709	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15710	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15711	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15712	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15713	0 \
				15714	-s "Protocol is TLSv1.3" \
				15715	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15716	-s "received signature algorithm: 0x403" \
				15717	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15718	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15719	-c "Protocol is TLSv1.3" \
				15720	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15721	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15722	-c "NamedGroup: x25519 ( 1d )" \
				15723	-c "Verifying peer X.509 certificate... ok" \
				15724	-C "received HelloRetryRequest message"
				15725
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15726	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15727	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15728	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15729	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15730	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15731	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15732	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15733	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15734	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15735	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15736	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15737	0 \
				15738	-s "Protocol is TLSv1.3" \
				15739	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15740	-s "received signature algorithm: 0x503" \
				15741	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15742	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15743	-c "Protocol is TLSv1.3" \
				15744	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15745	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15746	-c "NamedGroup: x25519 ( 1d )" \
				15747	-c "Verifying peer X.509 certificate... ok" \
				15748	-C "received HelloRetryRequest message"
				15749
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15750	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15751	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15752	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15753	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15754	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15755	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15756	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15757	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15758	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15759	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15760	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15761	0 \
				15762	-s "Protocol is TLSv1.3" \
				15763	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15764	-s "received signature algorithm: 0x603" \
				15765	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15766	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15767	-c "Protocol is TLSv1.3" \
				15768	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15769	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15770	-c "NamedGroup: x25519 ( 1d )" \
				15771	-c "Verifying peer X.509 certificate... ok" \
				15772	-C "received HelloRetryRequest message"
				15773
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15774	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15775	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15776	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15777	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15778	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15779	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15780	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15781	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15782	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15783	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15784	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15785	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15786	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15787	0 \
				15788	-s "Protocol is TLSv1.3" \
				15789	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15790	-s "received signature algorithm: 0x804" \
				15791	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15792	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15793	-c "Protocol is TLSv1.3" \
				15794	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15795	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15796	-c "NamedGroup: x25519 ( 1d )" \
				15797	-c "Verifying peer X.509 certificate... ok" \
				15798	-C "received HelloRetryRequest message"
				15799
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15800	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15801	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15802	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15803	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15804	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15805	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15806	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15807	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15808	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15809	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15810	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15811	0 \
				15812	-s "Protocol is TLSv1.3" \
				15813	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15814	-s "received signature algorithm: 0x403" \
				15815	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15816	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15817	-c "Protocol is TLSv1.3" \
				15818	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15819	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15820	-c "NamedGroup: x448 ( 1e )" \
				15821	-c "Verifying peer X.509 certificate... ok" \
				15822	-C "received HelloRetryRequest message"
				15823
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15824	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15825	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15826	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15827	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15828	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15829	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15830	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15831	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15832	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15833	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15834	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15835	0 \
				15836	-s "Protocol is TLSv1.3" \
				15837	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15838	-s "received signature algorithm: 0x503" \
				15839	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15840	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15841	-c "Protocol is TLSv1.3" \
				15842	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15843	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15844	-c "NamedGroup: x448 ( 1e )" \
				15845	-c "Verifying peer X.509 certificate... ok" \
				15846	-C "received HelloRetryRequest message"
				15847
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15848	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15849	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15850	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15851	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15852	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15853	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15854	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15855	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15856	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15857	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15858	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15859	0 \
				15860	-s "Protocol is TLSv1.3" \
				15861	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15862	-s "received signature algorithm: 0x603" \
				15863	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15864	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15865	-c "Protocol is TLSv1.3" \
				15866	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15867	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15868	-c "NamedGroup: x448 ( 1e )" \
				15869	-c "Verifying peer X.509 certificate... ok" \
				15870	-C "received HelloRetryRequest message"
				15871
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15872	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15873	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15874	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15875	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15876	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15877	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15878	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15879	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15880	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15881	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15882	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	15883	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15884	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15885	0 \
				15886	-s "Protocol is TLSv1.3" \
				15887	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15888	-s "received signature algorithm: 0x804" \
				15889	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	15890	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15891	-c "Protocol is TLSv1.3" \
				15892	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15893	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15894	-c "NamedGroup: x448 ( 1e )" \
				15895	-c "Verifying peer X.509 certificate... ok" \
				15896	-C "received HelloRetryRequest message"
				15897
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	15898	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15899	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15900	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15901	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15902	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	15903	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	15904	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	15905	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	15906	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
				15907	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15908	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				15909	0 \
				15910	-s "Protocol is TLSv1.3" \
				15911	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15912	-s "received signature algorithm: 0x403" \
				15913	-s "got named group: ffdhe2048(0100)" \
				15914	-s "Certificate verification was skipped" \
				15915	-c "Protocol is TLSv1.3" \
				15916	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15917	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				15918	-c "NamedGroup: ffdhe2048 ( 100 )" \
				15919	-c "Verifying peer X.509 certificate... ok" \
				15920	-C "received HelloRetryRequest message"
				15921
				15922	requires_config_enabled MBEDTLS_SSL_SRV_C
				15923	requires_config_enabled MBEDTLS_DEBUG_C
				15924	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15925	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15926	requires_config_enabled MBEDTLS_SSL_CLI_C
				15927	requires_config_enabled MBEDTLS_DEBUG_C
				15928	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15929	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15930	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
				15931	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15932	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				15933	0 \
				15934	-s "Protocol is TLSv1.3" \
				15935	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15936	-s "received signature algorithm: 0x503" \
				15937	-s "got named group: ffdhe2048(0100)" \
				15938	-s "Certificate verification was skipped" \
				15939	-c "Protocol is TLSv1.3" \
				15940	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15941	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				15942	-c "NamedGroup: ffdhe2048 ( 100 )" \
				15943	-c "Verifying peer X.509 certificate... ok" \
				15944	-C "received HelloRetryRequest message"
				15945
				15946	requires_config_enabled MBEDTLS_SSL_SRV_C
				15947	requires_config_enabled MBEDTLS_DEBUG_C
				15948	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15949	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15950	requires_config_enabled MBEDTLS_SSL_CLI_C
				15951	requires_config_enabled MBEDTLS_DEBUG_C
				15952	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15953	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15954	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
				15955	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15956	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				15957	0 \
				15958	-s "Protocol is TLSv1.3" \
				15959	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15960	-s "received signature algorithm: 0x603" \
				15961	-s "got named group: ffdhe2048(0100)" \
				15962	-s "Certificate verification was skipped" \
				15963	-c "Protocol is TLSv1.3" \
				15964	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15965	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				15966	-c "NamedGroup: ffdhe2048 ( 100 )" \
				15967	-c "Verifying peer X.509 certificate... ok" \
				15968	-C "received HelloRetryRequest message"
				15969
				15970	requires_config_enabled MBEDTLS_SSL_SRV_C
				15971	requires_config_enabled MBEDTLS_DEBUG_C
				15972	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15973	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15974	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15975	requires_config_enabled MBEDTLS_SSL_CLI_C
				15976	requires_config_enabled MBEDTLS_DEBUG_C
				15977	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15978	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				15979	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				15980	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
				15981	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				15982	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				15983	0 \
				15984	-s "Protocol is TLSv1.3" \
				15985	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				15986	-s "received signature algorithm: 0x804" \
				15987	-s "got named group: ffdhe2048(0100)" \
				15988	-s "Certificate verification was skipped" \
				15989	-c "Protocol is TLSv1.3" \
				15990	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				15991	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				15992	-c "NamedGroup: ffdhe2048 ( 100 )" \
				15993	-c "Verifying peer X.509 certificate... ok" \
				15994	-C "received HelloRetryRequest message"
				15995
				15996	requires_config_enabled MBEDTLS_SSL_SRV_C
				15997	requires_config_enabled MBEDTLS_DEBUG_C
				15998	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				15999	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16000	requires_config_enabled MBEDTLS_SSL_CLI_C
				16001	requires_config_enabled MBEDTLS_DEBUG_C
				16002	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16003	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16004	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp256r1_sha256" \
				16005	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16006	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				16007	0 \
				16008	-s "Protocol is TLSv1.3" \
				16009	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16010	-s "received signature algorithm: 0x403" \
				16011	-s "got named group: ffdhe3072(0101)" \
				16012	-s "Certificate verification was skipped" \
				16013	-c "Protocol is TLSv1.3" \
				16014	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16015	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16016	-c "NamedGroup: ffdhe3072 ( 101 )" \
				16017	-c "Verifying peer X.509 certificate... ok" \
				16018	-C "received HelloRetryRequest message"
				16019
				16020	requires_config_enabled MBEDTLS_SSL_SRV_C
				16021	requires_config_enabled MBEDTLS_DEBUG_C
				16022	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16023	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16024	requires_config_enabled MBEDTLS_SSL_CLI_C
				16025	requires_config_enabled MBEDTLS_DEBUG_C
				16026	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16027	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16028	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp384r1_sha384" \
				16029	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16030	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				16031	0 \
				16032	-s "Protocol is TLSv1.3" \
				16033	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16034	-s "received signature algorithm: 0x503" \
				16035	-s "got named group: ffdhe3072(0101)" \
				16036	-s "Certificate verification was skipped" \
				16037	-c "Protocol is TLSv1.3" \
				16038	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16039	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16040	-c "NamedGroup: ffdhe3072 ( 101 )" \
				16041	-c "Verifying peer X.509 certificate... ok" \
				16042	-C "received HelloRetryRequest message"
				16043
				16044	requires_config_enabled MBEDTLS_SSL_SRV_C
				16045	requires_config_enabled MBEDTLS_DEBUG_C
				16046	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16047	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16048	requires_config_enabled MBEDTLS_SSL_CLI_C
				16049	requires_config_enabled MBEDTLS_DEBUG_C
				16050	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16051	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16052	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe3072,ecdsa_secp521r1_sha512" \
				16053	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16054	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				16055	0 \
				16056	-s "Protocol is TLSv1.3" \
				16057	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16058	-s "received signature algorithm: 0x603" \
				16059	-s "got named group: ffdhe3072(0101)" \
				16060	-s "Certificate verification was skipped" \
				16061	-c "Protocol is TLSv1.3" \
				16062	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16063	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16064	-c "NamedGroup: ffdhe3072 ( 101 )" \
				16065	-c "Verifying peer X.509 certificate... ok" \
				16066	-C "received HelloRetryRequest message"
				16067
				16068	requires_config_enabled MBEDTLS_SSL_SRV_C
				16069	requires_config_enabled MBEDTLS_DEBUG_C
				16070	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16071	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16072	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16073	requires_config_enabled MBEDTLS_SSL_CLI_C
				16074	requires_config_enabled MBEDTLS_DEBUG_C
				16075	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16076	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16077	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16078	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe3072,rsa_pss_rsae_sha256" \
				16079	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16080	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				16081	0 \
				16082	-s "Protocol is TLSv1.3" \
				16083	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16084	-s "received signature algorithm: 0x804" \
				16085	-s "got named group: ffdhe3072(0101)" \
				16086	-s "Certificate verification was skipped" \
				16087	-c "Protocol is TLSv1.3" \
				16088	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16089	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16090	-c "NamedGroup: ffdhe3072 ( 101 )" \
				16091	-c "Verifying peer X.509 certificate... ok" \
				16092	-C "received HelloRetryRequest message"
				16093
				16094	requires_config_enabled MBEDTLS_SSL_SRV_C
				16095	requires_config_enabled MBEDTLS_DEBUG_C
				16096	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16097	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16098	requires_config_enabled MBEDTLS_SSL_CLI_C
				16099	requires_config_enabled MBEDTLS_DEBUG_C
				16100	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16101	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16102	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp256r1_sha256" \
				16103	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16104	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				16105	0 \
				16106	-s "Protocol is TLSv1.3" \
				16107	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16108	-s "received signature algorithm: 0x403" \
				16109	-s "got named group: ffdhe4096(0102)" \
				16110	-s "Certificate verification was skipped" \
				16111	-c "Protocol is TLSv1.3" \
				16112	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16113	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16114	-c "NamedGroup: ffdhe4096 ( 102 )" \
				16115	-c "Verifying peer X.509 certificate... ok" \
				16116	-C "received HelloRetryRequest message"
				16117
				16118	requires_config_enabled MBEDTLS_SSL_SRV_C
				16119	requires_config_enabled MBEDTLS_DEBUG_C
				16120	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16121	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16122	requires_config_enabled MBEDTLS_SSL_CLI_C
				16123	requires_config_enabled MBEDTLS_DEBUG_C
				16124	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16125	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16126	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp384r1_sha384" \
				16127	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16128	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				16129	0 \
				16130	-s "Protocol is TLSv1.3" \
				16131	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16132	-s "received signature algorithm: 0x503" \
				16133	-s "got named group: ffdhe4096(0102)" \
				16134	-s "Certificate verification was skipped" \
				16135	-c "Protocol is TLSv1.3" \
				16136	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16137	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16138	-c "NamedGroup: ffdhe4096 ( 102 )" \
				16139	-c "Verifying peer X.509 certificate... ok" \
				16140	-C "received HelloRetryRequest message"
				16141
				16142	requires_config_enabled MBEDTLS_SSL_SRV_C
				16143	requires_config_enabled MBEDTLS_DEBUG_C
				16144	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16145	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16146	requires_config_enabled MBEDTLS_SSL_CLI_C
				16147	requires_config_enabled MBEDTLS_DEBUG_C
				16148	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16149	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16150	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe4096,ecdsa_secp521r1_sha512" \
				16151	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16152	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				16153	0 \
				16154	-s "Protocol is TLSv1.3" \
				16155	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16156	-s "received signature algorithm: 0x603" \
				16157	-s "got named group: ffdhe4096(0102)" \
				16158	-s "Certificate verification was skipped" \
				16159	-c "Protocol is TLSv1.3" \
				16160	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16161	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16162	-c "NamedGroup: ffdhe4096 ( 102 )" \
				16163	-c "Verifying peer X.509 certificate... ok" \
				16164	-C "received HelloRetryRequest message"
				16165
				16166	requires_config_enabled MBEDTLS_SSL_SRV_C
				16167	requires_config_enabled MBEDTLS_DEBUG_C
				16168	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16169	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16170	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16171	requires_config_enabled MBEDTLS_SSL_CLI_C
				16172	requires_config_enabled MBEDTLS_DEBUG_C
				16173	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16174	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16175	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16176	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe4096,rsa_pss_rsae_sha256" \
				16177	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16178	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				16179	0 \
				16180	-s "Protocol is TLSv1.3" \
				16181	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16182	-s "received signature algorithm: 0x804" \
				16183	-s "got named group: ffdhe4096(0102)" \
				16184	-s "Certificate verification was skipped" \
				16185	-c "Protocol is TLSv1.3" \
				16186	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16187	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16188	-c "NamedGroup: ffdhe4096 ( 102 )" \
				16189	-c "Verifying peer X.509 certificate... ok" \
				16190	-C "received HelloRetryRequest message"
				16191
				16192	requires_config_enabled MBEDTLS_SSL_SRV_C
				16193	requires_config_enabled MBEDTLS_DEBUG_C
				16194	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16195	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16196	requires_config_enabled MBEDTLS_SSL_CLI_C
				16197	requires_config_enabled MBEDTLS_DEBUG_C
				16198	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16199	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16200	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp256r1_sha256" \
				16201	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16202	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				16203	0 \
				16204	-s "Protocol is TLSv1.3" \
				16205	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16206	-s "received signature algorithm: 0x403" \
				16207	-s "got named group: ffdhe6144(0103)" \
				16208	-s "Certificate verification was skipped" \
				16209	-c "Protocol is TLSv1.3" \
				16210	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16211	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16212	-c "NamedGroup: ffdhe6144 ( 103 )" \
				16213	-c "Verifying peer X.509 certificate... ok" \
				16214	-C "received HelloRetryRequest message"
				16215
				16216	requires_config_enabled MBEDTLS_SSL_SRV_C
				16217	requires_config_enabled MBEDTLS_DEBUG_C
				16218	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16219	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16220	requires_config_enabled MBEDTLS_SSL_CLI_C
				16221	requires_config_enabled MBEDTLS_DEBUG_C
				16222	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16223	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16224	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp384r1_sha384" \
				16225	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16226	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				16227	0 \
				16228	-s "Protocol is TLSv1.3" \
				16229	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16230	-s "received signature algorithm: 0x503" \
				16231	-s "got named group: ffdhe6144(0103)" \
				16232	-s "Certificate verification was skipped" \
				16233	-c "Protocol is TLSv1.3" \
				16234	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16235	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16236	-c "NamedGroup: ffdhe6144 ( 103 )" \
				16237	-c "Verifying peer X.509 certificate... ok" \
				16238	-C "received HelloRetryRequest message"
				16239
				16240	requires_config_enabled MBEDTLS_SSL_SRV_C
				16241	requires_config_enabled MBEDTLS_DEBUG_C
				16242	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16243	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16244	requires_config_enabled MBEDTLS_SSL_CLI_C
				16245	requires_config_enabled MBEDTLS_DEBUG_C
				16246	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16247	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16248	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe6144,ecdsa_secp521r1_sha512" \
				16249	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16250	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				16251	0 \
				16252	-s "Protocol is TLSv1.3" \
				16253	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16254	-s "received signature algorithm: 0x603" \
				16255	-s "got named group: ffdhe6144(0103)" \
				16256	-s "Certificate verification was skipped" \
				16257	-c "Protocol is TLSv1.3" \
				16258	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16259	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16260	-c "NamedGroup: ffdhe6144 ( 103 )" \
				16261	-c "Verifying peer X.509 certificate... ok" \
				16262	-C "received HelloRetryRequest message"
				16263
				16264	requires_config_enabled MBEDTLS_SSL_SRV_C
				16265	requires_config_enabled MBEDTLS_DEBUG_C
				16266	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16267	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16268	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16269	requires_config_enabled MBEDTLS_SSL_CLI_C
				16270	requires_config_enabled MBEDTLS_DEBUG_C
				16271	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16272	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16273	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16274	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe6144,rsa_pss_rsae_sha256" \
				16275	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16276	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				16277	0 \
				16278	-s "Protocol is TLSv1.3" \
				16279	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16280	-s "received signature algorithm: 0x804" \
				16281	-s "got named group: ffdhe6144(0103)" \
				16282	-s "Certificate verification was skipped" \
				16283	-c "Protocol is TLSv1.3" \
				16284	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16285	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16286	-c "NamedGroup: ffdhe6144 ( 103 )" \
				16287	-c "Verifying peer X.509 certificate... ok" \
				16288	-C "received HelloRetryRequest message"
				16289
				16290	requires_config_enabled MBEDTLS_SSL_SRV_C
				16291	requires_config_enabled MBEDTLS_DEBUG_C
				16292	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16293	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16294	requires_config_enabled MBEDTLS_SSL_CLI_C
				16295	requires_config_enabled MBEDTLS_DEBUG_C
				16296	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16297	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16298	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp256r1_sha256" \
				16299	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16300	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				16301	0 \
				16302	-s "Protocol is TLSv1.3" \
				16303	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16304	-s "received signature algorithm: 0x403" \
				16305	-s "got named group: ffdhe8192(0104)" \
				16306	-s "Certificate verification was skipped" \
				16307	-c "Protocol is TLSv1.3" \
				16308	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16309	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16310	-c "NamedGroup: ffdhe8192 ( 104 )" \
				16311	-c "Verifying peer X.509 certificate... ok" \
				16312	-C "received HelloRetryRequest message"
				16313
				16314	requires_config_enabled MBEDTLS_SSL_SRV_C
				16315	requires_config_enabled MBEDTLS_DEBUG_C
				16316	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16317	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16318	requires_config_enabled MBEDTLS_SSL_CLI_C
				16319	requires_config_enabled MBEDTLS_DEBUG_C
				16320	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16321	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16322	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp384r1_sha384" \
				16323	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16324	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				16325	0 \
				16326	-s "Protocol is TLSv1.3" \
				16327	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16328	-s "received signature algorithm: 0x503" \
				16329	-s "got named group: ffdhe8192(0104)" \
				16330	-s "Certificate verification was skipped" \
				16331	-c "Protocol is TLSv1.3" \
				16332	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16333	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16334	-c "NamedGroup: ffdhe8192 ( 104 )" \
				16335	-c "Verifying peer X.509 certificate... ok" \
				16336	-C "received HelloRetryRequest message"
				16337
				16338	requires_config_enabled MBEDTLS_SSL_SRV_C
				16339	requires_config_enabled MBEDTLS_DEBUG_C
				16340	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16341	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16342	requires_config_enabled MBEDTLS_SSL_CLI_C
				16343	requires_config_enabled MBEDTLS_DEBUG_C
				16344	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16345	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16346	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe8192,ecdsa_secp521r1_sha512" \
				16347	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16348	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				16349	0 \
				16350	-s "Protocol is TLSv1.3" \
				16351	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16352	-s "received signature algorithm: 0x603" \
				16353	-s "got named group: ffdhe8192(0104)" \
				16354	-s "Certificate verification was skipped" \
				16355	-c "Protocol is TLSv1.3" \
				16356	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16357	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16358	-c "NamedGroup: ffdhe8192 ( 104 )" \
				16359	-c "Verifying peer X.509 certificate... ok" \
				16360	-C "received HelloRetryRequest message"
				16361
				16362	requires_config_enabled MBEDTLS_SSL_SRV_C
				16363	requires_config_enabled MBEDTLS_DEBUG_C
				16364	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16365	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16366	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16367	requires_config_enabled MBEDTLS_SSL_CLI_C
				16368	requires_config_enabled MBEDTLS_DEBUG_C
				16369	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16370	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16371	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16372	run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe8192,rsa_pss_rsae_sha256" \
				16373	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16374	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				16375	0 \
				16376	-s "Protocol is TLSv1.3" \
				16377	-s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
				16378	-s "received signature algorithm: 0x804" \
				16379	-s "got named group: ffdhe8192(0104)" \
				16380	-s "Certificate verification was skipped" \
				16381	-c "Protocol is TLSv1.3" \
				16382	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				16383	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16384	-c "NamedGroup: ffdhe8192 ( 104 )" \
				16385	-c "Verifying peer X.509 certificate... ok" \
				16386	-C "received HelloRetryRequest message"
				16387
				16388	requires_config_enabled MBEDTLS_SSL_SRV_C
				16389	requires_config_enabled MBEDTLS_DEBUG_C
				16390	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16391	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16392	requires_config_enabled MBEDTLS_SSL_CLI_C
				16393	requires_config_enabled MBEDTLS_DEBUG_C
				16394	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16395	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16396	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16397	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16398	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16399	0 \
				16400	-s "Protocol is TLSv1.3" \
				16401	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16402	-s "received signature algorithm: 0x403" \
				16403	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16404	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16405	-c "Protocol is TLSv1.3" \
				16406	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16407	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16408	-c "NamedGroup: secp256r1 ( 17 )" \
				16409	-c "Verifying peer X.509 certificate... ok" \
				16410	-C "received HelloRetryRequest message"
				16411
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16412	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16413	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16414	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16415	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16416	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16417	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16418	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16419	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16420	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16421	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16422	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16423	0 \
				16424	-s "Protocol is TLSv1.3" \
				16425	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16426	-s "received signature algorithm: 0x503" \
				16427	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16428	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16429	-c "Protocol is TLSv1.3" \
				16430	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16431	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16432	-c "NamedGroup: secp256r1 ( 17 )" \
				16433	-c "Verifying peer X.509 certificate... ok" \
				16434	-C "received HelloRetryRequest message"
				16435
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16436	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16437	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16438	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16439	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16440	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16441	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16442	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16443	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16444	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16445	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16446	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16447	0 \
				16448	-s "Protocol is TLSv1.3" \
				16449	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16450	-s "received signature algorithm: 0x603" \
				16451	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16452	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16453	-c "Protocol is TLSv1.3" \
				16454	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16455	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16456	-c "NamedGroup: secp256r1 ( 17 )" \
				16457	-c "Verifying peer X.509 certificate... ok" \
				16458	-C "received HelloRetryRequest message"
				16459
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16460	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16461	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16462	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16463	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16464	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16465	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16466	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16467	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16468	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16469	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16470	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16471	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16472	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16473	0 \
				16474	-s "Protocol is TLSv1.3" \
				16475	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16476	-s "received signature algorithm: 0x804" \
				16477	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16478	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16479	-c "Protocol is TLSv1.3" \
				16480	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16481	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16482	-c "NamedGroup: secp256r1 ( 17 )" \
				16483	-c "Verifying peer X.509 certificate... ok" \
				16484	-C "received HelloRetryRequest message"
				16485
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16486	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16487	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16488	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16489	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16490	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16491	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16492	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16493	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16494	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16495	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16496	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16497	0 \
				16498	-s "Protocol is TLSv1.3" \
				16499	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16500	-s "received signature algorithm: 0x403" \
				16501	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16502	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16503	-c "Protocol is TLSv1.3" \
				16504	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16505	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16506	-c "NamedGroup: secp384r1 ( 18 )" \
				16507	-c "Verifying peer X.509 certificate... ok" \
				16508	-C "received HelloRetryRequest message"
				16509
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16510	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16511	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16512	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16513	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16514	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16515	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16516	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16517	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16518	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16519	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16520	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16521	0 \
				16522	-s "Protocol is TLSv1.3" \
				16523	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16524	-s "received signature algorithm: 0x503" \
				16525	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16526	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16527	-c "Protocol is TLSv1.3" \
				16528	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16529	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16530	-c "NamedGroup: secp384r1 ( 18 )" \
				16531	-c "Verifying peer X.509 certificate... ok" \
				16532	-C "received HelloRetryRequest message"
				16533
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16534	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16535	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16536	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16537	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16538	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16539	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16540	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16541	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16542	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16543	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16544	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16545	0 \
				16546	-s "Protocol is TLSv1.3" \
				16547	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16548	-s "received signature algorithm: 0x603" \
				16549	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16550	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16551	-c "Protocol is TLSv1.3" \
				16552	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16553	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16554	-c "NamedGroup: secp384r1 ( 18 )" \
				16555	-c "Verifying peer X.509 certificate... ok" \
				16556	-C "received HelloRetryRequest message"
				16557
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16558	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16559	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16560	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16561	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16562	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16563	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16564	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16565	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16566	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16567	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16568	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16569	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16570	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16571	0 \
				16572	-s "Protocol is TLSv1.3" \
				16573	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16574	-s "received signature algorithm: 0x804" \
				16575	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16576	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16577	-c "Protocol is TLSv1.3" \
				16578	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16579	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16580	-c "NamedGroup: secp384r1 ( 18 )" \
				16581	-c "Verifying peer X.509 certificate... ok" \
				16582	-C "received HelloRetryRequest message"
				16583
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16584	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16585	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16586	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16587	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16588	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16589	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16590	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16591	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16592	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16593	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16594	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16595	0 \
				16596	-s "Protocol is TLSv1.3" \
				16597	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16598	-s "received signature algorithm: 0x403" \
				16599	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16600	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16601	-c "Protocol is TLSv1.3" \
				16602	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16603	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16604	-c "NamedGroup: secp521r1 ( 19 )" \
				16605	-c "Verifying peer X.509 certificate... ok" \
				16606	-C "received HelloRetryRequest message"
				16607
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16608	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16609	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16610	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16611	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16612	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16613	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16614	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16615	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16616	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16617	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16618	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16619	0 \
				16620	-s "Protocol is TLSv1.3" \
				16621	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16622	-s "received signature algorithm: 0x503" \
				16623	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16624	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16625	-c "Protocol is TLSv1.3" \
				16626	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16627	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16628	-c "NamedGroup: secp521r1 ( 19 )" \
				16629	-c "Verifying peer X.509 certificate... ok" \
				16630	-C "received HelloRetryRequest message"
				16631
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16632	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16633	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16634	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16635	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16636	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16637	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16638	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16639	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16640	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16641	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16642	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16643	0 \
				16644	-s "Protocol is TLSv1.3" \
				16645	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16646	-s "received signature algorithm: 0x603" \
				16647	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16648	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16649	-c "Protocol is TLSv1.3" \
				16650	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16651	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16652	-c "NamedGroup: secp521r1 ( 19 )" \
				16653	-c "Verifying peer X.509 certificate... ok" \
				16654	-C "received HelloRetryRequest message"
				16655
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16656	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16657	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16658	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16659	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16660	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16661	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16662	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16663	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16664	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16665	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16666	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16667	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16668	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16669	0 \
				16670	-s "Protocol is TLSv1.3" \
				16671	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16672	-s "received signature algorithm: 0x804" \
				16673	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16674	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16675	-c "Protocol is TLSv1.3" \
				16676	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16677	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16678	-c "NamedGroup: secp521r1 ( 19 )" \
				16679	-c "Verifying peer X.509 certificate... ok" \
				16680	-C "received HelloRetryRequest message"
				16681
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16682	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16683	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16684	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16685	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16686	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16687	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16688	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16689	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16690	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16691	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16692	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16693	0 \
				16694	-s "Protocol is TLSv1.3" \
				16695	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16696	-s "received signature algorithm: 0x403" \
				16697	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16698	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16699	-c "Protocol is TLSv1.3" \
				16700	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16701	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16702	-c "NamedGroup: x25519 ( 1d )" \
				16703	-c "Verifying peer X.509 certificate... ok" \
				16704	-C "received HelloRetryRequest message"
				16705
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16706	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16707	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16708	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16709	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16710	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16711	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16712	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16713	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16714	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16715	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16716	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16717	0 \
				16718	-s "Protocol is TLSv1.3" \
				16719	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16720	-s "received signature algorithm: 0x503" \
				16721	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16722	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16723	-c "Protocol is TLSv1.3" \
				16724	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16725	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16726	-c "NamedGroup: x25519 ( 1d )" \
				16727	-c "Verifying peer X.509 certificate... ok" \
				16728	-C "received HelloRetryRequest message"
				16729
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16730	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16731	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16732	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16733	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16734	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16735	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16736	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16737	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16738	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16739	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16740	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16741	0 \
				16742	-s "Protocol is TLSv1.3" \
				16743	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16744	-s "received signature algorithm: 0x603" \
				16745	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16746	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16747	-c "Protocol is TLSv1.3" \
				16748	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16749	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16750	-c "NamedGroup: x25519 ( 1d )" \
				16751	-c "Verifying peer X.509 certificate... ok" \
				16752	-C "received HelloRetryRequest message"
				16753
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16754	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16755	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16756	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16757	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16758	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16759	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16760	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16761	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16762	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16763	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16764	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16765	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16766	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16767	0 \
				16768	-s "Protocol is TLSv1.3" \
				16769	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16770	-s "received signature algorithm: 0x804" \
				16771	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16772	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16773	-c "Protocol is TLSv1.3" \
				16774	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16775	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16776	-c "NamedGroup: x25519 ( 1d )" \
				16777	-c "Verifying peer X.509 certificate... ok" \
				16778	-C "received HelloRetryRequest message"
				16779
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16780	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16781	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16782	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16783	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16784	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16785	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16786	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16787	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16788	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16789	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16790	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16791	0 \
				16792	-s "Protocol is TLSv1.3" \
				16793	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16794	-s "received signature algorithm: 0x403" \
				16795	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16796	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16797	-c "Protocol is TLSv1.3" \
				16798	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16799	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16800	-c "NamedGroup: x448 ( 1e )" \
				16801	-c "Verifying peer X.509 certificate... ok" \
				16802	-C "received HelloRetryRequest message"
				16803
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16804	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16805	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16806	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16807	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16808	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16809	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16810	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16811	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16812	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16813	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16814	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16815	0 \
				16816	-s "Protocol is TLSv1.3" \
				16817	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16818	-s "received signature algorithm: 0x503" \
				16819	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16820	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16821	-c "Protocol is TLSv1.3" \
				16822	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16823	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16824	-c "NamedGroup: x448 ( 1e )" \
				16825	-c "Verifying peer X.509 certificate... ok" \
				16826	-C "received HelloRetryRequest message"
				16827
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16828	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16829	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16830	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16831	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16832	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16833	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16834	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16835	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16836	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16837	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16838	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16839	0 \
				16840	-s "Protocol is TLSv1.3" \
				16841	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16842	-s "received signature algorithm: 0x603" \
				16843	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16844	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16845	-c "Protocol is TLSv1.3" \
				16846	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16847	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16848	-c "NamedGroup: x448 ( 1e )" \
				16849	-c "Verifying peer X.509 certificate... ok" \
				16850	-C "received HelloRetryRequest message"
				16851
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16852	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16853	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16854	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16855	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16856	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16857	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16858	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16859	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16860	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16861	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16862	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	16863	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16864	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16865	0 \
				16866	-s "Protocol is TLSv1.3" \
				16867	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16868	-s "received signature algorithm: 0x804" \
				16869	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	16870	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16871	-c "Protocol is TLSv1.3" \
				16872	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16873	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16874	-c "NamedGroup: x448 ( 1e )" \
				16875	-c "Verifying peer X.509 certificate... ok" \
				16876	-C "received HelloRetryRequest message"
				16877
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	16878	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16879	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16880	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16881	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16882	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	16883	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	16884	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	16885	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	16886	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				16887	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16888	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				16889	0 \
				16890	-s "Protocol is TLSv1.3" \
				16891	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16892	-s "received signature algorithm: 0x403" \
				16893	-s "got named group: ffdhe2048(0100)" \
				16894	-s "Certificate verification was skipped" \
				16895	-c "Protocol is TLSv1.3" \
				16896	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16897	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16898	-c "NamedGroup: ffdhe2048 ( 100 )" \
				16899	-c "Verifying peer X.509 certificate... ok" \
				16900	-C "received HelloRetryRequest message"
				16901
				16902	requires_config_enabled MBEDTLS_SSL_SRV_C
				16903	requires_config_enabled MBEDTLS_DEBUG_C
				16904	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16905	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16906	requires_config_enabled MBEDTLS_SSL_CLI_C
				16907	requires_config_enabled MBEDTLS_DEBUG_C
				16908	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16909	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16910	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				16911	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16912	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				16913	0 \
				16914	-s "Protocol is TLSv1.3" \
				16915	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16916	-s "received signature algorithm: 0x503" \
				16917	-s "got named group: ffdhe2048(0100)" \
				16918	-s "Certificate verification was skipped" \
				16919	-c "Protocol is TLSv1.3" \
				16920	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16921	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				16922	-c "NamedGroup: ffdhe2048 ( 100 )" \
				16923	-c "Verifying peer X.509 certificate... ok" \
				16924	-C "received HelloRetryRequest message"
				16925
				16926	requires_config_enabled MBEDTLS_SSL_SRV_C
				16927	requires_config_enabled MBEDTLS_DEBUG_C
				16928	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16929	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16930	requires_config_enabled MBEDTLS_SSL_CLI_C
				16931	requires_config_enabled MBEDTLS_DEBUG_C
				16932	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16933	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16934	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				16935	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16936	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				16937	0 \
				16938	-s "Protocol is TLSv1.3" \
				16939	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16940	-s "received signature algorithm: 0x603" \
				16941	-s "got named group: ffdhe2048(0100)" \
				16942	-s "Certificate verification was skipped" \
				16943	-c "Protocol is TLSv1.3" \
				16944	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16945	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				16946	-c "NamedGroup: ffdhe2048 ( 100 )" \
				16947	-c "Verifying peer X.509 certificate... ok" \
				16948	-C "received HelloRetryRequest message"
				16949
				16950	requires_config_enabled MBEDTLS_SSL_SRV_C
				16951	requires_config_enabled MBEDTLS_DEBUG_C
				16952	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16953	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16954	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16955	requires_config_enabled MBEDTLS_SSL_CLI_C
				16956	requires_config_enabled MBEDTLS_DEBUG_C
				16957	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16958	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16959	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				16960	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				16961	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16962	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				16963	0 \
				16964	-s "Protocol is TLSv1.3" \
				16965	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16966	-s "received signature algorithm: 0x804" \
				16967	-s "got named group: ffdhe2048(0100)" \
				16968	-s "Certificate verification was skipped" \
				16969	-c "Protocol is TLSv1.3" \
				16970	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16971	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				16972	-c "NamedGroup: ffdhe2048 ( 100 )" \
				16973	-c "Verifying peer X.509 certificate... ok" \
				16974	-C "received HelloRetryRequest message"
				16975
				16976	requires_config_enabled MBEDTLS_SSL_SRV_C
				16977	requires_config_enabled MBEDTLS_DEBUG_C
				16978	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16979	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16980	requires_config_enabled MBEDTLS_SSL_CLI_C
				16981	requires_config_enabled MBEDTLS_DEBUG_C
				16982	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				16983	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				16984	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				16985	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				16986	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				16987	0 \
				16988	-s "Protocol is TLSv1.3" \
				16989	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				16990	-s "received signature algorithm: 0x403" \
				16991	-s "got named group: ffdhe3072(0101)" \
				16992	-s "Certificate verification was skipped" \
				16993	-c "Protocol is TLSv1.3" \
				16994	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				16995	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				16996	-c "NamedGroup: ffdhe3072 ( 101 )" \
				16997	-c "Verifying peer X.509 certificate... ok" \
				16998	-C "received HelloRetryRequest message"
				16999
				17000	requires_config_enabled MBEDTLS_SSL_SRV_C
				17001	requires_config_enabled MBEDTLS_DEBUG_C
				17002	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17003	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17004	requires_config_enabled MBEDTLS_SSL_CLI_C
				17005	requires_config_enabled MBEDTLS_DEBUG_C
				17006	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17007	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17008	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				17009	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17010	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				17011	0 \
				17012	-s "Protocol is TLSv1.3" \
				17013	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17014	-s "received signature algorithm: 0x503" \
				17015	-s "got named group: ffdhe3072(0101)" \
				17016	-s "Certificate verification was skipped" \
				17017	-c "Protocol is TLSv1.3" \
				17018	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17019	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17020	-c "NamedGroup: ffdhe3072 ( 101 )" \
				17021	-c "Verifying peer X.509 certificate... ok" \
				17022	-C "received HelloRetryRequest message"
				17023
				17024	requires_config_enabled MBEDTLS_SSL_SRV_C
				17025	requires_config_enabled MBEDTLS_DEBUG_C
				17026	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17027	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17028	requires_config_enabled MBEDTLS_SSL_CLI_C
				17029	requires_config_enabled MBEDTLS_DEBUG_C
				17030	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17031	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17032	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				17033	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17034	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				17035	0 \
				17036	-s "Protocol is TLSv1.3" \
				17037	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17038	-s "received signature algorithm: 0x603" \
				17039	-s "got named group: ffdhe3072(0101)" \
				17040	-s "Certificate verification was skipped" \
				17041	-c "Protocol is TLSv1.3" \
				17042	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17043	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17044	-c "NamedGroup: ffdhe3072 ( 101 )" \
				17045	-c "Verifying peer X.509 certificate... ok" \
				17046	-C "received HelloRetryRequest message"
				17047
				17048	requires_config_enabled MBEDTLS_SSL_SRV_C
				17049	requires_config_enabled MBEDTLS_DEBUG_C
				17050	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17051	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17052	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17053	requires_config_enabled MBEDTLS_SSL_CLI_C
				17054	requires_config_enabled MBEDTLS_DEBUG_C
				17055	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17056	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17057	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17058	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				17059	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17060	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				17061	0 \
				17062	-s "Protocol is TLSv1.3" \
				17063	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17064	-s "received signature algorithm: 0x804" \
				17065	-s "got named group: ffdhe3072(0101)" \
				17066	-s "Certificate verification was skipped" \
				17067	-c "Protocol is TLSv1.3" \
				17068	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17069	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17070	-c "NamedGroup: ffdhe3072 ( 101 )" \
				17071	-c "Verifying peer X.509 certificate... ok" \
				17072	-C "received HelloRetryRequest message"
				17073
				17074	requires_config_enabled MBEDTLS_SSL_SRV_C
				17075	requires_config_enabled MBEDTLS_DEBUG_C
				17076	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17077	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17078	requires_config_enabled MBEDTLS_SSL_CLI_C
				17079	requires_config_enabled MBEDTLS_DEBUG_C
				17080	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17081	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17082	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				17083	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17084	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				17085	0 \
				17086	-s "Protocol is TLSv1.3" \
				17087	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17088	-s "received signature algorithm: 0x403" \
				17089	-s "got named group: ffdhe4096(0102)" \
				17090	-s "Certificate verification was skipped" \
				17091	-c "Protocol is TLSv1.3" \
				17092	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17093	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17094	-c "NamedGroup: ffdhe4096 ( 102 )" \
				17095	-c "Verifying peer X.509 certificate... ok" \
				17096	-C "received HelloRetryRequest message"
				17097
				17098	requires_config_enabled MBEDTLS_SSL_SRV_C
				17099	requires_config_enabled MBEDTLS_DEBUG_C
				17100	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17101	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17102	requires_config_enabled MBEDTLS_SSL_CLI_C
				17103	requires_config_enabled MBEDTLS_DEBUG_C
				17104	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17105	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17106	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				17107	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17108	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				17109	0 \
				17110	-s "Protocol is TLSv1.3" \
				17111	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17112	-s "received signature algorithm: 0x503" \
				17113	-s "got named group: ffdhe4096(0102)" \
				17114	-s "Certificate verification was skipped" \
				17115	-c "Protocol is TLSv1.3" \
				17116	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17117	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17118	-c "NamedGroup: ffdhe4096 ( 102 )" \
				17119	-c "Verifying peer X.509 certificate... ok" \
				17120	-C "received HelloRetryRequest message"
				17121
				17122	requires_config_enabled MBEDTLS_SSL_SRV_C
				17123	requires_config_enabled MBEDTLS_DEBUG_C
				17124	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17125	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17126	requires_config_enabled MBEDTLS_SSL_CLI_C
				17127	requires_config_enabled MBEDTLS_DEBUG_C
				17128	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17129	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17130	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				17131	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17132	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				17133	0 \
				17134	-s "Protocol is TLSv1.3" \
				17135	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17136	-s "received signature algorithm: 0x603" \
				17137	-s "got named group: ffdhe4096(0102)" \
				17138	-s "Certificate verification was skipped" \
				17139	-c "Protocol is TLSv1.3" \
				17140	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17141	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17142	-c "NamedGroup: ffdhe4096 ( 102 )" \
				17143	-c "Verifying peer X.509 certificate... ok" \
				17144	-C "received HelloRetryRequest message"
				17145
				17146	requires_config_enabled MBEDTLS_SSL_SRV_C
				17147	requires_config_enabled MBEDTLS_DEBUG_C
				17148	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17149	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17150	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17151	requires_config_enabled MBEDTLS_SSL_CLI_C
				17152	requires_config_enabled MBEDTLS_DEBUG_C
				17153	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17154	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17155	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17156	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				17157	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17158	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				17159	0 \
				17160	-s "Protocol is TLSv1.3" \
				17161	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17162	-s "received signature algorithm: 0x804" \
				17163	-s "got named group: ffdhe4096(0102)" \
				17164	-s "Certificate verification was skipped" \
				17165	-c "Protocol is TLSv1.3" \
				17166	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17167	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17168	-c "NamedGroup: ffdhe4096 ( 102 )" \
				17169	-c "Verifying peer X.509 certificate... ok" \
				17170	-C "received HelloRetryRequest message"
				17171
				17172	requires_config_enabled MBEDTLS_SSL_SRV_C
				17173	requires_config_enabled MBEDTLS_DEBUG_C
				17174	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17175	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17176	requires_config_enabled MBEDTLS_SSL_CLI_C
				17177	requires_config_enabled MBEDTLS_DEBUG_C
				17178	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17179	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17180	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				17181	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17182	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				17183	0 \
				17184	-s "Protocol is TLSv1.3" \
				17185	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17186	-s "received signature algorithm: 0x403" \
				17187	-s "got named group: ffdhe6144(0103)" \
				17188	-s "Certificate verification was skipped" \
				17189	-c "Protocol is TLSv1.3" \
				17190	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17191	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17192	-c "NamedGroup: ffdhe6144 ( 103 )" \
				17193	-c "Verifying peer X.509 certificate... ok" \
				17194	-C "received HelloRetryRequest message"
				17195
				17196	requires_config_enabled MBEDTLS_SSL_SRV_C
				17197	requires_config_enabled MBEDTLS_DEBUG_C
				17198	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17199	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17200	requires_config_enabled MBEDTLS_SSL_CLI_C
				17201	requires_config_enabled MBEDTLS_DEBUG_C
				17202	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17203	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17204	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				17205	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17206	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				17207	0 \
				17208	-s "Protocol is TLSv1.3" \
				17209	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17210	-s "received signature algorithm: 0x503" \
				17211	-s "got named group: ffdhe6144(0103)" \
				17212	-s "Certificate verification was skipped" \
				17213	-c "Protocol is TLSv1.3" \
				17214	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17215	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17216	-c "NamedGroup: ffdhe6144 ( 103 )" \
				17217	-c "Verifying peer X.509 certificate... ok" \
				17218	-C "received HelloRetryRequest message"
				17219
				17220	requires_config_enabled MBEDTLS_SSL_SRV_C
				17221	requires_config_enabled MBEDTLS_DEBUG_C
				17222	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17223	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17224	requires_config_enabled MBEDTLS_SSL_CLI_C
				17225	requires_config_enabled MBEDTLS_DEBUG_C
				17226	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17227	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17228	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				17229	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17230	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				17231	0 \
				17232	-s "Protocol is TLSv1.3" \
				17233	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17234	-s "received signature algorithm: 0x603" \
				17235	-s "got named group: ffdhe6144(0103)" \
				17236	-s "Certificate verification was skipped" \
				17237	-c "Protocol is TLSv1.3" \
				17238	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17239	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17240	-c "NamedGroup: ffdhe6144 ( 103 )" \
				17241	-c "Verifying peer X.509 certificate... ok" \
				17242	-C "received HelloRetryRequest message"
				17243
				17244	requires_config_enabled MBEDTLS_SSL_SRV_C
				17245	requires_config_enabled MBEDTLS_DEBUG_C
				17246	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17247	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17248	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17249	requires_config_enabled MBEDTLS_SSL_CLI_C
				17250	requires_config_enabled MBEDTLS_DEBUG_C
				17251	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17252	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17253	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17254	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				17255	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17256	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				17257	0 \
				17258	-s "Protocol is TLSv1.3" \
				17259	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17260	-s "received signature algorithm: 0x804" \
				17261	-s "got named group: ffdhe6144(0103)" \
				17262	-s "Certificate verification was skipped" \
				17263	-c "Protocol is TLSv1.3" \
				17264	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17265	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17266	-c "NamedGroup: ffdhe6144 ( 103 )" \
				17267	-c "Verifying peer X.509 certificate... ok" \
				17268	-C "received HelloRetryRequest message"
				17269
				17270	requires_config_enabled MBEDTLS_SSL_SRV_C
				17271	requires_config_enabled MBEDTLS_DEBUG_C
				17272	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17273	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17274	requires_config_enabled MBEDTLS_SSL_CLI_C
				17275	requires_config_enabled MBEDTLS_DEBUG_C
				17276	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17277	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17278	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				17279	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17280	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				17281	0 \
				17282	-s "Protocol is TLSv1.3" \
				17283	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17284	-s "received signature algorithm: 0x403" \
				17285	-s "got named group: ffdhe8192(0104)" \
				17286	-s "Certificate verification was skipped" \
				17287	-c "Protocol is TLSv1.3" \
				17288	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17289	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17290	-c "NamedGroup: ffdhe8192 ( 104 )" \
				17291	-c "Verifying peer X.509 certificate... ok" \
				17292	-C "received HelloRetryRequest message"
				17293
				17294	requires_config_enabled MBEDTLS_SSL_SRV_C
				17295	requires_config_enabled MBEDTLS_DEBUG_C
				17296	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17297	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17298	requires_config_enabled MBEDTLS_SSL_CLI_C
				17299	requires_config_enabled MBEDTLS_DEBUG_C
				17300	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17301	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17302	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				17303	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17304	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				17305	0 \
				17306	-s "Protocol is TLSv1.3" \
				17307	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17308	-s "received signature algorithm: 0x503" \
				17309	-s "got named group: ffdhe8192(0104)" \
				17310	-s "Certificate verification was skipped" \
				17311	-c "Protocol is TLSv1.3" \
				17312	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17313	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17314	-c "NamedGroup: ffdhe8192 ( 104 )" \
				17315	-c "Verifying peer X.509 certificate... ok" \
				17316	-C "received HelloRetryRequest message"
				17317
				17318	requires_config_enabled MBEDTLS_SSL_SRV_C
				17319	requires_config_enabled MBEDTLS_DEBUG_C
				17320	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17321	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17322	requires_config_enabled MBEDTLS_SSL_CLI_C
				17323	requires_config_enabled MBEDTLS_DEBUG_C
				17324	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17325	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17326	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				17327	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17328	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				17329	0 \
				17330	-s "Protocol is TLSv1.3" \
				17331	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17332	-s "received signature algorithm: 0x603" \
				17333	-s "got named group: ffdhe8192(0104)" \
				17334	-s "Certificate verification was skipped" \
				17335	-c "Protocol is TLSv1.3" \
				17336	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17337	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17338	-c "NamedGroup: ffdhe8192 ( 104 )" \
				17339	-c "Verifying peer X.509 certificate... ok" \
				17340	-C "received HelloRetryRequest message"
				17341
				17342	requires_config_enabled MBEDTLS_SSL_SRV_C
				17343	requires_config_enabled MBEDTLS_DEBUG_C
				17344	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17345	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17346	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17347	requires_config_enabled MBEDTLS_SSL_CLI_C
				17348	requires_config_enabled MBEDTLS_DEBUG_C
				17349	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17350	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17351	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17352	run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				17353	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17354	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				17355	0 \
				17356	-s "Protocol is TLSv1.3" \
				17357	-s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
				17358	-s "received signature algorithm: 0x804" \
				17359	-s "got named group: ffdhe8192(0104)" \
				17360	-s "Certificate verification was skipped" \
				17361	-c "Protocol is TLSv1.3" \
				17362	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				17363	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17364	-c "NamedGroup: ffdhe8192 ( 104 )" \
				17365	-c "Verifying peer X.509 certificate... ok" \
				17366	-C "received HelloRetryRequest message"
				17367
				17368	requires_config_enabled MBEDTLS_SSL_SRV_C
				17369	requires_config_enabled MBEDTLS_DEBUG_C
				17370	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17371	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17372	requires_config_enabled MBEDTLS_SSL_CLI_C
				17373	requires_config_enabled MBEDTLS_DEBUG_C
				17374	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17375	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17376	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17377	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17378	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17379	0 \
				17380	-s "Protocol is TLSv1.3" \
				17381	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17382	-s "received signature algorithm: 0x403" \
				17383	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17384	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17385	-c "Protocol is TLSv1.3" \
				17386	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17387	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17388	-c "NamedGroup: secp256r1 ( 17 )" \
				17389	-c "Verifying peer X.509 certificate... ok" \
				17390	-C "received HelloRetryRequest message"
				17391
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17392	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17393	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17394	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17395	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17396	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17397	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17398	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17399	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17400	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17401	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17402	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17403	0 \
				17404	-s "Protocol is TLSv1.3" \
				17405	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17406	-s "received signature algorithm: 0x503" \
				17407	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17408	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17409	-c "Protocol is TLSv1.3" \
				17410	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17411	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17412	-c "NamedGroup: secp256r1 ( 17 )" \
				17413	-c "Verifying peer X.509 certificate... ok" \
				17414	-C "received HelloRetryRequest message"
				17415
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17416	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17417	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17418	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17419	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17420	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17421	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17422	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17423	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17424	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17425	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17426	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17427	0 \
				17428	-s "Protocol is TLSv1.3" \
				17429	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17430	-s "received signature algorithm: 0x603" \
				17431	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17432	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17433	-c "Protocol is TLSv1.3" \
				17434	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17435	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17436	-c "NamedGroup: secp256r1 ( 17 )" \
				17437	-c "Verifying peer X.509 certificate... ok" \
				17438	-C "received HelloRetryRequest message"
				17439
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17440	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17441	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17442	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17443	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17444	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17445	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17446	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17447	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17448	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17449	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17450	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17451	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17452	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17453	0 \
				17454	-s "Protocol is TLSv1.3" \
				17455	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17456	-s "received signature algorithm: 0x804" \
				17457	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17458	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17459	-c "Protocol is TLSv1.3" \
				17460	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17461	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17462	-c "NamedGroup: secp256r1 ( 17 )" \
				17463	-c "Verifying peer X.509 certificate... ok" \
				17464	-C "received HelloRetryRequest message"
				17465
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17466	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17467	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17468	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17469	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17470	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17471	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17472	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17473	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17474	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17475	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17476	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17477	0 \
				17478	-s "Protocol is TLSv1.3" \
				17479	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17480	-s "received signature algorithm: 0x403" \
				17481	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17482	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17483	-c "Protocol is TLSv1.3" \
				17484	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17485	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17486	-c "NamedGroup: secp384r1 ( 18 )" \
				17487	-c "Verifying peer X.509 certificate... ok" \
				17488	-C "received HelloRetryRequest message"
				17489
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17490	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17491	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17492	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17493	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17494	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17495	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17496	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17497	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17498	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17499	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17500	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17501	0 \
				17502	-s "Protocol is TLSv1.3" \
				17503	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17504	-s "received signature algorithm: 0x503" \
				17505	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17506	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17507	-c "Protocol is TLSv1.3" \
				17508	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17509	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17510	-c "NamedGroup: secp384r1 ( 18 )" \
				17511	-c "Verifying peer X.509 certificate... ok" \
				17512	-C "received HelloRetryRequest message"
				17513
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17514	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17515	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17516	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17517	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17518	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17519	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17520	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17521	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17522	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17523	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17524	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17525	0 \
				17526	-s "Protocol is TLSv1.3" \
				17527	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17528	-s "received signature algorithm: 0x603" \
				17529	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17530	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17531	-c "Protocol is TLSv1.3" \
				17532	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17533	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17534	-c "NamedGroup: secp384r1 ( 18 )" \
				17535	-c "Verifying peer X.509 certificate... ok" \
				17536	-C "received HelloRetryRequest message"
				17537
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17538	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17539	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17540	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17541	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17542	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17543	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17544	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17545	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17546	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17547	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17548	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17549	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17550	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17551	0 \
				17552	-s "Protocol is TLSv1.3" \
				17553	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17554	-s "received signature algorithm: 0x804" \
				17555	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17556	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17557	-c "Protocol is TLSv1.3" \
				17558	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17559	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17560	-c "NamedGroup: secp384r1 ( 18 )" \
				17561	-c "Verifying peer X.509 certificate... ok" \
				17562	-C "received HelloRetryRequest message"
				17563
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17564	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17565	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17566	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17567	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17568	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17569	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17570	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17571	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17572	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17573	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17574	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17575	0 \
				17576	-s "Protocol is TLSv1.3" \
				17577	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17578	-s "received signature algorithm: 0x403" \
				17579	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17580	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17581	-c "Protocol is TLSv1.3" \
				17582	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17583	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17584	-c "NamedGroup: secp521r1 ( 19 )" \
				17585	-c "Verifying peer X.509 certificate... ok" \
				17586	-C "received HelloRetryRequest message"
				17587
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17588	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17589	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17590	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17591	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17592	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17593	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17594	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17595	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17596	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17597	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17598	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17599	0 \
				17600	-s "Protocol is TLSv1.3" \
				17601	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17602	-s "received signature algorithm: 0x503" \
				17603	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17604	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17605	-c "Protocol is TLSv1.3" \
				17606	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17607	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17608	-c "NamedGroup: secp521r1 ( 19 )" \
				17609	-c "Verifying peer X.509 certificate... ok" \
				17610	-C "received HelloRetryRequest message"
				17611
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17612	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17613	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17614	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17615	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17616	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17617	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17618	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17619	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17620	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17621	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17622	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17623	0 \
				17624	-s "Protocol is TLSv1.3" \
				17625	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17626	-s "received signature algorithm: 0x603" \
				17627	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17628	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17629	-c "Protocol is TLSv1.3" \
				17630	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17631	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17632	-c "NamedGroup: secp521r1 ( 19 )" \
				17633	-c "Verifying peer X.509 certificate... ok" \
				17634	-C "received HelloRetryRequest message"
				17635
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17636	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17637	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17638	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17639	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17640	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17641	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17642	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17643	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17644	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17645	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17646	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17647	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17648	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17649	0 \
				17650	-s "Protocol is TLSv1.3" \
				17651	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17652	-s "received signature algorithm: 0x804" \
				17653	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17654	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17655	-c "Protocol is TLSv1.3" \
				17656	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17657	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17658	-c "NamedGroup: secp521r1 ( 19 )" \
				17659	-c "Verifying peer X.509 certificate... ok" \
				17660	-C "received HelloRetryRequest message"
				17661
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17662	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17663	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17664	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17665	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17666	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17667	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17668	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17669	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17670	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17671	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17672	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17673	0 \
				17674	-s "Protocol is TLSv1.3" \
				17675	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17676	-s "received signature algorithm: 0x403" \
				17677	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17678	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17679	-c "Protocol is TLSv1.3" \
				17680	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17681	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17682	-c "NamedGroup: x25519 ( 1d )" \
				17683	-c "Verifying peer X.509 certificate... ok" \
				17684	-C "received HelloRetryRequest message"
				17685
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17686	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17687	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17688	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17689	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17690	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17691	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17692	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17693	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17694	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17695	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17696	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17697	0 \
				17698	-s "Protocol is TLSv1.3" \
				17699	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17700	-s "received signature algorithm: 0x503" \
				17701	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17702	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17703	-c "Protocol is TLSv1.3" \
				17704	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17705	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17706	-c "NamedGroup: x25519 ( 1d )" \
				17707	-c "Verifying peer X.509 certificate... ok" \
				17708	-C "received HelloRetryRequest message"
				17709
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17710	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17711	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17712	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17713	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17714	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17715	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17716	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17717	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17718	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17719	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17720	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17721	0 \
				17722	-s "Protocol is TLSv1.3" \
				17723	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17724	-s "received signature algorithm: 0x603" \
				17725	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17726	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17727	-c "Protocol is TLSv1.3" \
				17728	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17729	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17730	-c "NamedGroup: x25519 ( 1d )" \
				17731	-c "Verifying peer X.509 certificate... ok" \
				17732	-C "received HelloRetryRequest message"
				17733
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17734	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17735	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17736	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17737	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17738	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17739	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17740	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17741	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17742	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17743	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17744	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17745	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17746	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17747	0 \
				17748	-s "Protocol is TLSv1.3" \
				17749	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17750	-s "received signature algorithm: 0x804" \
				17751	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17752	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17753	-c "Protocol is TLSv1.3" \
				17754	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17755	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17756	-c "NamedGroup: x25519 ( 1d )" \
				17757	-c "Verifying peer X.509 certificate... ok" \
				17758	-C "received HelloRetryRequest message"
				17759
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17760	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17761	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17762	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17763	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17764	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17765	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17766	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17767	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17768	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17769	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17770	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17771	0 \
				17772	-s "Protocol is TLSv1.3" \
				17773	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17774	-s "received signature algorithm: 0x403" \
				17775	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17776	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17777	-c "Protocol is TLSv1.3" \
				17778	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17779	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17780	-c "NamedGroup: x448 ( 1e )" \
				17781	-c "Verifying peer X.509 certificate... ok" \
				17782	-C "received HelloRetryRequest message"
				17783
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17784	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17785	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17786	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17787	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17788	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17789	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17790	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17791	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17792	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17793	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17794	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17795	0 \
				17796	-s "Protocol is TLSv1.3" \
				17797	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17798	-s "received signature algorithm: 0x503" \
				17799	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17800	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17801	-c "Protocol is TLSv1.3" \
				17802	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17803	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17804	-c "NamedGroup: x448 ( 1e )" \
				17805	-c "Verifying peer X.509 certificate... ok" \
				17806	-C "received HelloRetryRequest message"
				17807
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17808	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17809	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17810	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17811	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17812	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17813	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17814	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17815	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17816	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17817	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17818	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17819	0 \
				17820	-s "Protocol is TLSv1.3" \
				17821	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17822	-s "received signature algorithm: 0x603" \
				17823	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17824	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17825	-c "Protocol is TLSv1.3" \
				17826	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17827	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17828	-c "NamedGroup: x448 ( 1e )" \
				17829	-c "Verifying peer X.509 certificate... ok" \
				17830	-C "received HelloRetryRequest message"
				17831
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17832	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17833	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17834	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17835	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17836	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17837	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17838	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17839	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17840	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17841	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17842	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17843	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17844	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17845	0 \
				17846	-s "Protocol is TLSv1.3" \
				17847	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17848	-s "received signature algorithm: 0x804" \
				17849	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	17850	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17851	-c "Protocol is TLSv1.3" \
				17852	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17853	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17854	-c "NamedGroup: x448 ( 1e )" \
				17855	-c "Verifying peer X.509 certificate... ok" \
				17856	-C "received HelloRetryRequest message"
				17857
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	17858	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17859	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17860	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17861	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17862	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	17863	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	17864	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	17865	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	17866	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				17867	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17868	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				17869	0 \
				17870	-s "Protocol is TLSv1.3" \
				17871	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17872	-s "received signature algorithm: 0x403" \
				17873	-s "got named group: ffdhe2048(0100)" \
				17874	-s "Certificate verification was skipped" \
				17875	-c "Protocol is TLSv1.3" \
				17876	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17877	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17878	-c "NamedGroup: ffdhe2048 ( 100 )" \
				17879	-c "Verifying peer X.509 certificate... ok" \
				17880	-C "received HelloRetryRequest message"
				17881
				17882	requires_config_enabled MBEDTLS_SSL_SRV_C
				17883	requires_config_enabled MBEDTLS_DEBUG_C
				17884	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17885	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17886	requires_config_enabled MBEDTLS_SSL_CLI_C
				17887	requires_config_enabled MBEDTLS_DEBUG_C
				17888	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17889	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17890	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				17891	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17892	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				17893	0 \
				17894	-s "Protocol is TLSv1.3" \
				17895	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17896	-s "received signature algorithm: 0x503" \
				17897	-s "got named group: ffdhe2048(0100)" \
				17898	-s "Certificate verification was skipped" \
				17899	-c "Protocol is TLSv1.3" \
				17900	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17901	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				17902	-c "NamedGroup: ffdhe2048 ( 100 )" \
				17903	-c "Verifying peer X.509 certificate... ok" \
				17904	-C "received HelloRetryRequest message"
				17905
				17906	requires_config_enabled MBEDTLS_SSL_SRV_C
				17907	requires_config_enabled MBEDTLS_DEBUG_C
				17908	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17909	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17910	requires_config_enabled MBEDTLS_SSL_CLI_C
				17911	requires_config_enabled MBEDTLS_DEBUG_C
				17912	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17913	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17914	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				17915	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17916	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				17917	0 \
				17918	-s "Protocol is TLSv1.3" \
				17919	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17920	-s "received signature algorithm: 0x603" \
				17921	-s "got named group: ffdhe2048(0100)" \
				17922	-s "Certificate verification was skipped" \
				17923	-c "Protocol is TLSv1.3" \
				17924	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17925	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				17926	-c "NamedGroup: ffdhe2048 ( 100 )" \
				17927	-c "Verifying peer X.509 certificate... ok" \
				17928	-C "received HelloRetryRequest message"
				17929
				17930	requires_config_enabled MBEDTLS_SSL_SRV_C
				17931	requires_config_enabled MBEDTLS_DEBUG_C
				17932	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17933	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17934	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17935	requires_config_enabled MBEDTLS_SSL_CLI_C
				17936	requires_config_enabled MBEDTLS_DEBUG_C
				17937	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17938	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17939	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				17940	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				17941	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17942	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				17943	0 \
				17944	-s "Protocol is TLSv1.3" \
				17945	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17946	-s "received signature algorithm: 0x804" \
				17947	-s "got named group: ffdhe2048(0100)" \
				17948	-s "Certificate verification was skipped" \
				17949	-c "Protocol is TLSv1.3" \
				17950	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17951	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				17952	-c "NamedGroup: ffdhe2048 ( 100 )" \
				17953	-c "Verifying peer X.509 certificate... ok" \
				17954	-C "received HelloRetryRequest message"
				17955
				17956	requires_config_enabled MBEDTLS_SSL_SRV_C
				17957	requires_config_enabled MBEDTLS_DEBUG_C
				17958	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17959	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17960	requires_config_enabled MBEDTLS_SSL_CLI_C
				17961	requires_config_enabled MBEDTLS_DEBUG_C
				17962	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17963	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17964	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				17965	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17966	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				17967	0 \
				17968	-s "Protocol is TLSv1.3" \
				17969	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17970	-s "received signature algorithm: 0x403" \
				17971	-s "got named group: ffdhe3072(0101)" \
				17972	-s "Certificate verification was skipped" \
				17973	-c "Protocol is TLSv1.3" \
				17974	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17975	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				17976	-c "NamedGroup: ffdhe3072 ( 101 )" \
				17977	-c "Verifying peer X.509 certificate... ok" \
				17978	-C "received HelloRetryRequest message"
				17979
				17980	requires_config_enabled MBEDTLS_SSL_SRV_C
				17981	requires_config_enabled MBEDTLS_DEBUG_C
				17982	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17983	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17984	requires_config_enabled MBEDTLS_SSL_CLI_C
				17985	requires_config_enabled MBEDTLS_DEBUG_C
				17986	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				17987	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				17988	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				17989	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				17990	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				17991	0 \
				17992	-s "Protocol is TLSv1.3" \
				17993	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				17994	-s "received signature algorithm: 0x503" \
				17995	-s "got named group: ffdhe3072(0101)" \
				17996	-s "Certificate verification was skipped" \
				17997	-c "Protocol is TLSv1.3" \
				17998	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				17999	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18000	-c "NamedGroup: ffdhe3072 ( 101 )" \
				18001	-c "Verifying peer X.509 certificate... ok" \
				18002	-C "received HelloRetryRequest message"
				18003
				18004	requires_config_enabled MBEDTLS_SSL_SRV_C
				18005	requires_config_enabled MBEDTLS_DEBUG_C
				18006	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18007	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18008	requires_config_enabled MBEDTLS_SSL_CLI_C
				18009	requires_config_enabled MBEDTLS_DEBUG_C
				18010	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18011	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18012	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				18013	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18014	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				18015	0 \
				18016	-s "Protocol is TLSv1.3" \
				18017	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18018	-s "received signature algorithm: 0x603" \
				18019	-s "got named group: ffdhe3072(0101)" \
				18020	-s "Certificate verification was skipped" \
				18021	-c "Protocol is TLSv1.3" \
				18022	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18023	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18024	-c "NamedGroup: ffdhe3072 ( 101 )" \
				18025	-c "Verifying peer X.509 certificate... ok" \
				18026	-C "received HelloRetryRequest message"
				18027
				18028	requires_config_enabled MBEDTLS_SSL_SRV_C
				18029	requires_config_enabled MBEDTLS_DEBUG_C
				18030	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18031	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18032	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18033	requires_config_enabled MBEDTLS_SSL_CLI_C
				18034	requires_config_enabled MBEDTLS_DEBUG_C
				18035	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18036	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18037	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18038	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				18039	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18040	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				18041	0 \
				18042	-s "Protocol is TLSv1.3" \
				18043	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18044	-s "received signature algorithm: 0x804" \
				18045	-s "got named group: ffdhe3072(0101)" \
				18046	-s "Certificate verification was skipped" \
				18047	-c "Protocol is TLSv1.3" \
				18048	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18049	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18050	-c "NamedGroup: ffdhe3072 ( 101 )" \
				18051	-c "Verifying peer X.509 certificate... ok" \
				18052	-C "received HelloRetryRequest message"
				18053
				18054	requires_config_enabled MBEDTLS_SSL_SRV_C
				18055	requires_config_enabled MBEDTLS_DEBUG_C
				18056	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18057	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18058	requires_config_enabled MBEDTLS_SSL_CLI_C
				18059	requires_config_enabled MBEDTLS_DEBUG_C
				18060	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18061	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18062	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				18063	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18064	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				18065	0 \
				18066	-s "Protocol is TLSv1.3" \
				18067	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18068	-s "received signature algorithm: 0x403" \
				18069	-s "got named group: ffdhe4096(0102)" \
				18070	-s "Certificate verification was skipped" \
				18071	-c "Protocol is TLSv1.3" \
				18072	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18073	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18074	-c "NamedGroup: ffdhe4096 ( 102 )" \
				18075	-c "Verifying peer X.509 certificate... ok" \
				18076	-C "received HelloRetryRequest message"
				18077
				18078	requires_config_enabled MBEDTLS_SSL_SRV_C
				18079	requires_config_enabled MBEDTLS_DEBUG_C
				18080	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18081	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18082	requires_config_enabled MBEDTLS_SSL_CLI_C
				18083	requires_config_enabled MBEDTLS_DEBUG_C
				18084	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18085	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18086	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				18087	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18088	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				18089	0 \
				18090	-s "Protocol is TLSv1.3" \
				18091	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18092	-s "received signature algorithm: 0x503" \
				18093	-s "got named group: ffdhe4096(0102)" \
				18094	-s "Certificate verification was skipped" \
				18095	-c "Protocol is TLSv1.3" \
				18096	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18097	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18098	-c "NamedGroup: ffdhe4096 ( 102 )" \
				18099	-c "Verifying peer X.509 certificate... ok" \
				18100	-C "received HelloRetryRequest message"
				18101
				18102	requires_config_enabled MBEDTLS_SSL_SRV_C
				18103	requires_config_enabled MBEDTLS_DEBUG_C
				18104	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18105	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18106	requires_config_enabled MBEDTLS_SSL_CLI_C
				18107	requires_config_enabled MBEDTLS_DEBUG_C
				18108	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18109	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18110	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				18111	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18112	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				18113	0 \
				18114	-s "Protocol is TLSv1.3" \
				18115	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18116	-s "received signature algorithm: 0x603" \
				18117	-s "got named group: ffdhe4096(0102)" \
				18118	-s "Certificate verification was skipped" \
				18119	-c "Protocol is TLSv1.3" \
				18120	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18121	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18122	-c "NamedGroup: ffdhe4096 ( 102 )" \
				18123	-c "Verifying peer X.509 certificate... ok" \
				18124	-C "received HelloRetryRequest message"
				18125
				18126	requires_config_enabled MBEDTLS_SSL_SRV_C
				18127	requires_config_enabled MBEDTLS_DEBUG_C
				18128	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18129	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18130	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18131	requires_config_enabled MBEDTLS_SSL_CLI_C
				18132	requires_config_enabled MBEDTLS_DEBUG_C
				18133	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18134	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18135	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18136	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				18137	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18138	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				18139	0 \
				18140	-s "Protocol is TLSv1.3" \
				18141	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18142	-s "received signature algorithm: 0x804" \
				18143	-s "got named group: ffdhe4096(0102)" \
				18144	-s "Certificate verification was skipped" \
				18145	-c "Protocol is TLSv1.3" \
				18146	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18147	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18148	-c "NamedGroup: ffdhe4096 ( 102 )" \
				18149	-c "Verifying peer X.509 certificate... ok" \
				18150	-C "received HelloRetryRequest message"
				18151
				18152	requires_config_enabled MBEDTLS_SSL_SRV_C
				18153	requires_config_enabled MBEDTLS_DEBUG_C
				18154	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18155	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18156	requires_config_enabled MBEDTLS_SSL_CLI_C
				18157	requires_config_enabled MBEDTLS_DEBUG_C
				18158	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18159	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18160	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				18161	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18162	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				18163	0 \
				18164	-s "Protocol is TLSv1.3" \
				18165	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18166	-s "received signature algorithm: 0x403" \
				18167	-s "got named group: ffdhe6144(0103)" \
				18168	-s "Certificate verification was skipped" \
				18169	-c "Protocol is TLSv1.3" \
				18170	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18171	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18172	-c "NamedGroup: ffdhe6144 ( 103 )" \
				18173	-c "Verifying peer X.509 certificate... ok" \
				18174	-C "received HelloRetryRequest message"
				18175
				18176	requires_config_enabled MBEDTLS_SSL_SRV_C
				18177	requires_config_enabled MBEDTLS_DEBUG_C
				18178	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18179	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18180	requires_config_enabled MBEDTLS_SSL_CLI_C
				18181	requires_config_enabled MBEDTLS_DEBUG_C
				18182	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18183	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18184	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				18185	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18186	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				18187	0 \
				18188	-s "Protocol is TLSv1.3" \
				18189	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18190	-s "received signature algorithm: 0x503" \
				18191	-s "got named group: ffdhe6144(0103)" \
				18192	-s "Certificate verification was skipped" \
				18193	-c "Protocol is TLSv1.3" \
				18194	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18195	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18196	-c "NamedGroup: ffdhe6144 ( 103 )" \
				18197	-c "Verifying peer X.509 certificate... ok" \
				18198	-C "received HelloRetryRequest message"
				18199
				18200	requires_config_enabled MBEDTLS_SSL_SRV_C
				18201	requires_config_enabled MBEDTLS_DEBUG_C
				18202	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18203	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18204	requires_config_enabled MBEDTLS_SSL_CLI_C
				18205	requires_config_enabled MBEDTLS_DEBUG_C
				18206	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18207	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18208	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				18209	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18210	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				18211	0 \
				18212	-s "Protocol is TLSv1.3" \
				18213	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18214	-s "received signature algorithm: 0x603" \
				18215	-s "got named group: ffdhe6144(0103)" \
				18216	-s "Certificate verification was skipped" \
				18217	-c "Protocol is TLSv1.3" \
				18218	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18219	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18220	-c "NamedGroup: ffdhe6144 ( 103 )" \
				18221	-c "Verifying peer X.509 certificate... ok" \
				18222	-C "received HelloRetryRequest message"
				18223
				18224	requires_config_enabled MBEDTLS_SSL_SRV_C
				18225	requires_config_enabled MBEDTLS_DEBUG_C
				18226	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18227	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18228	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18229	requires_config_enabled MBEDTLS_SSL_CLI_C
				18230	requires_config_enabled MBEDTLS_DEBUG_C
				18231	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18232	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18233	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18234	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				18235	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18236	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				18237	0 \
				18238	-s "Protocol is TLSv1.3" \
				18239	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18240	-s "received signature algorithm: 0x804" \
				18241	-s "got named group: ffdhe6144(0103)" \
				18242	-s "Certificate verification was skipped" \
				18243	-c "Protocol is TLSv1.3" \
				18244	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18245	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18246	-c "NamedGroup: ffdhe6144 ( 103 )" \
				18247	-c "Verifying peer X.509 certificate... ok" \
				18248	-C "received HelloRetryRequest message"
				18249
				18250	requires_config_enabled MBEDTLS_SSL_SRV_C
				18251	requires_config_enabled MBEDTLS_DEBUG_C
				18252	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18253	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18254	requires_config_enabled MBEDTLS_SSL_CLI_C
				18255	requires_config_enabled MBEDTLS_DEBUG_C
				18256	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18257	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18258	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				18259	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18260	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				18261	0 \
				18262	-s "Protocol is TLSv1.3" \
				18263	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18264	-s "received signature algorithm: 0x403" \
				18265	-s "got named group: ffdhe8192(0104)" \
				18266	-s "Certificate verification was skipped" \
				18267	-c "Protocol is TLSv1.3" \
				18268	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18269	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18270	-c "NamedGroup: ffdhe8192 ( 104 )" \
				18271	-c "Verifying peer X.509 certificate... ok" \
				18272	-C "received HelloRetryRequest message"
				18273
				18274	requires_config_enabled MBEDTLS_SSL_SRV_C
				18275	requires_config_enabled MBEDTLS_DEBUG_C
				18276	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18277	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18278	requires_config_enabled MBEDTLS_SSL_CLI_C
				18279	requires_config_enabled MBEDTLS_DEBUG_C
				18280	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18281	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18282	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				18283	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18284	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				18285	0 \
				18286	-s "Protocol is TLSv1.3" \
				18287	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18288	-s "received signature algorithm: 0x503" \
				18289	-s "got named group: ffdhe8192(0104)" \
				18290	-s "Certificate verification was skipped" \
				18291	-c "Protocol is TLSv1.3" \
				18292	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18293	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18294	-c "NamedGroup: ffdhe8192 ( 104 )" \
				18295	-c "Verifying peer X.509 certificate... ok" \
				18296	-C "received HelloRetryRequest message"
				18297
				18298	requires_config_enabled MBEDTLS_SSL_SRV_C
				18299	requires_config_enabled MBEDTLS_DEBUG_C
				18300	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18301	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18302	requires_config_enabled MBEDTLS_SSL_CLI_C
				18303	requires_config_enabled MBEDTLS_DEBUG_C
				18304	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18305	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18306	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				18307	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18308	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				18309	0 \
				18310	-s "Protocol is TLSv1.3" \
				18311	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18312	-s "received signature algorithm: 0x603" \
				18313	-s "got named group: ffdhe8192(0104)" \
				18314	-s "Certificate verification was skipped" \
				18315	-c "Protocol is TLSv1.3" \
				18316	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18317	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18318	-c "NamedGroup: ffdhe8192 ( 104 )" \
				18319	-c "Verifying peer X.509 certificate... ok" \
				18320	-C "received HelloRetryRequest message"
				18321
				18322	requires_config_enabled MBEDTLS_SSL_SRV_C
				18323	requires_config_enabled MBEDTLS_DEBUG_C
				18324	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18325	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18326	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18327	requires_config_enabled MBEDTLS_SSL_CLI_C
				18328	requires_config_enabled MBEDTLS_DEBUG_C
				18329	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18330	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18331	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18332	run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				18333	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18334	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				18335	0 \
				18336	-s "Protocol is TLSv1.3" \
				18337	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
				18338	-s "received signature algorithm: 0x804" \
				18339	-s "got named group: ffdhe8192(0104)" \
				18340	-s "Certificate verification was skipped" \
				18341	-c "Protocol is TLSv1.3" \
				18342	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				18343	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18344	-c "NamedGroup: ffdhe8192 ( 104 )" \
				18345	-c "Verifying peer X.509 certificate... ok" \
				18346	-C "received HelloRetryRequest message"
				18347
				18348	requires_config_enabled MBEDTLS_SSL_SRV_C
				18349	requires_config_enabled MBEDTLS_DEBUG_C
				18350	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18351	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18352	requires_config_enabled MBEDTLS_SSL_CLI_C
				18353	requires_config_enabled MBEDTLS_DEBUG_C
				18354	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18355	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18356	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18357	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18358	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18359	0 \
				18360	-s "Protocol is TLSv1.3" \
				18361	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18362	-s "received signature algorithm: 0x403" \
				18363	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18364	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18365	-c "Protocol is TLSv1.3" \
				18366	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18367	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18368	-c "NamedGroup: secp256r1 ( 17 )" \
				18369	-c "Verifying peer X.509 certificate... ok" \
				18370	-C "received HelloRetryRequest message"
				18371
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18372	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18373	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18374	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18375	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18376	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18377	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18378	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18379	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18380	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18381	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18382	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18383	0 \
				18384	-s "Protocol is TLSv1.3" \
				18385	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18386	-s "received signature algorithm: 0x503" \
				18387	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18388	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18389	-c "Protocol is TLSv1.3" \
				18390	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18391	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18392	-c "NamedGroup: secp256r1 ( 17 )" \
				18393	-c "Verifying peer X.509 certificate... ok" \
				18394	-C "received HelloRetryRequest message"
				18395
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18396	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18397	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18398	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18399	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18400	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18401	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18402	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18403	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18404	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18405	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18406	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18407	0 \
				18408	-s "Protocol is TLSv1.3" \
				18409	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18410	-s "received signature algorithm: 0x603" \
				18411	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18412	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18413	-c "Protocol is TLSv1.3" \
				18414	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18415	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18416	-c "NamedGroup: secp256r1 ( 17 )" \
				18417	-c "Verifying peer X.509 certificate... ok" \
				18418	-C "received HelloRetryRequest message"
				18419
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18420	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18421	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18422	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18423	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18424	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18425	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18426	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18427	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18428	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18429	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18430	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18431	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18432	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18433	0 \
				18434	-s "Protocol is TLSv1.3" \
				18435	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18436	-s "received signature algorithm: 0x804" \
				18437	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18438	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18439	-c "Protocol is TLSv1.3" \
				18440	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18441	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18442	-c "NamedGroup: secp256r1 ( 17 )" \
				18443	-c "Verifying peer X.509 certificate... ok" \
				18444	-C "received HelloRetryRequest message"
				18445
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18446	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18447	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18448	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18449	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18450	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18451	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18452	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18453	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18454	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18455	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18456	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18457	0 \
				18458	-s "Protocol is TLSv1.3" \
				18459	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18460	-s "received signature algorithm: 0x403" \
				18461	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18462	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18463	-c "Protocol is TLSv1.3" \
				18464	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18465	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18466	-c "NamedGroup: secp384r1 ( 18 )" \
				18467	-c "Verifying peer X.509 certificate... ok" \
				18468	-C "received HelloRetryRequest message"
				18469
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18470	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18471	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18472	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18473	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18474	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18475	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18476	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18477	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18478	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18479	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18480	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18481	0 \
				18482	-s "Protocol is TLSv1.3" \
				18483	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18484	-s "received signature algorithm: 0x503" \
				18485	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18486	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18487	-c "Protocol is TLSv1.3" \
				18488	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18489	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18490	-c "NamedGroup: secp384r1 ( 18 )" \
				18491	-c "Verifying peer X.509 certificate... ok" \
				18492	-C "received HelloRetryRequest message"
				18493
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18494	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18495	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18496	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18497	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18498	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18499	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18500	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18501	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18502	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18503	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18504	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18505	0 \
				18506	-s "Protocol is TLSv1.3" \
				18507	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18508	-s "received signature algorithm: 0x603" \
				18509	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18510	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18511	-c "Protocol is TLSv1.3" \
				18512	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18513	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18514	-c "NamedGroup: secp384r1 ( 18 )" \
				18515	-c "Verifying peer X.509 certificate... ok" \
				18516	-C "received HelloRetryRequest message"
				18517
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18518	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18519	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18520	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18521	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18522	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18523	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18524	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18525	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18526	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18527	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18528	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18529	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18530	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18531	0 \
				18532	-s "Protocol is TLSv1.3" \
				18533	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18534	-s "received signature algorithm: 0x804" \
				18535	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18536	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18537	-c "Protocol is TLSv1.3" \
				18538	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18539	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18540	-c "NamedGroup: secp384r1 ( 18 )" \
				18541	-c "Verifying peer X.509 certificate... ok" \
				18542	-C "received HelloRetryRequest message"
				18543
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18544	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18545	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18546	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18547	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18548	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18549	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18550	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18551	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18552	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18553	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18554	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18555	0 \
				18556	-s "Protocol is TLSv1.3" \
				18557	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18558	-s "received signature algorithm: 0x403" \
				18559	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18560	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18561	-c "Protocol is TLSv1.3" \
				18562	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18563	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18564	-c "NamedGroup: secp521r1 ( 19 )" \
				18565	-c "Verifying peer X.509 certificate... ok" \
				18566	-C "received HelloRetryRequest message"
				18567
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18568	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18569	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18570	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18571	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18572	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18573	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18574	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18575	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18576	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18577	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18578	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18579	0 \
				18580	-s "Protocol is TLSv1.3" \
				18581	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18582	-s "received signature algorithm: 0x503" \
				18583	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18584	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18585	-c "Protocol is TLSv1.3" \
				18586	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18587	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18588	-c "NamedGroup: secp521r1 ( 19 )" \
				18589	-c "Verifying peer X.509 certificate... ok" \
				18590	-C "received HelloRetryRequest message"
				18591
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18592	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18593	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18594	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18595	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18596	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18597	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18598	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18599	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18600	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18601	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18602	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18603	0 \
				18604	-s "Protocol is TLSv1.3" \
				18605	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18606	-s "received signature algorithm: 0x603" \
				18607	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18608	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18609	-c "Protocol is TLSv1.3" \
				18610	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18611	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18612	-c "NamedGroup: secp521r1 ( 19 )" \
				18613	-c "Verifying peer X.509 certificate... ok" \
				18614	-C "received HelloRetryRequest message"
				18615
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18616	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18617	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18618	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18619	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18620	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18621	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18622	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18623	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18624	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18625	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18626	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18627	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18628	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18629	0 \
				18630	-s "Protocol is TLSv1.3" \
				18631	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18632	-s "received signature algorithm: 0x804" \
				18633	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18634	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18635	-c "Protocol is TLSv1.3" \
				18636	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18637	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18638	-c "NamedGroup: secp521r1 ( 19 )" \
				18639	-c "Verifying peer X.509 certificate... ok" \
				18640	-C "received HelloRetryRequest message"
				18641
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18642	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18643	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18644	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18645	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18646	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18647	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18648	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18649	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18650	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18651	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18652	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18653	0 \
				18654	-s "Protocol is TLSv1.3" \
				18655	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18656	-s "received signature algorithm: 0x403" \
				18657	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18658	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18659	-c "Protocol is TLSv1.3" \
				18660	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18661	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18662	-c "NamedGroup: x25519 ( 1d )" \
				18663	-c "Verifying peer X.509 certificate... ok" \
				18664	-C "received HelloRetryRequest message"
				18665
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18666	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18667	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18668	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18669	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18670	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18671	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18672	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18673	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18674	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18675	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18676	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18677	0 \
				18678	-s "Protocol is TLSv1.3" \
				18679	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18680	-s "received signature algorithm: 0x503" \
				18681	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18682	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18683	-c "Protocol is TLSv1.3" \
				18684	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18685	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18686	-c "NamedGroup: x25519 ( 1d )" \
				18687	-c "Verifying peer X.509 certificate... ok" \
				18688	-C "received HelloRetryRequest message"
				18689
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18690	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18691	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18692	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18693	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18694	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18695	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18696	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18697	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18698	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18699	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18700	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18701	0 \
				18702	-s "Protocol is TLSv1.3" \
				18703	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18704	-s "received signature algorithm: 0x603" \
				18705	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18706	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18707	-c "Protocol is TLSv1.3" \
				18708	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18709	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18710	-c "NamedGroup: x25519 ( 1d )" \
				18711	-c "Verifying peer X.509 certificate... ok" \
				18712	-C "received HelloRetryRequest message"
				18713
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18714	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18715	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18716	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18717	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18718	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18719	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18720	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18721	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18722	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18723	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18724	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18725	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18726	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18727	0 \
				18728	-s "Protocol is TLSv1.3" \
				18729	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18730	-s "received signature algorithm: 0x804" \
				18731	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18732	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18733	-c "Protocol is TLSv1.3" \
				18734	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18735	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18736	-c "NamedGroup: x25519 ( 1d )" \
				18737	-c "Verifying peer X.509 certificate... ok" \
				18738	-C "received HelloRetryRequest message"
				18739
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18740	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18741	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18742	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18743	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18744	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18745	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18746	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18747	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18748	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18749	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18750	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18751	0 \
				18752	-s "Protocol is TLSv1.3" \
				18753	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18754	-s "received signature algorithm: 0x403" \
				18755	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18756	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18757	-c "Protocol is TLSv1.3" \
				18758	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18759	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18760	-c "NamedGroup: x448 ( 1e )" \
				18761	-c "Verifying peer X.509 certificate... ok" \
				18762	-C "received HelloRetryRequest message"
				18763
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18764	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18765	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18766	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18767	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18768	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18769	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18770	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18771	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18772	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18773	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18774	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18775	0 \
				18776	-s "Protocol is TLSv1.3" \
				18777	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18778	-s "received signature algorithm: 0x503" \
				18779	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18780	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18781	-c "Protocol is TLSv1.3" \
				18782	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18783	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18784	-c "NamedGroup: x448 ( 1e )" \
				18785	-c "Verifying peer X.509 certificate... ok" \
				18786	-C "received HelloRetryRequest message"
				18787
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18788	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18789	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18790	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18791	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18792	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18793	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18794	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18795	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18796	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18797	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18798	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18799	0 \
				18800	-s "Protocol is TLSv1.3" \
				18801	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18802	-s "received signature algorithm: 0x603" \
				18803	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18804	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18805	-c "Protocol is TLSv1.3" \
				18806	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18807	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18808	-c "NamedGroup: x448 ( 1e )" \
				18809	-c "Verifying peer X.509 certificate... ok" \
				18810	-C "received HelloRetryRequest message"
				18811
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	18812	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18813	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18814	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18815	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18816	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18817	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18818	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18819	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18820	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18821	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18822	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	18823	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18824	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18825	0 \
				18826	-s "Protocol is TLSv1.3" \
				18827	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18828	-s "received signature algorithm: 0x804" \
				18829	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	18830	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	18831	-c "Protocol is TLSv1.3" \
				18832	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18833	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18834	-c "NamedGroup: x448 ( 1e )" \
				18835	-c "Verifying peer X.509 certificate... ok" \
				18836	-C "received HelloRetryRequest message"
				18837
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18838	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	18839	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	18840	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	18841	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	18842	requires_config_enabled MBEDTLS_SSL_CLI_C
				18843	requires_config_enabled MBEDTLS_DEBUG_C
				18844	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18845	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18846	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
				18847	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18848	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048" \
				18849	0 \
				18850	-s "Protocol is TLSv1.3" \
				18851	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18852	-s "received signature algorithm: 0x403" \
				18853	-s "got named group: ffdhe2048(0100)" \
				18854	-s "Certificate verification was skipped" \
				18855	-c "Protocol is TLSv1.3" \
				18856	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18857	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18858	-c "NamedGroup: ffdhe2048 ( 100 )" \
				18859	-c "Verifying peer X.509 certificate... ok" \
				18860	-C "received HelloRetryRequest message"
				18861
				18862	requires_config_enabled MBEDTLS_SSL_SRV_C
				18863	requires_config_enabled MBEDTLS_DEBUG_C
				18864	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18865	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18866	requires_config_enabled MBEDTLS_SSL_CLI_C
				18867	requires_config_enabled MBEDTLS_DEBUG_C
				18868	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18869	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18870	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
				18871	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18872	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe2048" \
				18873	0 \
				18874	-s "Protocol is TLSv1.3" \
				18875	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18876	-s "received signature algorithm: 0x503" \
				18877	-s "got named group: ffdhe2048(0100)" \
				18878	-s "Certificate verification was skipped" \
				18879	-c "Protocol is TLSv1.3" \
				18880	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18881	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18882	-c "NamedGroup: ffdhe2048 ( 100 )" \
				18883	-c "Verifying peer X.509 certificate... ok" \
				18884	-C "received HelloRetryRequest message"
				18885
				18886	requires_config_enabled MBEDTLS_SSL_SRV_C
				18887	requires_config_enabled MBEDTLS_DEBUG_C
				18888	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18889	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18890	requires_config_enabled MBEDTLS_SSL_CLI_C
				18891	requires_config_enabled MBEDTLS_DEBUG_C
				18892	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18893	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18894	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
				18895	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18896	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe2048" \
				18897	0 \
				18898	-s "Protocol is TLSv1.3" \
				18899	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18900	-s "received signature algorithm: 0x603" \
				18901	-s "got named group: ffdhe2048(0100)" \
				18902	-s "Certificate verification was skipped" \
				18903	-c "Protocol is TLSv1.3" \
				18904	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18905	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				18906	-c "NamedGroup: ffdhe2048 ( 100 )" \
				18907	-c "Verifying peer X.509 certificate... ok" \
				18908	-C "received HelloRetryRequest message"
				18909
				18910	requires_config_enabled MBEDTLS_SSL_SRV_C
				18911	requires_config_enabled MBEDTLS_DEBUG_C
				18912	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18913	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18914	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18915	requires_config_enabled MBEDTLS_SSL_CLI_C
				18916	requires_config_enabled MBEDTLS_DEBUG_C
				18917	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18918	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18919	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				18920	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
				18921	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18922	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe2048" \
				18923	0 \
				18924	-s "Protocol is TLSv1.3" \
				18925	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18926	-s "received signature algorithm: 0x804" \
				18927	-s "got named group: ffdhe2048(0100)" \
				18928	-s "Certificate verification was skipped" \
				18929	-c "Protocol is TLSv1.3" \
				18930	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18931	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				18932	-c "NamedGroup: ffdhe2048 ( 100 )" \
				18933	-c "Verifying peer X.509 certificate... ok" \
				18934	-C "received HelloRetryRequest message"
				18935
				18936	requires_config_enabled MBEDTLS_SSL_SRV_C
				18937	requires_config_enabled MBEDTLS_DEBUG_C
				18938	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18939	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18940	requires_config_enabled MBEDTLS_SSL_CLI_C
				18941	requires_config_enabled MBEDTLS_DEBUG_C
				18942	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18943	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18944	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp256r1_sha256" \
				18945	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18946	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072" \
				18947	0 \
				18948	-s "Protocol is TLSv1.3" \
				18949	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18950	-s "received signature algorithm: 0x403" \
				18951	-s "got named group: ffdhe3072(0101)" \
				18952	-s "Certificate verification was skipped" \
				18953	-c "Protocol is TLSv1.3" \
				18954	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18955	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				18956	-c "NamedGroup: ffdhe3072 ( 101 )" \
				18957	-c "Verifying peer X.509 certificate... ok" \
				18958	-C "received HelloRetryRequest message"
				18959
				18960	requires_config_enabled MBEDTLS_SSL_SRV_C
				18961	requires_config_enabled MBEDTLS_DEBUG_C
				18962	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18963	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18964	requires_config_enabled MBEDTLS_SSL_CLI_C
				18965	requires_config_enabled MBEDTLS_DEBUG_C
				18966	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18967	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18968	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp384r1_sha384" \
				18969	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18970	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe3072" \
				18971	0 \
				18972	-s "Protocol is TLSv1.3" \
				18973	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18974	-s "received signature algorithm: 0x503" \
				18975	-s "got named group: ffdhe3072(0101)" \
				18976	-s "Certificate verification was skipped" \
				18977	-c "Protocol is TLSv1.3" \
				18978	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				18979	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				18980	-c "NamedGroup: ffdhe3072 ( 101 )" \
				18981	-c "Verifying peer X.509 certificate... ok" \
				18982	-C "received HelloRetryRequest message"
				18983
				18984	requires_config_enabled MBEDTLS_SSL_SRV_C
				18985	requires_config_enabled MBEDTLS_DEBUG_C
				18986	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18987	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18988	requires_config_enabled MBEDTLS_SSL_CLI_C
				18989	requires_config_enabled MBEDTLS_DEBUG_C
				18990	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				18991	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				18992	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe3072,ecdsa_secp521r1_sha512" \
				18993	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				18994	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe3072" \
				18995	0 \
				18996	-s "Protocol is TLSv1.3" \
				18997	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				18998	-s "received signature algorithm: 0x603" \
				18999	-s "got named group: ffdhe3072(0101)" \
				19000	-s "Certificate verification was skipped" \
				19001	-c "Protocol is TLSv1.3" \
				19002	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19003	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				19004	-c "NamedGroup: ffdhe3072 ( 101 )" \
				19005	-c "Verifying peer X.509 certificate... ok" \
				19006	-C "received HelloRetryRequest message"
				19007
				19008	requires_config_enabled MBEDTLS_SSL_SRV_C
				19009	requires_config_enabled MBEDTLS_DEBUG_C
				19010	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19011	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19012	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				19013	requires_config_enabled MBEDTLS_SSL_CLI_C
				19014	requires_config_enabled MBEDTLS_DEBUG_C
				19015	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19016	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19017	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				19018	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
				19019	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19020	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe3072" \
				19021	0 \
				19022	-s "Protocol is TLSv1.3" \
				19023	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19024	-s "received signature algorithm: 0x804" \
				19025	-s "got named group: ffdhe3072(0101)" \
				19026	-s "Certificate verification was skipped" \
				19027	-c "Protocol is TLSv1.3" \
				19028	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19029	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				19030	-c "NamedGroup: ffdhe3072 ( 101 )" \
				19031	-c "Verifying peer X.509 certificate... ok" \
				19032	-C "received HelloRetryRequest message"
				19033
				19034	requires_config_enabled MBEDTLS_SSL_SRV_C
				19035	requires_config_enabled MBEDTLS_DEBUG_C
				19036	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19037	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19038	requires_config_enabled MBEDTLS_SSL_CLI_C
				19039	requires_config_enabled MBEDTLS_DEBUG_C
				19040	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19041	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19042	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp256r1_sha256" \
				19043	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19044	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096" \
				19045	0 \
				19046	-s "Protocol is TLSv1.3" \
				19047	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19048	-s "received signature algorithm: 0x403" \
				19049	-s "got named group: ffdhe4096(0102)" \
				19050	-s "Certificate verification was skipped" \
				19051	-c "Protocol is TLSv1.3" \
				19052	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19053	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				19054	-c "NamedGroup: ffdhe4096 ( 102 )" \
				19055	-c "Verifying peer X.509 certificate... ok" \
				19056	-C "received HelloRetryRequest message"
				19057
				19058	requires_config_enabled MBEDTLS_SSL_SRV_C
				19059	requires_config_enabled MBEDTLS_DEBUG_C
				19060	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19061	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19062	requires_config_enabled MBEDTLS_SSL_CLI_C
				19063	requires_config_enabled MBEDTLS_DEBUG_C
				19064	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19065	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19066	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp384r1_sha384" \
				19067	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19068	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe4096" \
				19069	0 \
				19070	-s "Protocol is TLSv1.3" \
				19071	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19072	-s "received signature algorithm: 0x503" \
				19073	-s "got named group: ffdhe4096(0102)" \
				19074	-s "Certificate verification was skipped" \
				19075	-c "Protocol is TLSv1.3" \
				19076	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19077	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				19078	-c "NamedGroup: ffdhe4096 ( 102 )" \
				19079	-c "Verifying peer X.509 certificate... ok" \
				19080	-C "received HelloRetryRequest message"
				19081
				19082	requires_config_enabled MBEDTLS_SSL_SRV_C
				19083	requires_config_enabled MBEDTLS_DEBUG_C
				19084	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19085	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19086	requires_config_enabled MBEDTLS_SSL_CLI_C
				19087	requires_config_enabled MBEDTLS_DEBUG_C
				19088	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19089	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19090	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe4096,ecdsa_secp521r1_sha512" \
				19091	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19092	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe4096" \
				19093	0 \
				19094	-s "Protocol is TLSv1.3" \
				19095	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19096	-s "received signature algorithm: 0x603" \
				19097	-s "got named group: ffdhe4096(0102)" \
				19098	-s "Certificate verification was skipped" \
				19099	-c "Protocol is TLSv1.3" \
				19100	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19101	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				19102	-c "NamedGroup: ffdhe4096 ( 102 )" \
				19103	-c "Verifying peer X.509 certificate... ok" \
				19104	-C "received HelloRetryRequest message"
				19105
				19106	requires_config_enabled MBEDTLS_SSL_SRV_C
				19107	requires_config_enabled MBEDTLS_DEBUG_C
				19108	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19109	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19110	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				19111	requires_config_enabled MBEDTLS_SSL_CLI_C
				19112	requires_config_enabled MBEDTLS_DEBUG_C
				19113	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19114	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19115	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				19116	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
				19117	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19118	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe4096" \
				19119	0 \
				19120	-s "Protocol is TLSv1.3" \
				19121	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19122	-s "received signature algorithm: 0x804" \
				19123	-s "got named group: ffdhe4096(0102)" \
				19124	-s "Certificate verification was skipped" \
				19125	-c "Protocol is TLSv1.3" \
				19126	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19127	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				19128	-c "NamedGroup: ffdhe4096 ( 102 )" \
				19129	-c "Verifying peer X.509 certificate... ok" \
				19130	-C "received HelloRetryRequest message"
				19131
				19132	requires_config_enabled MBEDTLS_SSL_SRV_C
				19133	requires_config_enabled MBEDTLS_DEBUG_C
				19134	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19135	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19136	requires_config_enabled MBEDTLS_SSL_CLI_C
				19137	requires_config_enabled MBEDTLS_DEBUG_C
				19138	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19139	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19140	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp256r1_sha256" \
				19141	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19142	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144" \
				19143	0 \
				19144	-s "Protocol is TLSv1.3" \
				19145	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19146	-s "received signature algorithm: 0x403" \
				19147	-s "got named group: ffdhe6144(0103)" \
				19148	-s "Certificate verification was skipped" \
				19149	-c "Protocol is TLSv1.3" \
				19150	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19151	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				19152	-c "NamedGroup: ffdhe6144 ( 103 )" \
				19153	-c "Verifying peer X.509 certificate... ok" \
				19154	-C "received HelloRetryRequest message"
				19155
				19156	requires_config_enabled MBEDTLS_SSL_SRV_C
				19157	requires_config_enabled MBEDTLS_DEBUG_C
				19158	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19159	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19160	requires_config_enabled MBEDTLS_SSL_CLI_C
				19161	requires_config_enabled MBEDTLS_DEBUG_C
				19162	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19163	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19164	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp384r1_sha384" \
				19165	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19166	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe6144" \
				19167	0 \
				19168	-s "Protocol is TLSv1.3" \
				19169	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19170	-s "received signature algorithm: 0x503" \
				19171	-s "got named group: ffdhe6144(0103)" \
				19172	-s "Certificate verification was skipped" \
				19173	-c "Protocol is TLSv1.3" \
				19174	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19175	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				19176	-c "NamedGroup: ffdhe6144 ( 103 )" \
				19177	-c "Verifying peer X.509 certificate... ok" \
				19178	-C "received HelloRetryRequest message"
				19179
				19180	requires_config_enabled MBEDTLS_SSL_SRV_C
				19181	requires_config_enabled MBEDTLS_DEBUG_C
				19182	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19183	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19184	requires_config_enabled MBEDTLS_SSL_CLI_C
				19185	requires_config_enabled MBEDTLS_DEBUG_C
				19186	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19187	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19188	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe6144,ecdsa_secp521r1_sha512" \
				19189	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19190	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe6144" \
				19191	0 \
				19192	-s "Protocol is TLSv1.3" \
				19193	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19194	-s "received signature algorithm: 0x603" \
				19195	-s "got named group: ffdhe6144(0103)" \
				19196	-s "Certificate verification was skipped" \
				19197	-c "Protocol is TLSv1.3" \
				19198	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19199	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				19200	-c "NamedGroup: ffdhe6144 ( 103 )" \
				19201	-c "Verifying peer X.509 certificate... ok" \
				19202	-C "received HelloRetryRequest message"
				19203
				19204	requires_config_enabled MBEDTLS_SSL_SRV_C
				19205	requires_config_enabled MBEDTLS_DEBUG_C
				19206	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19207	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19208	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				19209	requires_config_enabled MBEDTLS_SSL_CLI_C
				19210	requires_config_enabled MBEDTLS_DEBUG_C
				19211	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19212	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19213	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				19214	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
				19215	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19216	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe6144" \
				19217	0 \
				19218	-s "Protocol is TLSv1.3" \
				19219	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19220	-s "received signature algorithm: 0x804" \
				19221	-s "got named group: ffdhe6144(0103)" \
				19222	-s "Certificate verification was skipped" \
				19223	-c "Protocol is TLSv1.3" \
				19224	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19225	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				19226	-c "NamedGroup: ffdhe6144 ( 103 )" \
				19227	-c "Verifying peer X.509 certificate... ok" \
				19228	-C "received HelloRetryRequest message"
				19229
				19230	requires_config_enabled MBEDTLS_SSL_SRV_C
				19231	requires_config_enabled MBEDTLS_DEBUG_C
				19232	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19233	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19234	requires_config_enabled MBEDTLS_SSL_CLI_C
				19235	requires_config_enabled MBEDTLS_DEBUG_C
				19236	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19237	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19238	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp256r1_sha256" \
				19239	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19240	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192" \
				19241	0 \
				19242	-s "Protocol is TLSv1.3" \
				19243	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19244	-s "received signature algorithm: 0x403" \
				19245	-s "got named group: ffdhe8192(0104)" \
				19246	-s "Certificate verification was skipped" \
				19247	-c "Protocol is TLSv1.3" \
				19248	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19249	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				19250	-c "NamedGroup: ffdhe8192 ( 104 )" \
				19251	-c "Verifying peer X.509 certificate... ok" \
				19252	-C "received HelloRetryRequest message"
				19253
				19254	requires_config_enabled MBEDTLS_SSL_SRV_C
				19255	requires_config_enabled MBEDTLS_DEBUG_C
				19256	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19257	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19258	requires_config_enabled MBEDTLS_SSL_CLI_C
				19259	requires_config_enabled MBEDTLS_DEBUG_C
				19260	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19261	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19262	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp384r1_sha384" \
				19263	"$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19264	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=ffdhe8192" \
				19265	0 \
				19266	-s "Protocol is TLSv1.3" \
				19267	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19268	-s "received signature algorithm: 0x503" \
				19269	-s "got named group: ffdhe8192(0104)" \
				19270	-s "Certificate verification was skipped" \
				19271	-c "Protocol is TLSv1.3" \
				19272	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19273	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				19274	-c "NamedGroup: ffdhe8192 ( 104 )" \
				19275	-c "Verifying peer X.509 certificate... ok" \
				19276	-C "received HelloRetryRequest message"
				19277
				19278	requires_config_enabled MBEDTLS_SSL_SRV_C
				19279	requires_config_enabled MBEDTLS_DEBUG_C
				19280	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19281	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19282	requires_config_enabled MBEDTLS_SSL_CLI_C
				19283	requires_config_enabled MBEDTLS_DEBUG_C
				19284	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19285	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19286	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe8192,ecdsa_secp521r1_sha512" \
				19287	"$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19288	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=ffdhe8192" \
				19289	0 \
				19290	-s "Protocol is TLSv1.3" \
				19291	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19292	-s "received signature algorithm: 0x603" \
				19293	-s "got named group: ffdhe8192(0104)" \
				19294	-s "Certificate verification was skipped" \
				19295	-c "Protocol is TLSv1.3" \
				19296	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19297	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				19298	-c "NamedGroup: ffdhe8192 ( 104 )" \
				19299	-c "Verifying peer X.509 certificate... ok" \
				19300	-C "received HelloRetryRequest message"
				19301
				19302	requires_config_enabled MBEDTLS_SSL_SRV_C
				19303	requires_config_enabled MBEDTLS_DEBUG_C
				19304	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19305	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19306	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				19307	requires_config_enabled MBEDTLS_SSL_CLI_C
				19308	requires_config_enabled MBEDTLS_DEBUG_C
				19309	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19310	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19311	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
				19312	run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
				19313	"$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19314	"$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=ffdhe8192" \
				19315	0 \
				19316	-s "Protocol is TLSv1.3" \
				19317	-s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
				19318	-s "received signature algorithm: 0x804" \
				19319	-s "got named group: ffdhe8192(0104)" \
				19320	-s "Certificate verification was skipped" \
				19321	-c "Protocol is TLSv1.3" \
				19322	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				19323	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				19324	-c "NamedGroup: ffdhe8192 ( 104 )" \
				19325	-c "Verifying peer X.509 certificate... ok" \
				19326	-C "received HelloRetryRequest message"
				19327
				19328	requires_config_enabled MBEDTLS_SSL_SRV_C
				19329	requires_config_enabled MBEDTLS_DEBUG_C
				19330	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19331	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19332	requires_openssl_tls1_3
				19333	run_test "TLS 1.3 O->m: HRR secp256r1 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19334	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19335	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:P-384 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19336	0 \
				19337	-s "Protocol is TLSv1.3" \
				19338	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19339	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19340	-s "HRR selected_group: secp384r1"
				19341
				19342	requires_config_enabled MBEDTLS_SSL_SRV_C
				19343	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19344	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19345	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19346	requires_openssl_tls1_3
				19347	run_test "TLS 1.3 O->m: HRR secp256r1 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19348	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19349	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:P-521 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19350	0 \
				19351	-s "Protocol is TLSv1.3" \
				19352	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19353	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19354	-s "HRR selected_group: secp521r1"
				19355
				19356	requires_config_enabled MBEDTLS_SSL_SRV_C
				19357	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19358	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19359	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19360	requires_openssl_tls1_3
				19361	run_test "TLS 1.3 O->m: HRR secp256r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19362	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19363	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:X25519 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19364	0 \
				19365	-s "Protocol is TLSv1.3" \
				19366	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19367	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19368	-s "HRR selected_group: x25519"
				19369
				19370	requires_config_enabled MBEDTLS_SSL_SRV_C
				19371	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19372	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19373	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19374	requires_openssl_tls1_3
				19375	run_test "TLS 1.3 O->m: HRR secp256r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19376	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19377	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:X448 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19378	0 \
				19379	-s "Protocol is TLSv1.3" \
				19380	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19381	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19382	-s "HRR selected_group: x448"
				19383
				19384	requires_config_enabled MBEDTLS_SSL_SRV_C
				19385	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19386	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19387	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19388	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	19389	requires_openssl_3_x
				19390	run_test "TLS 1.3 O->m: HRR secp256r1 -> ffdhe2048" \
				19391	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19392	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:ffdhe2048 -msg -tls1_3" \
				19393	0 \
				19394	-s "Protocol is TLSv1.3" \
				19395	-s "got named group: ffdhe2048(0100)" \
				19396	-s "Certificate verification was skipped" \
				19397	-s "HRR selected_group: ffdhe2048"
				19398
				19399	requires_config_enabled MBEDTLS_SSL_SRV_C
				19400	requires_config_enabled MBEDTLS_DEBUG_C
				19401	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19402	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19403	requires_openssl_tls1_3
				19404	requires_openssl_3_x
				19405	run_test "TLS 1.3 O->m: HRR secp256r1 -> ffdhe3072" \
				19406	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19407	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:ffdhe3072 -msg -tls1_3" \
				19408	0 \
				19409	-s "Protocol is TLSv1.3" \
				19410	-s "got named group: ffdhe3072(0101)" \
				19411	-s "Certificate verification was skipped" \
				19412	-s "HRR selected_group: ffdhe3072"
				19413
				19414	requires_config_enabled MBEDTLS_SSL_SRV_C
				19415	requires_config_enabled MBEDTLS_DEBUG_C
				19416	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19417	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19418	requires_openssl_tls1_3
				19419	requires_openssl_3_x
				19420	run_test "TLS 1.3 O->m: HRR secp256r1 -> ffdhe4096" \
				19421	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19422	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:ffdhe4096 -msg -tls1_3" \
				19423	0 \
				19424	-s "Protocol is TLSv1.3" \
				19425	-s "got named group: ffdhe4096(0102)" \
				19426	-s "Certificate verification was skipped" \
				19427	-s "HRR selected_group: ffdhe4096"
				19428
				19429	requires_config_enabled MBEDTLS_SSL_SRV_C
				19430	requires_config_enabled MBEDTLS_DEBUG_C
				19431	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19432	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19433	requires_openssl_tls1_3
				19434	requires_openssl_3_x
				19435	run_test "TLS 1.3 O->m: HRR secp256r1 -> ffdhe6144" \
				19436	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19437	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:ffdhe6144 -msg -tls1_3" \
				19438	0 \
				19439	-s "Protocol is TLSv1.3" \
				19440	-s "got named group: ffdhe6144(0103)" \
				19441	-s "Certificate verification was skipped" \
				19442	-s "HRR selected_group: ffdhe6144"
				19443
				19444	requires_config_enabled MBEDTLS_SSL_SRV_C
				19445	requires_config_enabled MBEDTLS_DEBUG_C
				19446	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19447	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19448	requires_openssl_tls1_3
				19449	requires_openssl_3_x
				19450	run_test "TLS 1.3 O->m: HRR secp256r1 -> ffdhe8192" \
				19451	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19452	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:ffdhe8192 -msg -tls1_3" \
				19453	0 \
				19454	-s "Protocol is TLSv1.3" \
				19455	-s "got named group: ffdhe8192(0104)" \
				19456	-s "Certificate verification was skipped" \
				19457	-s "HRR selected_group: ffdhe8192"
				19458
				19459	requires_config_enabled MBEDTLS_SSL_SRV_C
				19460	requires_config_enabled MBEDTLS_DEBUG_C
				19461	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19462	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19463	requires_openssl_tls1_3
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19464	run_test "TLS 1.3 O->m: HRR secp384r1 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19465	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19466	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:P-256 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19467	0 \
				19468	-s "Protocol is TLSv1.3" \
				19469	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19470	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19471	-s "HRR selected_group: secp256r1"
				19472
				19473	requires_config_enabled MBEDTLS_SSL_SRV_C
				19474	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19475	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19476	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19477	requires_openssl_tls1_3
				19478	run_test "TLS 1.3 O->m: HRR secp384r1 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19479	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19480	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:P-521 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19481	0 \
				19482	-s "Protocol is TLSv1.3" \
				19483	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19484	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19485	-s "HRR selected_group: secp521r1"
				19486
				19487	requires_config_enabled MBEDTLS_SSL_SRV_C
				19488	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19489	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19490	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19491	requires_openssl_tls1_3
				19492	run_test "TLS 1.3 O->m: HRR secp384r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19493	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19494	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:X25519 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19495	0 \
				19496	-s "Protocol is TLSv1.3" \
				19497	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19498	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19499	-s "HRR selected_group: x25519"
				19500
				19501	requires_config_enabled MBEDTLS_SSL_SRV_C
				19502	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19503	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19504	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19505	requires_openssl_tls1_3
				19506	run_test "TLS 1.3 O->m: HRR secp384r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19507	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19508	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:X448 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19509	0 \
				19510	-s "Protocol is TLSv1.3" \
				19511	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19512	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19513	-s "HRR selected_group: x448"
				19514
				19515	requires_config_enabled MBEDTLS_SSL_SRV_C
				19516	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19517	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19518	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19519	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	19520	requires_openssl_3_x
				19521	run_test "TLS 1.3 O->m: HRR secp384r1 -> ffdhe2048" \
				19522	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19523	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:ffdhe2048 -msg -tls1_3" \
				19524	0 \
				19525	-s "Protocol is TLSv1.3" \
				19526	-s "got named group: ffdhe2048(0100)" \
				19527	-s "Certificate verification was skipped" \
				19528	-s "HRR selected_group: ffdhe2048"
				19529
				19530	requires_config_enabled MBEDTLS_SSL_SRV_C
				19531	requires_config_enabled MBEDTLS_DEBUG_C
				19532	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19533	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19534	requires_openssl_tls1_3
				19535	requires_openssl_3_x
				19536	run_test "TLS 1.3 O->m: HRR secp384r1 -> ffdhe3072" \
				19537	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19538	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:ffdhe3072 -msg -tls1_3" \
				19539	0 \
				19540	-s "Protocol is TLSv1.3" \
				19541	-s "got named group: ffdhe3072(0101)" \
				19542	-s "Certificate verification was skipped" \
				19543	-s "HRR selected_group: ffdhe3072"
				19544
				19545	requires_config_enabled MBEDTLS_SSL_SRV_C
				19546	requires_config_enabled MBEDTLS_DEBUG_C
				19547	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19548	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19549	requires_openssl_tls1_3
				19550	requires_openssl_3_x
				19551	run_test "TLS 1.3 O->m: HRR secp384r1 -> ffdhe4096" \
				19552	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19553	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:ffdhe4096 -msg -tls1_3" \
				19554	0 \
				19555	-s "Protocol is TLSv1.3" \
				19556	-s "got named group: ffdhe4096(0102)" \
				19557	-s "Certificate verification was skipped" \
				19558	-s "HRR selected_group: ffdhe4096"
				19559
				19560	requires_config_enabled MBEDTLS_SSL_SRV_C
				19561	requires_config_enabled MBEDTLS_DEBUG_C
				19562	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19563	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19564	requires_openssl_tls1_3
				19565	requires_openssl_3_x
				19566	run_test "TLS 1.3 O->m: HRR secp384r1 -> ffdhe6144" \
				19567	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19568	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:ffdhe6144 -msg -tls1_3" \
				19569	0 \
				19570	-s "Protocol is TLSv1.3" \
				19571	-s "got named group: ffdhe6144(0103)" \
				19572	-s "Certificate verification was skipped" \
				19573	-s "HRR selected_group: ffdhe6144"
				19574
				19575	requires_config_enabled MBEDTLS_SSL_SRV_C
				19576	requires_config_enabled MBEDTLS_DEBUG_C
				19577	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19578	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19579	requires_openssl_tls1_3
				19580	requires_openssl_3_x
				19581	run_test "TLS 1.3 O->m: HRR secp384r1 -> ffdhe8192" \
				19582	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19583	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:ffdhe8192 -msg -tls1_3" \
				19584	0 \
				19585	-s "Protocol is TLSv1.3" \
				19586	-s "got named group: ffdhe8192(0104)" \
				19587	-s "Certificate verification was skipped" \
				19588	-s "HRR selected_group: ffdhe8192"
				19589
				19590	requires_config_enabled MBEDTLS_SSL_SRV_C
				19591	requires_config_enabled MBEDTLS_DEBUG_C
				19592	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19593	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19594	requires_openssl_tls1_3
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19595	run_test "TLS 1.3 O->m: HRR secp521r1 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19596	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19597	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:P-256 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19598	0 \
				19599	-s "Protocol is TLSv1.3" \
				19600	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19601	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19602	-s "HRR selected_group: secp256r1"
				19603
				19604	requires_config_enabled MBEDTLS_SSL_SRV_C
				19605	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19606	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19607	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19608	requires_openssl_tls1_3
				19609	run_test "TLS 1.3 O->m: HRR secp521r1 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19610	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19611	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:P-384 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19612	0 \
				19613	-s "Protocol is TLSv1.3" \
				19614	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19615	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19616	-s "HRR selected_group: secp384r1"
				19617
				19618	requires_config_enabled MBEDTLS_SSL_SRV_C
				19619	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19620	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19621	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19622	requires_openssl_tls1_3
				19623	run_test "TLS 1.3 O->m: HRR secp521r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19624	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19625	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:X25519 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19626	0 \
				19627	-s "Protocol is TLSv1.3" \
				19628	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19629	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19630	-s "HRR selected_group: x25519"
				19631
				19632	requires_config_enabled MBEDTLS_SSL_SRV_C
				19633	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19634	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19635	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19636	requires_openssl_tls1_3
				19637	run_test "TLS 1.3 O->m: HRR secp521r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19638	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19639	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:X448 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19640	0 \
				19641	-s "Protocol is TLSv1.3" \
				19642	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19643	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19644	-s "HRR selected_group: x448"
				19645
				19646	requires_config_enabled MBEDTLS_SSL_SRV_C
				19647	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19648	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19649	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19650	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	19651	requires_openssl_3_x
				19652	run_test "TLS 1.3 O->m: HRR secp521r1 -> ffdhe2048" \
				19653	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19654	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:ffdhe2048 -msg -tls1_3" \
				19655	0 \
				19656	-s "Protocol is TLSv1.3" \
				19657	-s "got named group: ffdhe2048(0100)" \
				19658	-s "Certificate verification was skipped" \
				19659	-s "HRR selected_group: ffdhe2048"
				19660
				19661	requires_config_enabled MBEDTLS_SSL_SRV_C
				19662	requires_config_enabled MBEDTLS_DEBUG_C
				19663	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19664	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19665	requires_openssl_tls1_3
				19666	requires_openssl_3_x
				19667	run_test "TLS 1.3 O->m: HRR secp521r1 -> ffdhe3072" \
				19668	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19669	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:ffdhe3072 -msg -tls1_3" \
				19670	0 \
				19671	-s "Protocol is TLSv1.3" \
				19672	-s "got named group: ffdhe3072(0101)" \
				19673	-s "Certificate verification was skipped" \
				19674	-s "HRR selected_group: ffdhe3072"
				19675
				19676	requires_config_enabled MBEDTLS_SSL_SRV_C
				19677	requires_config_enabled MBEDTLS_DEBUG_C
				19678	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19679	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19680	requires_openssl_tls1_3
				19681	requires_openssl_3_x
				19682	run_test "TLS 1.3 O->m: HRR secp521r1 -> ffdhe4096" \
				19683	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19684	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:ffdhe4096 -msg -tls1_3" \
				19685	0 \
				19686	-s "Protocol is TLSv1.3" \
				19687	-s "got named group: ffdhe4096(0102)" \
				19688	-s "Certificate verification was skipped" \
				19689	-s "HRR selected_group: ffdhe4096"
				19690
				19691	requires_config_enabled MBEDTLS_SSL_SRV_C
				19692	requires_config_enabled MBEDTLS_DEBUG_C
				19693	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19694	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19695	requires_openssl_tls1_3
				19696	requires_openssl_3_x
				19697	run_test "TLS 1.3 O->m: HRR secp521r1 -> ffdhe6144" \
				19698	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19699	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:ffdhe6144 -msg -tls1_3" \
				19700	0 \
				19701	-s "Protocol is TLSv1.3" \
				19702	-s "got named group: ffdhe6144(0103)" \
				19703	-s "Certificate verification was skipped" \
				19704	-s "HRR selected_group: ffdhe6144"
				19705
				19706	requires_config_enabled MBEDTLS_SSL_SRV_C
				19707	requires_config_enabled MBEDTLS_DEBUG_C
				19708	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19709	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19710	requires_openssl_tls1_3
				19711	requires_openssl_3_x
				19712	run_test "TLS 1.3 O->m: HRR secp521r1 -> ffdhe8192" \
				19713	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19714	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:ffdhe8192 -msg -tls1_3" \
				19715	0 \
				19716	-s "Protocol is TLSv1.3" \
				19717	-s "got named group: ffdhe8192(0104)" \
				19718	-s "Certificate verification was skipped" \
				19719	-s "HRR selected_group: ffdhe8192"
				19720
				19721	requires_config_enabled MBEDTLS_SSL_SRV_C
				19722	requires_config_enabled MBEDTLS_DEBUG_C
				19723	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19724	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19725	requires_openssl_tls1_3
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19726	run_test "TLS 1.3 O->m: HRR x25519 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19727	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19728	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-256 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19729	0 \
				19730	-s "Protocol is TLSv1.3" \
				19731	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19732	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19733	-s "HRR selected_group: secp256r1"
				19734
				19735	requires_config_enabled MBEDTLS_SSL_SRV_C
				19736	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19737	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19738	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19739	requires_openssl_tls1_3
				19740	run_test "TLS 1.3 O->m: HRR x25519 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19741	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19742	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-384 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19743	0 \
				19744	-s "Protocol is TLSv1.3" \
				19745	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19746	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19747	-s "HRR selected_group: secp384r1"
				19748
				19749	requires_config_enabled MBEDTLS_SSL_SRV_C
				19750	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19751	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19752	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19753	requires_openssl_tls1_3
				19754	run_test "TLS 1.3 O->m: HRR x25519 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19755	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19756	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-521 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19757	0 \
				19758	-s "Protocol is TLSv1.3" \
				19759	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19760	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19761	-s "HRR selected_group: secp521r1"
				19762
				19763	requires_config_enabled MBEDTLS_SSL_SRV_C
				19764	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19765	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19766	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19767	requires_openssl_tls1_3
				19768	run_test "TLS 1.3 O->m: HRR x25519 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19769	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19770	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:X448 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19771	0 \
				19772	-s "Protocol is TLSv1.3" \
				19773	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19774	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19775	-s "HRR selected_group: x448"
				19776
				19777	requires_config_enabled MBEDTLS_SSL_SRV_C
				19778	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19779	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19780	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19781	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	19782	requires_openssl_3_x
				19783	run_test "TLS 1.3 O->m: HRR x25519 -> ffdhe2048" \
				19784	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19785	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:ffdhe2048 -msg -tls1_3" \
				19786	0 \
				19787	-s "Protocol is TLSv1.3" \
				19788	-s "got named group: ffdhe2048(0100)" \
				19789	-s "Certificate verification was skipped" \
				19790	-s "HRR selected_group: ffdhe2048"
				19791
				19792	requires_config_enabled MBEDTLS_SSL_SRV_C
				19793	requires_config_enabled MBEDTLS_DEBUG_C
				19794	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19795	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19796	requires_openssl_tls1_3
				19797	requires_openssl_3_x
				19798	run_test "TLS 1.3 O->m: HRR x25519 -> ffdhe3072" \
				19799	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19800	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:ffdhe3072 -msg -tls1_3" \
				19801	0 \
				19802	-s "Protocol is TLSv1.3" \
				19803	-s "got named group: ffdhe3072(0101)" \
				19804	-s "Certificate verification was skipped" \
				19805	-s "HRR selected_group: ffdhe3072"
				19806
				19807	requires_config_enabled MBEDTLS_SSL_SRV_C
				19808	requires_config_enabled MBEDTLS_DEBUG_C
				19809	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19810	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19811	requires_openssl_tls1_3
				19812	requires_openssl_3_x
				19813	run_test "TLS 1.3 O->m: HRR x25519 -> ffdhe4096" \
				19814	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19815	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:ffdhe4096 -msg -tls1_3" \
				19816	0 \
				19817	-s "Protocol is TLSv1.3" \
				19818	-s "got named group: ffdhe4096(0102)" \
				19819	-s "Certificate verification was skipped" \
				19820	-s "HRR selected_group: ffdhe4096"
				19821
				19822	requires_config_enabled MBEDTLS_SSL_SRV_C
				19823	requires_config_enabled MBEDTLS_DEBUG_C
				19824	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19825	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19826	requires_openssl_tls1_3
				19827	requires_openssl_3_x
				19828	run_test "TLS 1.3 O->m: HRR x25519 -> ffdhe6144" \
				19829	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19830	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:ffdhe6144 -msg -tls1_3" \
				19831	0 \
				19832	-s "Protocol is TLSv1.3" \
				19833	-s "got named group: ffdhe6144(0103)" \
				19834	-s "Certificate verification was skipped" \
				19835	-s "HRR selected_group: ffdhe6144"
				19836
				19837	requires_config_enabled MBEDTLS_SSL_SRV_C
				19838	requires_config_enabled MBEDTLS_DEBUG_C
				19839	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19840	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19841	requires_openssl_tls1_3
				19842	requires_openssl_3_x
				19843	run_test "TLS 1.3 O->m: HRR x25519 -> ffdhe8192" \
				19844	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19845	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:ffdhe8192 -msg -tls1_3" \
				19846	0 \
				19847	-s "Protocol is TLSv1.3" \
				19848	-s "got named group: ffdhe8192(0104)" \
				19849	-s "Certificate verification was skipped" \
				19850	-s "HRR selected_group: ffdhe8192"
				19851
				19852	requires_config_enabled MBEDTLS_SSL_SRV_C
				19853	requires_config_enabled MBEDTLS_DEBUG_C
				19854	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19855	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19856	requires_openssl_tls1_3
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19857	run_test "TLS 1.3 O->m: HRR x448 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19858	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19859	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-256 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19860	0 \
				19861	-s "Protocol is TLSv1.3" \
				19862	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19863	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19864	-s "HRR selected_group: secp256r1"
				19865
				19866	requires_config_enabled MBEDTLS_SSL_SRV_C
				19867	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19868	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19869	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19870	requires_openssl_tls1_3
				19871	run_test "TLS 1.3 O->m: HRR x448 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19872	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19873	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-384 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19874	0 \
				19875	-s "Protocol is TLSv1.3" \
				19876	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19877	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19878	-s "HRR selected_group: secp384r1"
				19879
				19880	requires_config_enabled MBEDTLS_SSL_SRV_C
				19881	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19882	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19883	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19884	requires_openssl_tls1_3
				19885	run_test "TLS 1.3 O->m: HRR x448 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19886	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19887	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-521 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19888	0 \
				19889	-s "Protocol is TLSv1.3" \
				19890	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19891	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19892	-s "HRR selected_group: secp521r1"
				19893
				19894	requires_config_enabled MBEDTLS_SSL_SRV_C
				19895	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19896	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19897	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19898	requires_openssl_tls1_3
				19899	run_test "TLS 1.3 O->m: HRR x448 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	19900	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	19901	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:X25519 -msg -tls1_3" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19902	0 \
				19903	-s "Protocol is TLSv1.3" \
				19904	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	19905	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19906	-s "HRR selected_group: x25519"
				19907
				19908	requires_config_enabled MBEDTLS_SSL_SRV_C
				19909	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	19910	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	19911	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	19912	requires_openssl_tls1_3
				19913	requires_openssl_3_x
				19914	run_test "TLS 1.3 O->m: HRR x448 -> ffdhe2048" \
				19915	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19916	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:ffdhe2048 -msg -tls1_3" \
				19917	0 \
				19918	-s "Protocol is TLSv1.3" \
				19919	-s "got named group: ffdhe2048(0100)" \
				19920	-s "Certificate verification was skipped" \
				19921	-s "HRR selected_group: ffdhe2048"
				19922
				19923	requires_config_enabled MBEDTLS_SSL_SRV_C
				19924	requires_config_enabled MBEDTLS_DEBUG_C
				19925	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19926	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19927	requires_openssl_tls1_3
				19928	requires_openssl_3_x
				19929	run_test "TLS 1.3 O->m: HRR x448 -> ffdhe3072" \
				19930	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19931	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:ffdhe3072 -msg -tls1_3" \
				19932	0 \
				19933	-s "Protocol is TLSv1.3" \
				19934	-s "got named group: ffdhe3072(0101)" \
				19935	-s "Certificate verification was skipped" \
				19936	-s "HRR selected_group: ffdhe3072"
				19937
				19938	requires_config_enabled MBEDTLS_SSL_SRV_C
				19939	requires_config_enabled MBEDTLS_DEBUG_C
				19940	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19941	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19942	requires_openssl_tls1_3
				19943	requires_openssl_3_x
				19944	run_test "TLS 1.3 O->m: HRR x448 -> ffdhe4096" \
				19945	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19946	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:ffdhe4096 -msg -tls1_3" \
				19947	0 \
				19948	-s "Protocol is TLSv1.3" \
				19949	-s "got named group: ffdhe4096(0102)" \
				19950	-s "Certificate verification was skipped" \
				19951	-s "HRR selected_group: ffdhe4096"
				19952
				19953	requires_config_enabled MBEDTLS_SSL_SRV_C
				19954	requires_config_enabled MBEDTLS_DEBUG_C
				19955	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19956	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19957	requires_openssl_tls1_3
				19958	requires_openssl_3_x
				19959	run_test "TLS 1.3 O->m: HRR x448 -> ffdhe6144" \
				19960	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19961	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:ffdhe6144 -msg -tls1_3" \
				19962	0 \
				19963	-s "Protocol is TLSv1.3" \
				19964	-s "got named group: ffdhe6144(0103)" \
				19965	-s "Certificate verification was skipped" \
				19966	-s "HRR selected_group: ffdhe6144"
				19967
				19968	requires_config_enabled MBEDTLS_SSL_SRV_C
				19969	requires_config_enabled MBEDTLS_DEBUG_C
				19970	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19971	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19972	requires_openssl_tls1_3
				19973	requires_openssl_3_x
				19974	run_test "TLS 1.3 O->m: HRR x448 -> ffdhe8192" \
				19975	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19976	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:ffdhe8192 -msg -tls1_3" \
				19977	0 \
				19978	-s "Protocol is TLSv1.3" \
				19979	-s "got named group: ffdhe8192(0104)" \
				19980	-s "Certificate verification was skipped" \
				19981	-s "HRR selected_group: ffdhe8192"
				19982
				19983	requires_config_enabled MBEDTLS_SSL_SRV_C
				19984	requires_config_enabled MBEDTLS_DEBUG_C
				19985	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				19986	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				19987	requires_openssl_tls1_3
				19988	requires_openssl_3_x
				19989	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> secp256r1" \
				19990	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				19991	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:P-256 -msg -tls1_3" \
				19992	0 \
				19993	-s "Protocol is TLSv1.3" \
				19994	-s "got named group: secp256r1(0017)" \
				19995	-s "Certificate verification was skipped" \
				19996	-s "HRR selected_group: secp256r1"
				19997
				19998	requires_config_enabled MBEDTLS_SSL_SRV_C
				19999	requires_config_enabled MBEDTLS_DEBUG_C
				20000	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20001	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20002	requires_openssl_tls1_3
				20003	requires_openssl_3_x
				20004	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> secp384r1" \
				20005	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20006	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:P-384 -msg -tls1_3" \
				20007	0 \
				20008	-s "Protocol is TLSv1.3" \
				20009	-s "got named group: secp384r1(0018)" \
				20010	-s "Certificate verification was skipped" \
				20011	-s "HRR selected_group: secp384r1"
				20012
				20013	requires_config_enabled MBEDTLS_SSL_SRV_C
				20014	requires_config_enabled MBEDTLS_DEBUG_C
				20015	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20016	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20017	requires_openssl_tls1_3
				20018	requires_openssl_3_x
				20019	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> secp521r1" \
				20020	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20021	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:P-521 -msg -tls1_3" \
				20022	0 \
				20023	-s "Protocol is TLSv1.3" \
				20024	-s "got named group: secp521r1(0019)" \
				20025	-s "Certificate verification was skipped" \
				20026	-s "HRR selected_group: secp521r1"
				20027
				20028	requires_config_enabled MBEDTLS_SSL_SRV_C
				20029	requires_config_enabled MBEDTLS_DEBUG_C
				20030	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20031	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20032	requires_openssl_tls1_3
				20033	requires_openssl_3_x
				20034	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> x25519" \
				20035	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20036	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:X25519 -msg -tls1_3" \
				20037	0 \
				20038	-s "Protocol is TLSv1.3" \
				20039	-s "got named group: x25519(001d)" \
				20040	-s "Certificate verification was skipped" \
				20041	-s "HRR selected_group: x25519"
				20042
				20043	requires_config_enabled MBEDTLS_SSL_SRV_C
				20044	requires_config_enabled MBEDTLS_DEBUG_C
				20045	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20046	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20047	requires_openssl_tls1_3
				20048	requires_openssl_3_x
				20049	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> x448" \
				20050	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20051	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:X448 -msg -tls1_3" \
				20052	0 \
				20053	-s "Protocol is TLSv1.3" \
				20054	-s "got named group: x448(001e)" \
				20055	-s "Certificate verification was skipped" \
				20056	-s "HRR selected_group: x448"
				20057
				20058	requires_config_enabled MBEDTLS_SSL_SRV_C
				20059	requires_config_enabled MBEDTLS_DEBUG_C
				20060	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20061	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20062	requires_openssl_tls1_3
				20063	requires_openssl_3_x
				20064	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> ffdhe3072" \
				20065	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20066	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:ffdhe3072 -msg -tls1_3" \
				20067	0 \
				20068	-s "Protocol is TLSv1.3" \
				20069	-s "got named group: ffdhe3072(0101)" \
				20070	-s "Certificate verification was skipped" \
				20071	-s "HRR selected_group: ffdhe3072"
				20072
				20073	requires_config_enabled MBEDTLS_SSL_SRV_C
				20074	requires_config_enabled MBEDTLS_DEBUG_C
				20075	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20076	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20077	requires_openssl_tls1_3
				20078	requires_openssl_3_x
				20079	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> ffdhe4096" \
				20080	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20081	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:ffdhe4096 -msg -tls1_3" \
				20082	0 \
				20083	-s "Protocol is TLSv1.3" \
				20084	-s "got named group: ffdhe4096(0102)" \
				20085	-s "Certificate verification was skipped" \
				20086	-s "HRR selected_group: ffdhe4096"
				20087
				20088	requires_config_enabled MBEDTLS_SSL_SRV_C
				20089	requires_config_enabled MBEDTLS_DEBUG_C
				20090	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20091	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20092	requires_openssl_tls1_3
				20093	requires_openssl_3_x
				20094	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> ffdhe6144" \
				20095	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20096	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:ffdhe6144 -msg -tls1_3" \
				20097	0 \
				20098	-s "Protocol is TLSv1.3" \
				20099	-s "got named group: ffdhe6144(0103)" \
				20100	-s "Certificate verification was skipped" \
				20101	-s "HRR selected_group: ffdhe6144"
				20102
				20103	requires_config_enabled MBEDTLS_SSL_SRV_C
				20104	requires_config_enabled MBEDTLS_DEBUG_C
				20105	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20106	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20107	requires_openssl_tls1_3
				20108	requires_openssl_3_x
				20109	run_test "TLS 1.3 O->m: HRR ffdhe2048 -> ffdhe8192" \
				20110	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20111	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:ffdhe8192 -msg -tls1_3" \
				20112	0 \
				20113	-s "Protocol is TLSv1.3" \
				20114	-s "got named group: ffdhe8192(0104)" \
				20115	-s "Certificate verification was skipped" \
				20116	-s "HRR selected_group: ffdhe8192"
				20117
				20118	requires_config_enabled MBEDTLS_SSL_SRV_C
				20119	requires_config_enabled MBEDTLS_DEBUG_C
				20120	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20121	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20122	requires_openssl_tls1_3
				20123	requires_openssl_3_x
				20124	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> secp256r1" \
				20125	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20126	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:P-256 -msg -tls1_3" \
				20127	0 \
				20128	-s "Protocol is TLSv1.3" \
				20129	-s "got named group: secp256r1(0017)" \
				20130	-s "Certificate verification was skipped" \
				20131	-s "HRR selected_group: secp256r1"
				20132
				20133	requires_config_enabled MBEDTLS_SSL_SRV_C
				20134	requires_config_enabled MBEDTLS_DEBUG_C
				20135	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20136	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20137	requires_openssl_tls1_3
				20138	requires_openssl_3_x
				20139	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> secp384r1" \
				20140	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20141	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:P-384 -msg -tls1_3" \
				20142	0 \
				20143	-s "Protocol is TLSv1.3" \
				20144	-s "got named group: secp384r1(0018)" \
				20145	-s "Certificate verification was skipped" \
				20146	-s "HRR selected_group: secp384r1"
				20147
				20148	requires_config_enabled MBEDTLS_SSL_SRV_C
				20149	requires_config_enabled MBEDTLS_DEBUG_C
				20150	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20151	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20152	requires_openssl_tls1_3
				20153	requires_openssl_3_x
				20154	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> secp521r1" \
				20155	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20156	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:P-521 -msg -tls1_3" \
				20157	0 \
				20158	-s "Protocol is TLSv1.3" \
				20159	-s "got named group: secp521r1(0019)" \
				20160	-s "Certificate verification was skipped" \
				20161	-s "HRR selected_group: secp521r1"
				20162
				20163	requires_config_enabled MBEDTLS_SSL_SRV_C
				20164	requires_config_enabled MBEDTLS_DEBUG_C
				20165	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20166	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20167	requires_openssl_tls1_3
				20168	requires_openssl_3_x
				20169	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> x25519" \
				20170	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20171	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:X25519 -msg -tls1_3" \
				20172	0 \
				20173	-s "Protocol is TLSv1.3" \
				20174	-s "got named group: x25519(001d)" \
				20175	-s "Certificate verification was skipped" \
				20176	-s "HRR selected_group: x25519"
				20177
				20178	requires_config_enabled MBEDTLS_SSL_SRV_C
				20179	requires_config_enabled MBEDTLS_DEBUG_C
				20180	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20181	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20182	requires_openssl_tls1_3
				20183	requires_openssl_3_x
				20184	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> x448" \
				20185	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20186	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:X448 -msg -tls1_3" \
				20187	0 \
				20188	-s "Protocol is TLSv1.3" \
				20189	-s "got named group: x448(001e)" \
				20190	-s "Certificate verification was skipped" \
				20191	-s "HRR selected_group: x448"
				20192
				20193	requires_config_enabled MBEDTLS_SSL_SRV_C
				20194	requires_config_enabled MBEDTLS_DEBUG_C
				20195	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20196	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20197	requires_openssl_tls1_3
				20198	requires_openssl_3_x
				20199	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> ffdhe2048" \
				20200	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20201	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:ffdhe2048 -msg -tls1_3" \
				20202	0 \
				20203	-s "Protocol is TLSv1.3" \
				20204	-s "got named group: ffdhe2048(0100)" \
				20205	-s "Certificate verification was skipped" \
				20206	-s "HRR selected_group: ffdhe2048"
				20207
				20208	requires_config_enabled MBEDTLS_SSL_SRV_C
				20209	requires_config_enabled MBEDTLS_DEBUG_C
				20210	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20211	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20212	requires_openssl_tls1_3
				20213	requires_openssl_3_x
				20214	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> ffdhe4096" \
				20215	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20216	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:ffdhe4096 -msg -tls1_3" \
				20217	0 \
				20218	-s "Protocol is TLSv1.3" \
				20219	-s "got named group: ffdhe4096(0102)" \
				20220	-s "Certificate verification was skipped" \
				20221	-s "HRR selected_group: ffdhe4096"
				20222
				20223	requires_config_enabled MBEDTLS_SSL_SRV_C
				20224	requires_config_enabled MBEDTLS_DEBUG_C
				20225	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20226	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20227	requires_openssl_tls1_3
				20228	requires_openssl_3_x
				20229	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> ffdhe6144" \
				20230	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20231	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:ffdhe6144 -msg -tls1_3" \
				20232	0 \
				20233	-s "Protocol is TLSv1.3" \
				20234	-s "got named group: ffdhe6144(0103)" \
				20235	-s "Certificate verification was skipped" \
				20236	-s "HRR selected_group: ffdhe6144"
				20237
				20238	requires_config_enabled MBEDTLS_SSL_SRV_C
				20239	requires_config_enabled MBEDTLS_DEBUG_C
				20240	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20241	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20242	requires_openssl_tls1_3
				20243	requires_openssl_3_x
				20244	run_test "TLS 1.3 O->m: HRR ffdhe3072 -> ffdhe8192" \
				20245	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20246	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe3072:ffdhe8192 -msg -tls1_3" \
				20247	0 \
				20248	-s "Protocol is TLSv1.3" \
				20249	-s "got named group: ffdhe8192(0104)" \
				20250	-s "Certificate verification was skipped" \
				20251	-s "HRR selected_group: ffdhe8192"
				20252
				20253	requires_config_enabled MBEDTLS_SSL_SRV_C
				20254	requires_config_enabled MBEDTLS_DEBUG_C
				20255	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20256	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20257	requires_openssl_tls1_3
				20258	requires_openssl_3_x
				20259	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> secp256r1" \
				20260	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20261	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:P-256 -msg -tls1_3" \
				20262	0 \
				20263	-s "Protocol is TLSv1.3" \
				20264	-s "got named group: secp256r1(0017)" \
				20265	-s "Certificate verification was skipped" \
				20266	-s "HRR selected_group: secp256r1"
				20267
				20268	requires_config_enabled MBEDTLS_SSL_SRV_C
				20269	requires_config_enabled MBEDTLS_DEBUG_C
				20270	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20271	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20272	requires_openssl_tls1_3
				20273	requires_openssl_3_x
				20274	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> secp384r1" \
				20275	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20276	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:P-384 -msg -tls1_3" \
				20277	0 \
				20278	-s "Protocol is TLSv1.3" \
				20279	-s "got named group: secp384r1(0018)" \
				20280	-s "Certificate verification was skipped" \
				20281	-s "HRR selected_group: secp384r1"
				20282
				20283	requires_config_enabled MBEDTLS_SSL_SRV_C
				20284	requires_config_enabled MBEDTLS_DEBUG_C
				20285	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20286	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20287	requires_openssl_tls1_3
				20288	requires_openssl_3_x
				20289	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> secp521r1" \
				20290	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20291	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:P-521 -msg -tls1_3" \
				20292	0 \
				20293	-s "Protocol is TLSv1.3" \
				20294	-s "got named group: secp521r1(0019)" \
				20295	-s "Certificate verification was skipped" \
				20296	-s "HRR selected_group: secp521r1"
				20297
				20298	requires_config_enabled MBEDTLS_SSL_SRV_C
				20299	requires_config_enabled MBEDTLS_DEBUG_C
				20300	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20301	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20302	requires_openssl_tls1_3
				20303	requires_openssl_3_x
				20304	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> x25519" \
				20305	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20306	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:X25519 -msg -tls1_3" \
				20307	0 \
				20308	-s "Protocol is TLSv1.3" \
				20309	-s "got named group: x25519(001d)" \
				20310	-s "Certificate verification was skipped" \
				20311	-s "HRR selected_group: x25519"
				20312
				20313	requires_config_enabled MBEDTLS_SSL_SRV_C
				20314	requires_config_enabled MBEDTLS_DEBUG_C
				20315	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20316	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20317	requires_openssl_tls1_3
				20318	requires_openssl_3_x
				20319	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> x448" \
				20320	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20321	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:X448 -msg -tls1_3" \
				20322	0 \
				20323	-s "Protocol is TLSv1.3" \
				20324	-s "got named group: x448(001e)" \
				20325	-s "Certificate verification was skipped" \
				20326	-s "HRR selected_group: x448"
				20327
				20328	requires_config_enabled MBEDTLS_SSL_SRV_C
				20329	requires_config_enabled MBEDTLS_DEBUG_C
				20330	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20331	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20332	requires_openssl_tls1_3
				20333	requires_openssl_3_x
				20334	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> ffdhe2048" \
				20335	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20336	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:ffdhe2048 -msg -tls1_3" \
				20337	0 \
				20338	-s "Protocol is TLSv1.3" \
				20339	-s "got named group: ffdhe2048(0100)" \
				20340	-s "Certificate verification was skipped" \
				20341	-s "HRR selected_group: ffdhe2048"
				20342
				20343	requires_config_enabled MBEDTLS_SSL_SRV_C
				20344	requires_config_enabled MBEDTLS_DEBUG_C
				20345	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20346	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20347	requires_openssl_tls1_3
				20348	requires_openssl_3_x
				20349	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> ffdhe3072" \
				20350	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20351	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:ffdhe3072 -msg -tls1_3" \
				20352	0 \
				20353	-s "Protocol is TLSv1.3" \
				20354	-s "got named group: ffdhe3072(0101)" \
				20355	-s "Certificate verification was skipped" \
				20356	-s "HRR selected_group: ffdhe3072"
				20357
				20358	requires_config_enabled MBEDTLS_SSL_SRV_C
				20359	requires_config_enabled MBEDTLS_DEBUG_C
				20360	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20361	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20362	requires_openssl_tls1_3
				20363	requires_openssl_3_x
				20364	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> ffdhe6144" \
				20365	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20366	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:ffdhe6144 -msg -tls1_3" \
				20367	0 \
				20368	-s "Protocol is TLSv1.3" \
				20369	-s "got named group: ffdhe6144(0103)" \
				20370	-s "Certificate verification was skipped" \
				20371	-s "HRR selected_group: ffdhe6144"
				20372
				20373	requires_config_enabled MBEDTLS_SSL_SRV_C
				20374	requires_config_enabled MBEDTLS_DEBUG_C
				20375	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20376	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20377	requires_openssl_tls1_3
				20378	requires_openssl_3_x
				20379	run_test "TLS 1.3 O->m: HRR ffdhe4096 -> ffdhe8192" \
				20380	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20381	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe4096:ffdhe8192 -msg -tls1_3" \
				20382	0 \
				20383	-s "Protocol is TLSv1.3" \
				20384	-s "got named group: ffdhe8192(0104)" \
				20385	-s "Certificate verification was skipped" \
				20386	-s "HRR selected_group: ffdhe8192"
				20387
				20388	requires_config_enabled MBEDTLS_SSL_SRV_C
				20389	requires_config_enabled MBEDTLS_DEBUG_C
				20390	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20391	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20392	requires_openssl_tls1_3
				20393	requires_openssl_3_x
				20394	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> secp256r1" \
				20395	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20396	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:P-256 -msg -tls1_3" \
				20397	0 \
				20398	-s "Protocol is TLSv1.3" \
				20399	-s "got named group: secp256r1(0017)" \
				20400	-s "Certificate verification was skipped" \
				20401	-s "HRR selected_group: secp256r1"
				20402
				20403	requires_config_enabled MBEDTLS_SSL_SRV_C
				20404	requires_config_enabled MBEDTLS_DEBUG_C
				20405	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20406	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20407	requires_openssl_tls1_3
				20408	requires_openssl_3_x
				20409	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> secp384r1" \
				20410	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20411	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:P-384 -msg -tls1_3" \
				20412	0 \
				20413	-s "Protocol is TLSv1.3" \
				20414	-s "got named group: secp384r1(0018)" \
				20415	-s "Certificate verification was skipped" \
				20416	-s "HRR selected_group: secp384r1"
				20417
				20418	requires_config_enabled MBEDTLS_SSL_SRV_C
				20419	requires_config_enabled MBEDTLS_DEBUG_C
				20420	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20421	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20422	requires_openssl_tls1_3
				20423	requires_openssl_3_x
				20424	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> secp521r1" \
				20425	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20426	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:P-521 -msg -tls1_3" \
				20427	0 \
				20428	-s "Protocol is TLSv1.3" \
				20429	-s "got named group: secp521r1(0019)" \
				20430	-s "Certificate verification was skipped" \
				20431	-s "HRR selected_group: secp521r1"
				20432
				20433	requires_config_enabled MBEDTLS_SSL_SRV_C
				20434	requires_config_enabled MBEDTLS_DEBUG_C
				20435	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20436	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20437	requires_openssl_tls1_3
				20438	requires_openssl_3_x
				20439	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> x25519" \
				20440	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20441	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:X25519 -msg -tls1_3" \
				20442	0 \
				20443	-s "Protocol is TLSv1.3" \
				20444	-s "got named group: x25519(001d)" \
				20445	-s "Certificate verification was skipped" \
				20446	-s "HRR selected_group: x25519"
				20447
				20448	requires_config_enabled MBEDTLS_SSL_SRV_C
				20449	requires_config_enabled MBEDTLS_DEBUG_C
				20450	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20451	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20452	requires_openssl_tls1_3
				20453	requires_openssl_3_x
				20454	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> x448" \
				20455	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20456	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:X448 -msg -tls1_3" \
				20457	0 \
				20458	-s "Protocol is TLSv1.3" \
				20459	-s "got named group: x448(001e)" \
				20460	-s "Certificate verification was skipped" \
				20461	-s "HRR selected_group: x448"
				20462
				20463	requires_config_enabled MBEDTLS_SSL_SRV_C
				20464	requires_config_enabled MBEDTLS_DEBUG_C
				20465	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20466	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20467	requires_openssl_tls1_3
				20468	requires_openssl_3_x
				20469	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> ffdhe2048" \
				20470	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20471	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:ffdhe2048 -msg -tls1_3" \
				20472	0 \
				20473	-s "Protocol is TLSv1.3" \
				20474	-s "got named group: ffdhe2048(0100)" \
				20475	-s "Certificate verification was skipped" \
				20476	-s "HRR selected_group: ffdhe2048"
				20477
				20478	requires_config_enabled MBEDTLS_SSL_SRV_C
				20479	requires_config_enabled MBEDTLS_DEBUG_C
				20480	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20481	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20482	requires_openssl_tls1_3
				20483	requires_openssl_3_x
				20484	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> ffdhe3072" \
				20485	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20486	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:ffdhe3072 -msg -tls1_3" \
				20487	0 \
				20488	-s "Protocol is TLSv1.3" \
				20489	-s "got named group: ffdhe3072(0101)" \
				20490	-s "Certificate verification was skipped" \
				20491	-s "HRR selected_group: ffdhe3072"
				20492
				20493	requires_config_enabled MBEDTLS_SSL_SRV_C
				20494	requires_config_enabled MBEDTLS_DEBUG_C
				20495	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20496	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20497	requires_openssl_tls1_3
				20498	requires_openssl_3_x
				20499	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> ffdhe4096" \
				20500	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20501	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:ffdhe4096 -msg -tls1_3" \
				20502	0 \
				20503	-s "Protocol is TLSv1.3" \
				20504	-s "got named group: ffdhe4096(0102)" \
				20505	-s "Certificate verification was skipped" \
				20506	-s "HRR selected_group: ffdhe4096"
				20507
				20508	requires_config_enabled MBEDTLS_SSL_SRV_C
				20509	requires_config_enabled MBEDTLS_DEBUG_C
				20510	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20511	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20512	requires_openssl_tls1_3
				20513	requires_openssl_3_x
				20514	run_test "TLS 1.3 O->m: HRR ffdhe6144 -> ffdhe8192" \
				20515	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20516	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe6144:ffdhe8192 -msg -tls1_3" \
				20517	0 \
				20518	-s "Protocol is TLSv1.3" \
				20519	-s "got named group: ffdhe8192(0104)" \
				20520	-s "Certificate verification was skipped" \
				20521	-s "HRR selected_group: ffdhe8192"
				20522
				20523	requires_config_enabled MBEDTLS_SSL_SRV_C
				20524	requires_config_enabled MBEDTLS_DEBUG_C
				20525	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20526	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20527	requires_openssl_tls1_3
				20528	requires_openssl_3_x
				20529	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> secp256r1" \
				20530	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20531	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:P-256 -msg -tls1_3" \
				20532	0 \
				20533	-s "Protocol is TLSv1.3" \
				20534	-s "got named group: secp256r1(0017)" \
				20535	-s "Certificate verification was skipped" \
				20536	-s "HRR selected_group: secp256r1"
				20537
				20538	requires_config_enabled MBEDTLS_SSL_SRV_C
				20539	requires_config_enabled MBEDTLS_DEBUG_C
				20540	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20541	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20542	requires_openssl_tls1_3
				20543	requires_openssl_3_x
				20544	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> secp384r1" \
				20545	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20546	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:P-384 -msg -tls1_3" \
				20547	0 \
				20548	-s "Protocol is TLSv1.3" \
				20549	-s "got named group: secp384r1(0018)" \
				20550	-s "Certificate verification was skipped" \
				20551	-s "HRR selected_group: secp384r1"
				20552
				20553	requires_config_enabled MBEDTLS_SSL_SRV_C
				20554	requires_config_enabled MBEDTLS_DEBUG_C
				20555	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20556	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20557	requires_openssl_tls1_3
				20558	requires_openssl_3_x
				20559	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> secp521r1" \
				20560	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20561	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:P-521 -msg -tls1_3" \
				20562	0 \
				20563	-s "Protocol is TLSv1.3" \
				20564	-s "got named group: secp521r1(0019)" \
				20565	-s "Certificate verification was skipped" \
				20566	-s "HRR selected_group: secp521r1"
				20567
				20568	requires_config_enabled MBEDTLS_SSL_SRV_C
				20569	requires_config_enabled MBEDTLS_DEBUG_C
				20570	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20571	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20572	requires_openssl_tls1_3
				20573	requires_openssl_3_x
				20574	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> x25519" \
				20575	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20576	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:X25519 -msg -tls1_3" \
				20577	0 \
				20578	-s "Protocol is TLSv1.3" \
				20579	-s "got named group: x25519(001d)" \
				20580	-s "Certificate verification was skipped" \
				20581	-s "HRR selected_group: x25519"
				20582
				20583	requires_config_enabled MBEDTLS_SSL_SRV_C
				20584	requires_config_enabled MBEDTLS_DEBUG_C
				20585	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20586	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20587	requires_openssl_tls1_3
				20588	requires_openssl_3_x
				20589	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> x448" \
				20590	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20591	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:X448 -msg -tls1_3" \
				20592	0 \
				20593	-s "Protocol is TLSv1.3" \
				20594	-s "got named group: x448(001e)" \
				20595	-s "Certificate verification was skipped" \
				20596	-s "HRR selected_group: x448"
				20597
				20598	requires_config_enabled MBEDTLS_SSL_SRV_C
				20599	requires_config_enabled MBEDTLS_DEBUG_C
				20600	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20601	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20602	requires_openssl_tls1_3
				20603	requires_openssl_3_x
				20604	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> ffdhe2048" \
				20605	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20606	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:ffdhe2048 -msg -tls1_3" \
				20607	0 \
				20608	-s "Protocol is TLSv1.3" \
				20609	-s "got named group: ffdhe2048(0100)" \
				20610	-s "Certificate verification was skipped" \
				20611	-s "HRR selected_group: ffdhe2048"
				20612
				20613	requires_config_enabled MBEDTLS_SSL_SRV_C
				20614	requires_config_enabled MBEDTLS_DEBUG_C
				20615	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20616	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20617	requires_openssl_tls1_3
				20618	requires_openssl_3_x
				20619	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> ffdhe3072" \
				20620	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20621	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:ffdhe3072 -msg -tls1_3" \
				20622	0 \
				20623	-s "Protocol is TLSv1.3" \
				20624	-s "got named group: ffdhe3072(0101)" \
				20625	-s "Certificate verification was skipped" \
				20626	-s "HRR selected_group: ffdhe3072"
				20627
				20628	requires_config_enabled MBEDTLS_SSL_SRV_C
				20629	requires_config_enabled MBEDTLS_DEBUG_C
				20630	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20631	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20632	requires_openssl_tls1_3
				20633	requires_openssl_3_x
				20634	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> ffdhe4096" \
				20635	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20636	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:ffdhe4096 -msg -tls1_3" \
				20637	0 \
				20638	-s "Protocol is TLSv1.3" \
				20639	-s "got named group: ffdhe4096(0102)" \
				20640	-s "Certificate verification was skipped" \
				20641	-s "HRR selected_group: ffdhe4096"
				20642
				20643	requires_config_enabled MBEDTLS_SSL_SRV_C
				20644	requires_config_enabled MBEDTLS_DEBUG_C
				20645	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20646	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20647	requires_openssl_tls1_3
				20648	requires_openssl_3_x
				20649	run_test "TLS 1.3 O->m: HRR ffdhe8192 -> ffdhe6144" \
				20650	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20651	"$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe8192:ffdhe6144 -msg -tls1_3" \
				20652	0 \
				20653	-s "Protocol is TLSv1.3" \
				20654	-s "got named group: ffdhe6144(0103)" \
				20655	-s "Certificate verification was skipped" \
				20656	-s "HRR selected_group: ffdhe6144"
				20657
				20658	requires_config_enabled MBEDTLS_SSL_SRV_C
				20659	requires_config_enabled MBEDTLS_DEBUG_C
				20660	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20661	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20662	requires_gnutls_tls1_3
				20663	requires_gnutls_next_no_ticket
				20664	requires_gnutls_next_disable_tls13_compat
				20665	run_test "TLS 1.3 G->m: HRR secp256r1 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20666	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20667	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20668	0 \
				20669	-s "Protocol is TLSv1.3" \
				20670	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20671	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20672	-s "HRR selected_group: secp384r1"
				20673
				20674	requires_config_enabled MBEDTLS_SSL_SRV_C
				20675	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20676	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20677	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20678	requires_gnutls_tls1_3
				20679	requires_gnutls_next_no_ticket
				20680	requires_gnutls_next_disable_tls13_compat
				20681	run_test "TLS 1.3 G->m: HRR secp256r1 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20682	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20683	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20684	0 \
				20685	-s "Protocol is TLSv1.3" \
				20686	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20687	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20688	-s "HRR selected_group: secp521r1"
				20689
				20690	requires_config_enabled MBEDTLS_SSL_SRV_C
				20691	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20692	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20693	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20694	requires_gnutls_tls1_3
				20695	requires_gnutls_next_no_ticket
				20696	requires_gnutls_next_disable_tls13_compat
				20697	run_test "TLS 1.3 G->m: HRR secp256r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20698	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20699	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20700	0 \
				20701	-s "Protocol is TLSv1.3" \
				20702	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20703	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20704	-s "HRR selected_group: x25519"
				20705
				20706	requires_config_enabled MBEDTLS_SSL_SRV_C
				20707	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20708	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20709	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20710	requires_gnutls_tls1_3
				20711	requires_gnutls_next_no_ticket
				20712	requires_gnutls_next_disable_tls13_compat
				20713	run_test "TLS 1.3 G->m: HRR secp256r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20714	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20715	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20716	0 \
				20717	-s "Protocol is TLSv1.3" \
				20718	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20719	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20720	-s "HRR selected_group: x448"
				20721
				20722	requires_config_enabled MBEDTLS_SSL_SRV_C
				20723	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20724	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20725	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20726	requires_gnutls_tls1_3
				20727	requires_gnutls_next_no_ticket
				20728	requires_gnutls_next_disable_tls13_compat
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	20729	run_test "TLS 1.3 G->m: HRR secp256r1 -> ffdhe2048" \
				20730	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20731	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				20732	0 \
				20733	-s "Protocol is TLSv1.3" \
				20734	-s "got named group: ffdhe2048(0100)" \
				20735	-s "Certificate verification was skipped" \
				20736	-s "HRR selected_group: ffdhe2048"
				20737
				20738	requires_config_enabled MBEDTLS_SSL_SRV_C
				20739	requires_config_enabled MBEDTLS_DEBUG_C
				20740	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20741	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20742	requires_gnutls_tls1_3
				20743	requires_gnutls_next_no_ticket
				20744	requires_gnutls_next_disable_tls13_compat
				20745	run_test "TLS 1.3 G->m: HRR secp256r1 -> ffdhe3072" \
				20746	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20747	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				20748	0 \
				20749	-s "Protocol is TLSv1.3" \
				20750	-s "got named group: ffdhe3072(0101)" \
				20751	-s "Certificate verification was skipped" \
				20752	-s "HRR selected_group: ffdhe3072"
				20753
				20754	requires_config_enabled MBEDTLS_SSL_SRV_C
				20755	requires_config_enabled MBEDTLS_DEBUG_C
				20756	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20757	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20758	requires_gnutls_tls1_3
				20759	requires_gnutls_next_no_ticket
				20760	requires_gnutls_next_disable_tls13_compat
				20761	run_test "TLS 1.3 G->m: HRR secp256r1 -> ffdhe4096" \
				20762	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20763	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				20764	0 \
				20765	-s "Protocol is TLSv1.3" \
				20766	-s "got named group: ffdhe4096(0102)" \
				20767	-s "Certificate verification was skipped" \
				20768	-s "HRR selected_group: ffdhe4096"
				20769
				20770	requires_config_enabled MBEDTLS_SSL_SRV_C
				20771	requires_config_enabled MBEDTLS_DEBUG_C
				20772	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20773	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20774	requires_gnutls_tls1_3
				20775	requires_gnutls_next_no_ticket
				20776	requires_gnutls_next_disable_tls13_compat
				20777	run_test "TLS 1.3 G->m: HRR secp256r1 -> ffdhe6144" \
				20778	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20779	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				20780	0 \
				20781	-s "Protocol is TLSv1.3" \
				20782	-s "got named group: ffdhe6144(0103)" \
				20783	-s "Certificate verification was skipped" \
				20784	-s "HRR selected_group: ffdhe6144"
				20785
				20786	requires_config_enabled MBEDTLS_SSL_SRV_C
				20787	requires_config_enabled MBEDTLS_DEBUG_C
				20788	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20789	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20790	requires_gnutls_tls1_3
				20791	requires_gnutls_next_no_ticket
				20792	requires_gnutls_next_disable_tls13_compat
				20793	run_test "TLS 1.3 G->m: HRR secp256r1 -> ffdhe8192" \
				20794	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20795	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				20796	0 \
				20797	-s "Protocol is TLSv1.3" \
				20798	-s "got named group: ffdhe8192(0104)" \
				20799	-s "Certificate verification was skipped" \
				20800	-s "HRR selected_group: ffdhe8192"
				20801
				20802	requires_config_enabled MBEDTLS_SSL_SRV_C
				20803	requires_config_enabled MBEDTLS_DEBUG_C
				20804	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20805	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20806	requires_gnutls_tls1_3
				20807	requires_gnutls_next_no_ticket
				20808	requires_gnutls_next_disable_tls13_compat
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20809	run_test "TLS 1.3 G->m: HRR secp384r1 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20810	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20811	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20812	0 \
				20813	-s "Protocol is TLSv1.3" \
				20814	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20815	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20816	-s "HRR selected_group: secp256r1"
				20817
				20818	requires_config_enabled MBEDTLS_SSL_SRV_C
				20819	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20820	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20821	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20822	requires_gnutls_tls1_3
				20823	requires_gnutls_next_no_ticket
				20824	requires_gnutls_next_disable_tls13_compat
				20825	run_test "TLS 1.3 G->m: HRR secp384r1 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20826	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20827	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20828	0 \
				20829	-s "Protocol is TLSv1.3" \
				20830	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20831	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20832	-s "HRR selected_group: secp521r1"
				20833
				20834	requires_config_enabled MBEDTLS_SSL_SRV_C
				20835	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20836	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20837	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20838	requires_gnutls_tls1_3
				20839	requires_gnutls_next_no_ticket
				20840	requires_gnutls_next_disable_tls13_compat
				20841	run_test "TLS 1.3 G->m: HRR secp384r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20842	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20843	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20844	0 \
				20845	-s "Protocol is TLSv1.3" \
				20846	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20847	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20848	-s "HRR selected_group: x25519"
				20849
				20850	requires_config_enabled MBEDTLS_SSL_SRV_C
				20851	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20852	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20853	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20854	requires_gnutls_tls1_3
				20855	requires_gnutls_next_no_ticket
				20856	requires_gnutls_next_disable_tls13_compat
				20857	run_test "TLS 1.3 G->m: HRR secp384r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20858	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20859	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20860	0 \
				20861	-s "Protocol is TLSv1.3" \
				20862	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20863	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20864	-s "HRR selected_group: x448"
				20865
				20866	requires_config_enabled MBEDTLS_SSL_SRV_C
				20867	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20868	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20869	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20870	requires_gnutls_tls1_3
				20871	requires_gnutls_next_no_ticket
				20872	requires_gnutls_next_disable_tls13_compat
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	20873	run_test "TLS 1.3 G->m: HRR secp384r1 -> ffdhe2048" \
				20874	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20875	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				20876	0 \
				20877	-s "Protocol is TLSv1.3" \
				20878	-s "got named group: ffdhe2048(0100)" \
				20879	-s "Certificate verification was skipped" \
				20880	-s "HRR selected_group: ffdhe2048"
				20881
				20882	requires_config_enabled MBEDTLS_SSL_SRV_C
				20883	requires_config_enabled MBEDTLS_DEBUG_C
				20884	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20885	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20886	requires_gnutls_tls1_3
				20887	requires_gnutls_next_no_ticket
				20888	requires_gnutls_next_disable_tls13_compat
				20889	run_test "TLS 1.3 G->m: HRR secp384r1 -> ffdhe3072" \
				20890	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20891	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				20892	0 \
				20893	-s "Protocol is TLSv1.3" \
				20894	-s "got named group: ffdhe3072(0101)" \
				20895	-s "Certificate verification was skipped" \
				20896	-s "HRR selected_group: ffdhe3072"
				20897
				20898	requires_config_enabled MBEDTLS_SSL_SRV_C
				20899	requires_config_enabled MBEDTLS_DEBUG_C
				20900	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20901	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20902	requires_gnutls_tls1_3
				20903	requires_gnutls_next_no_ticket
				20904	requires_gnutls_next_disable_tls13_compat
				20905	run_test "TLS 1.3 G->m: HRR secp384r1 -> ffdhe4096" \
				20906	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20907	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				20908	0 \
				20909	-s "Protocol is TLSv1.3" \
				20910	-s "got named group: ffdhe4096(0102)" \
				20911	-s "Certificate verification was skipped" \
				20912	-s "HRR selected_group: ffdhe4096"
				20913
				20914	requires_config_enabled MBEDTLS_SSL_SRV_C
				20915	requires_config_enabled MBEDTLS_DEBUG_C
				20916	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20917	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20918	requires_gnutls_tls1_3
				20919	requires_gnutls_next_no_ticket
				20920	requires_gnutls_next_disable_tls13_compat
				20921	run_test "TLS 1.3 G->m: HRR secp384r1 -> ffdhe6144" \
				20922	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20923	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				20924	0 \
				20925	-s "Protocol is TLSv1.3" \
				20926	-s "got named group: ffdhe6144(0103)" \
				20927	-s "Certificate verification was skipped" \
				20928	-s "HRR selected_group: ffdhe6144"
				20929
				20930	requires_config_enabled MBEDTLS_SSL_SRV_C
				20931	requires_config_enabled MBEDTLS_DEBUG_C
				20932	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20933	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20934	requires_gnutls_tls1_3
				20935	requires_gnutls_next_no_ticket
				20936	requires_gnutls_next_disable_tls13_compat
				20937	run_test "TLS 1.3 G->m: HRR secp384r1 -> ffdhe8192" \
				20938	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				20939	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				20940	0 \
				20941	-s "Protocol is TLSv1.3" \
				20942	-s "got named group: ffdhe8192(0104)" \
				20943	-s "Certificate verification was skipped" \
				20944	-s "HRR selected_group: ffdhe8192"
				20945
				20946	requires_config_enabled MBEDTLS_SSL_SRV_C
				20947	requires_config_enabled MBEDTLS_DEBUG_C
				20948	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				20949	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20950	requires_gnutls_tls1_3
				20951	requires_gnutls_next_no_ticket
				20952	requires_gnutls_next_disable_tls13_compat
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20953	run_test "TLS 1.3 G->m: HRR secp521r1 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20954	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20955	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20956	0 \
				20957	-s "Protocol is TLSv1.3" \
				20958	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20959	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20960	-s "HRR selected_group: secp256r1"
				20961
				20962	requires_config_enabled MBEDTLS_SSL_SRV_C
				20963	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20964	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20965	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20966	requires_gnutls_tls1_3
				20967	requires_gnutls_next_no_ticket
				20968	requires_gnutls_next_disable_tls13_compat
				20969	run_test "TLS 1.3 G->m: HRR secp521r1 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20970	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20971	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20972	0 \
				20973	-s "Protocol is TLSv1.3" \
				20974	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20975	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20976	-s "HRR selected_group: secp384r1"
				20977
				20978	requires_config_enabled MBEDTLS_SSL_SRV_C
				20979	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20980	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20981	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20982	requires_gnutls_tls1_3
				20983	requires_gnutls_next_no_ticket
				20984	requires_gnutls_next_disable_tls13_compat
				20985	run_test "TLS 1.3 G->m: HRR secp521r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	20986	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	20987	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20988	0 \
				20989	-s "Protocol is TLSv1.3" \
				20990	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	20991	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20992	-s "HRR selected_group: x25519"
				20993
				20994	requires_config_enabled MBEDTLS_SSL_SRV_C
				20995	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	20996	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	20997	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				20998	requires_gnutls_tls1_3
				20999	requires_gnutls_next_no_ticket
				21000	requires_gnutls_next_disable_tls13_compat
				21001	run_test "TLS 1.3 G->m: HRR secp521r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21002	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21003	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21004	0 \
				21005	-s "Protocol is TLSv1.3" \
				21006	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21007	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21008	-s "HRR selected_group: x448"
				21009
				21010	requires_config_enabled MBEDTLS_SSL_SRV_C
				21011	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	21012	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21013	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21014	requires_gnutls_tls1_3
				21015	requires_gnutls_next_no_ticket
				21016	requires_gnutls_next_disable_tls13_compat
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	21017	run_test "TLS 1.3 G->m: HRR secp521r1 -> ffdhe2048" \
				21018	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21019	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				21020	0 \
				21021	-s "Protocol is TLSv1.3" \
				21022	-s "got named group: ffdhe2048(0100)" \
				21023	-s "Certificate verification was skipped" \
				21024	-s "HRR selected_group: ffdhe2048"
				21025
				21026	requires_config_enabled MBEDTLS_SSL_SRV_C
				21027	requires_config_enabled MBEDTLS_DEBUG_C
				21028	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21029	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21030	requires_gnutls_tls1_3
				21031	requires_gnutls_next_no_ticket
				21032	requires_gnutls_next_disable_tls13_compat
				21033	run_test "TLS 1.3 G->m: HRR secp521r1 -> ffdhe3072" \
				21034	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21035	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				21036	0 \
				21037	-s "Protocol is TLSv1.3" \
				21038	-s "got named group: ffdhe3072(0101)" \
				21039	-s "Certificate verification was skipped" \
				21040	-s "HRR selected_group: ffdhe3072"
				21041
				21042	requires_config_enabled MBEDTLS_SSL_SRV_C
				21043	requires_config_enabled MBEDTLS_DEBUG_C
				21044	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21045	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21046	requires_gnutls_tls1_3
				21047	requires_gnutls_next_no_ticket
				21048	requires_gnutls_next_disable_tls13_compat
				21049	run_test "TLS 1.3 G->m: HRR secp521r1 -> ffdhe4096" \
				21050	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21051	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				21052	0 \
				21053	-s "Protocol is TLSv1.3" \
				21054	-s "got named group: ffdhe4096(0102)" \
				21055	-s "Certificate verification was skipped" \
				21056	-s "HRR selected_group: ffdhe4096"
				21057
				21058	requires_config_enabled MBEDTLS_SSL_SRV_C
				21059	requires_config_enabled MBEDTLS_DEBUG_C
				21060	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21061	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21062	requires_gnutls_tls1_3
				21063	requires_gnutls_next_no_ticket
				21064	requires_gnutls_next_disable_tls13_compat
				21065	run_test "TLS 1.3 G->m: HRR secp521r1 -> ffdhe6144" \
				21066	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21067	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				21068	0 \
				21069	-s "Protocol is TLSv1.3" \
				21070	-s "got named group: ffdhe6144(0103)" \
				21071	-s "Certificate verification was skipped" \
				21072	-s "HRR selected_group: ffdhe6144"
				21073
				21074	requires_config_enabled MBEDTLS_SSL_SRV_C
				21075	requires_config_enabled MBEDTLS_DEBUG_C
				21076	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21077	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21078	requires_gnutls_tls1_3
				21079	requires_gnutls_next_no_ticket
				21080	requires_gnutls_next_disable_tls13_compat
				21081	run_test "TLS 1.3 G->m: HRR secp521r1 -> ffdhe8192" \
				21082	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21083	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				21084	0 \
				21085	-s "Protocol is TLSv1.3" \
				21086	-s "got named group: ffdhe8192(0104)" \
				21087	-s "Certificate verification was skipped" \
				21088	-s "HRR selected_group: ffdhe8192"
				21089
				21090	requires_config_enabled MBEDTLS_SSL_SRV_C
				21091	requires_config_enabled MBEDTLS_DEBUG_C
				21092	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21093	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21094	requires_gnutls_tls1_3
				21095	requires_gnutls_next_no_ticket
				21096	requires_gnutls_next_disable_tls13_compat
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21097	run_test "TLS 1.3 G->m: HRR x25519 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21098	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21099	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21100	0 \
				21101	-s "Protocol is TLSv1.3" \
				21102	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21103	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21104	-s "HRR selected_group: secp256r1"
				21105
				21106	requires_config_enabled MBEDTLS_SSL_SRV_C
				21107	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	21108	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21109	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21110	requires_gnutls_tls1_3
				21111	requires_gnutls_next_no_ticket
				21112	requires_gnutls_next_disable_tls13_compat
				21113	run_test "TLS 1.3 G->m: HRR x25519 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21114	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21115	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21116	0 \
				21117	-s "Protocol is TLSv1.3" \
				21118	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21119	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21120	-s "HRR selected_group: secp384r1"
				21121
				21122	requires_config_enabled MBEDTLS_SSL_SRV_C
				21123	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	21124	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21125	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21126	requires_gnutls_tls1_3
				21127	requires_gnutls_next_no_ticket
				21128	requires_gnutls_next_disable_tls13_compat
				21129	run_test "TLS 1.3 G->m: HRR x25519 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21130	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21131	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21132	0 \
				21133	-s "Protocol is TLSv1.3" \
				21134	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21135	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21136	-s "HRR selected_group: secp521r1"
				21137
				21138	requires_config_enabled MBEDTLS_SSL_SRV_C
				21139	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	21140	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21141	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21142	requires_gnutls_tls1_3
				21143	requires_gnutls_next_no_ticket
				21144	requires_gnutls_next_disable_tls13_compat
				21145	run_test "TLS 1.3 G->m: HRR x25519 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21146	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21147	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21148	0 \
				21149	-s "Protocol is TLSv1.3" \
				21150	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21151	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21152	-s "HRR selected_group: x448"
				21153
				21154	requires_config_enabled MBEDTLS_SSL_SRV_C
				21155	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	21156	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21157	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21158	requires_gnutls_tls1_3
				21159	requires_gnutls_next_no_ticket
				21160	requires_gnutls_next_disable_tls13_compat
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	21161	run_test "TLS 1.3 G->m: HRR x25519 -> ffdhe2048" \
				21162	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21163	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				21164	0 \
				21165	-s "Protocol is TLSv1.3" \
				21166	-s "got named group: ffdhe2048(0100)" \
				21167	-s "Certificate verification was skipped" \
				21168	-s "HRR selected_group: ffdhe2048"
				21169
				21170	requires_config_enabled MBEDTLS_SSL_SRV_C
				21171	requires_config_enabled MBEDTLS_DEBUG_C
				21172	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21173	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21174	requires_gnutls_tls1_3
				21175	requires_gnutls_next_no_ticket
				21176	requires_gnutls_next_disable_tls13_compat
				21177	run_test "TLS 1.3 G->m: HRR x25519 -> ffdhe3072" \
				21178	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21179	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				21180	0 \
				21181	-s "Protocol is TLSv1.3" \
				21182	-s "got named group: ffdhe3072(0101)" \
				21183	-s "Certificate verification was skipped" \
				21184	-s "HRR selected_group: ffdhe3072"
				21185
				21186	requires_config_enabled MBEDTLS_SSL_SRV_C
				21187	requires_config_enabled MBEDTLS_DEBUG_C
				21188	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21189	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21190	requires_gnutls_tls1_3
				21191	requires_gnutls_next_no_ticket
				21192	requires_gnutls_next_disable_tls13_compat
				21193	run_test "TLS 1.3 G->m: HRR x25519 -> ffdhe4096" \
				21194	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21195	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				21196	0 \
				21197	-s "Protocol is TLSv1.3" \
				21198	-s "got named group: ffdhe4096(0102)" \
				21199	-s "Certificate verification was skipped" \
				21200	-s "HRR selected_group: ffdhe4096"
				21201
				21202	requires_config_enabled MBEDTLS_SSL_SRV_C
				21203	requires_config_enabled MBEDTLS_DEBUG_C
				21204	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21205	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21206	requires_gnutls_tls1_3
				21207	requires_gnutls_next_no_ticket
				21208	requires_gnutls_next_disable_tls13_compat
				21209	run_test "TLS 1.3 G->m: HRR x25519 -> ffdhe6144" \
				21210	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21211	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				21212	0 \
				21213	-s "Protocol is TLSv1.3" \
				21214	-s "got named group: ffdhe6144(0103)" \
				21215	-s "Certificate verification was skipped" \
				21216	-s "HRR selected_group: ffdhe6144"
				21217
				21218	requires_config_enabled MBEDTLS_SSL_SRV_C
				21219	requires_config_enabled MBEDTLS_DEBUG_C
				21220	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21221	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21222	requires_gnutls_tls1_3
				21223	requires_gnutls_next_no_ticket
				21224	requires_gnutls_next_disable_tls13_compat
				21225	run_test "TLS 1.3 G->m: HRR x25519 -> ffdhe8192" \
				21226	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21227	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				21228	0 \
				21229	-s "Protocol is TLSv1.3" \
				21230	-s "got named group: ffdhe8192(0104)" \
				21231	-s "Certificate verification was skipped" \
				21232	-s "HRR selected_group: ffdhe8192"
				21233
				21234	requires_config_enabled MBEDTLS_SSL_SRV_C
				21235	requires_config_enabled MBEDTLS_DEBUG_C
				21236	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21237	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21238	requires_gnutls_tls1_3
				21239	requires_gnutls_next_no_ticket
				21240	requires_gnutls_next_disable_tls13_compat
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21241	run_test "TLS 1.3 G->m: HRR x448 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21242	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21243	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21244	0 \
				21245	-s "Protocol is TLSv1.3" \
				21246	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21247	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21248	-s "HRR selected_group: secp256r1"
				21249
				21250	requires_config_enabled MBEDTLS_SSL_SRV_C
				21251	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	21252	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21253	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21254	requires_gnutls_tls1_3
				21255	requires_gnutls_next_no_ticket
				21256	requires_gnutls_next_disable_tls13_compat
				21257	run_test "TLS 1.3 G->m: HRR x448 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21258	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21259	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21260	0 \
				21261	-s "Protocol is TLSv1.3" \
				21262	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21263	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21264	-s "HRR selected_group: secp384r1"
				21265
				21266	requires_config_enabled MBEDTLS_SSL_SRV_C
				21267	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	21268	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21269	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21270	requires_gnutls_tls1_3
				21271	requires_gnutls_next_no_ticket
				21272	requires_gnutls_next_disable_tls13_compat
				21273	run_test "TLS 1.3 G->m: HRR x448 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21274	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21275	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21276	0 \
				21277	-s "Protocol is TLSv1.3" \
				21278	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21279	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21280	-s "HRR selected_group: secp521r1"
				21281
				21282	requires_config_enabled MBEDTLS_SSL_SRV_C
				21283	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	21284	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21285	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21286	requires_gnutls_tls1_3
				21287	requires_gnutls_next_no_ticket
				21288	requires_gnutls_next_disable_tls13_compat
				21289	run_test "TLS 1.3 G->m: HRR x448 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	21290	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	21291	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21292	0 \
				21293	-s "Protocol is TLSv1.3" \
				21294	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	21295	-s "Certificate verification was skipped" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	21296	-s "HRR selected_group: x25519"
				21297
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	21298	requires_config_enabled MBEDTLS_SSL_SRV_C
				21299	requires_config_enabled MBEDTLS_DEBUG_C
				21300	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21301	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21302	requires_gnutls_tls1_3
				21303	requires_gnutls_next_no_ticket
				21304	requires_gnutls_next_disable_tls13_compat
				21305	run_test "TLS 1.3 G->m: HRR x448 -> ffdhe2048" \
				21306	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21307	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				21308	0 \
				21309	-s "Protocol is TLSv1.3" \
				21310	-s "got named group: ffdhe2048(0100)" \
				21311	-s "Certificate verification was skipped" \
				21312	-s "HRR selected_group: ffdhe2048"
				21313
				21314	requires_config_enabled MBEDTLS_SSL_SRV_C
				21315	requires_config_enabled MBEDTLS_DEBUG_C
				21316	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21317	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21318	requires_gnutls_tls1_3
				21319	requires_gnutls_next_no_ticket
				21320	requires_gnutls_next_disable_tls13_compat
				21321	run_test "TLS 1.3 G->m: HRR x448 -> ffdhe3072" \
				21322	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21323	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				21324	0 \
				21325	-s "Protocol is TLSv1.3" \
				21326	-s "got named group: ffdhe3072(0101)" \
				21327	-s "Certificate verification was skipped" \
				21328	-s "HRR selected_group: ffdhe3072"
				21329
				21330	requires_config_enabled MBEDTLS_SSL_SRV_C
				21331	requires_config_enabled MBEDTLS_DEBUG_C
				21332	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21333	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21334	requires_gnutls_tls1_3
				21335	requires_gnutls_next_no_ticket
				21336	requires_gnutls_next_disable_tls13_compat
				21337	run_test "TLS 1.3 G->m: HRR x448 -> ffdhe4096" \
				21338	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21339	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				21340	0 \
				21341	-s "Protocol is TLSv1.3" \
				21342	-s "got named group: ffdhe4096(0102)" \
				21343	-s "Certificate verification was skipped" \
				21344	-s "HRR selected_group: ffdhe4096"
				21345
				21346	requires_config_enabled MBEDTLS_SSL_SRV_C
				21347	requires_config_enabled MBEDTLS_DEBUG_C
				21348	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21349	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21350	requires_gnutls_tls1_3
				21351	requires_gnutls_next_no_ticket
				21352	requires_gnutls_next_disable_tls13_compat
				21353	run_test "TLS 1.3 G->m: HRR x448 -> ffdhe6144" \
				21354	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21355	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				21356	0 \
				21357	-s "Protocol is TLSv1.3" \
				21358	-s "got named group: ffdhe6144(0103)" \
				21359	-s "Certificate verification was skipped" \
				21360	-s "HRR selected_group: ffdhe6144"
				21361
				21362	requires_config_enabled MBEDTLS_SSL_SRV_C
				21363	requires_config_enabled MBEDTLS_DEBUG_C
				21364	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21365	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21366	requires_gnutls_tls1_3
				21367	requires_gnutls_next_no_ticket
				21368	requires_gnutls_next_disable_tls13_compat
				21369	run_test "TLS 1.3 G->m: HRR x448 -> ffdhe8192" \
				21370	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21371	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				21372	0 \
				21373	-s "Protocol is TLSv1.3" \
				21374	-s "got named group: ffdhe8192(0104)" \
				21375	-s "Certificate verification was skipped" \
				21376	-s "HRR selected_group: ffdhe8192"
				21377
				21378	requires_config_enabled MBEDTLS_SSL_SRV_C
				21379	requires_config_enabled MBEDTLS_DEBUG_C
				21380	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21381	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21382	requires_gnutls_tls1_3
				21383	requires_gnutls_next_no_ticket
				21384	requires_gnutls_next_disable_tls13_compat
				21385	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> secp256r1" \
				21386	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21387	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				21388	0 \
				21389	-s "Protocol is TLSv1.3" \
				21390	-s "got named group: secp256r1(0017)" \
				21391	-s "Certificate verification was skipped" \
				21392	-s "HRR selected_group: secp256r1"
				21393
				21394	requires_config_enabled MBEDTLS_SSL_SRV_C
				21395	requires_config_enabled MBEDTLS_DEBUG_C
				21396	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21397	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21398	requires_gnutls_tls1_3
				21399	requires_gnutls_next_no_ticket
				21400	requires_gnutls_next_disable_tls13_compat
				21401	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> secp384r1" \
				21402	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21403	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				21404	0 \
				21405	-s "Protocol is TLSv1.3" \
				21406	-s "got named group: secp384r1(0018)" \
				21407	-s "Certificate verification was skipped" \
				21408	-s "HRR selected_group: secp384r1"
				21409
				21410	requires_config_enabled MBEDTLS_SSL_SRV_C
				21411	requires_config_enabled MBEDTLS_DEBUG_C
				21412	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21413	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21414	requires_gnutls_tls1_3
				21415	requires_gnutls_next_no_ticket
				21416	requires_gnutls_next_disable_tls13_compat
				21417	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> secp521r1" \
				21418	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21419	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				21420	0 \
				21421	-s "Protocol is TLSv1.3" \
				21422	-s "got named group: secp521r1(0019)" \
				21423	-s "Certificate verification was skipped" \
				21424	-s "HRR selected_group: secp521r1"
				21425
				21426	requires_config_enabled MBEDTLS_SSL_SRV_C
				21427	requires_config_enabled MBEDTLS_DEBUG_C
				21428	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21429	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21430	requires_gnutls_tls1_3
				21431	requires_gnutls_next_no_ticket
				21432	requires_gnutls_next_disable_tls13_compat
				21433	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> x25519" \
				21434	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21435	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				21436	0 \
				21437	-s "Protocol is TLSv1.3" \
				21438	-s "got named group: x25519(001d)" \
				21439	-s "Certificate verification was skipped" \
				21440	-s "HRR selected_group: x25519"
				21441
				21442	requires_config_enabled MBEDTLS_SSL_SRV_C
				21443	requires_config_enabled MBEDTLS_DEBUG_C
				21444	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21445	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21446	requires_gnutls_tls1_3
				21447	requires_gnutls_next_no_ticket
				21448	requires_gnutls_next_disable_tls13_compat
				21449	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> x448" \
				21450	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21451	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				21452	0 \
				21453	-s "Protocol is TLSv1.3" \
				21454	-s "got named group: x448(001e)" \
				21455	-s "Certificate verification was skipped" \
				21456	-s "HRR selected_group: x448"
				21457
				21458	requires_config_enabled MBEDTLS_SSL_SRV_C
				21459	requires_config_enabled MBEDTLS_DEBUG_C
				21460	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21461	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21462	requires_gnutls_tls1_3
				21463	requires_gnutls_next_no_ticket
				21464	requires_gnutls_next_disable_tls13_compat
				21465	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> ffdhe3072" \
				21466	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21467	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				21468	0 \
				21469	-s "Protocol is TLSv1.3" \
				21470	-s "got named group: ffdhe3072(0101)" \
				21471	-s "Certificate verification was skipped" \
				21472	-s "HRR selected_group: ffdhe3072"
				21473
				21474	requires_config_enabled MBEDTLS_SSL_SRV_C
				21475	requires_config_enabled MBEDTLS_DEBUG_C
				21476	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21477	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21478	requires_gnutls_tls1_3
				21479	requires_gnutls_next_no_ticket
				21480	requires_gnutls_next_disable_tls13_compat
				21481	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> ffdhe4096" \
				21482	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21483	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				21484	0 \
				21485	-s "Protocol is TLSv1.3" \
				21486	-s "got named group: ffdhe4096(0102)" \
				21487	-s "Certificate verification was skipped" \
				21488	-s "HRR selected_group: ffdhe4096"
				21489
				21490	requires_config_enabled MBEDTLS_SSL_SRV_C
				21491	requires_config_enabled MBEDTLS_DEBUG_C
				21492	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21493	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21494	requires_gnutls_tls1_3
				21495	requires_gnutls_next_no_ticket
				21496	requires_gnutls_next_disable_tls13_compat
				21497	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> ffdhe6144" \
				21498	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21499	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				21500	0 \
				21501	-s "Protocol is TLSv1.3" \
				21502	-s "got named group: ffdhe6144(0103)" \
				21503	-s "Certificate verification was skipped" \
				21504	-s "HRR selected_group: ffdhe6144"
				21505
				21506	requires_config_enabled MBEDTLS_SSL_SRV_C
				21507	requires_config_enabled MBEDTLS_DEBUG_C
				21508	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21509	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21510	requires_gnutls_tls1_3
				21511	requires_gnutls_next_no_ticket
				21512	requires_gnutls_next_disable_tls13_compat
				21513	run_test "TLS 1.3 G->m: HRR ffdhe2048 -> ffdhe8192" \
				21514	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21515	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				21516	0 \
				21517	-s "Protocol is TLSv1.3" \
				21518	-s "got named group: ffdhe8192(0104)" \
				21519	-s "Certificate verification was skipped" \
				21520	-s "HRR selected_group: ffdhe8192"
				21521
				21522	requires_config_enabled MBEDTLS_SSL_SRV_C
				21523	requires_config_enabled MBEDTLS_DEBUG_C
				21524	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21525	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21526	requires_gnutls_tls1_3
				21527	requires_gnutls_next_no_ticket
				21528	requires_gnutls_next_disable_tls13_compat
				21529	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> secp256r1" \
				21530	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21531	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				21532	0 \
				21533	-s "Protocol is TLSv1.3" \
				21534	-s "got named group: secp256r1(0017)" \
				21535	-s "Certificate verification was skipped" \
				21536	-s "HRR selected_group: secp256r1"
				21537
				21538	requires_config_enabled MBEDTLS_SSL_SRV_C
				21539	requires_config_enabled MBEDTLS_DEBUG_C
				21540	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21541	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21542	requires_gnutls_tls1_3
				21543	requires_gnutls_next_no_ticket
				21544	requires_gnutls_next_disable_tls13_compat
				21545	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> secp384r1" \
				21546	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21547	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				21548	0 \
				21549	-s "Protocol is TLSv1.3" \
				21550	-s "got named group: secp384r1(0018)" \
				21551	-s "Certificate verification was skipped" \
				21552	-s "HRR selected_group: secp384r1"
				21553
				21554	requires_config_enabled MBEDTLS_SSL_SRV_C
				21555	requires_config_enabled MBEDTLS_DEBUG_C
				21556	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21557	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21558	requires_gnutls_tls1_3
				21559	requires_gnutls_next_no_ticket
				21560	requires_gnutls_next_disable_tls13_compat
				21561	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> secp521r1" \
				21562	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21563	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				21564	0 \
				21565	-s "Protocol is TLSv1.3" \
				21566	-s "got named group: secp521r1(0019)" \
				21567	-s "Certificate verification was skipped" \
				21568	-s "HRR selected_group: secp521r1"
				21569
				21570	requires_config_enabled MBEDTLS_SSL_SRV_C
				21571	requires_config_enabled MBEDTLS_DEBUG_C
				21572	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21573	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21574	requires_gnutls_tls1_3
				21575	requires_gnutls_next_no_ticket
				21576	requires_gnutls_next_disable_tls13_compat
				21577	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> x25519" \
				21578	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21579	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				21580	0 \
				21581	-s "Protocol is TLSv1.3" \
				21582	-s "got named group: x25519(001d)" \
				21583	-s "Certificate verification was skipped" \
				21584	-s "HRR selected_group: x25519"
				21585
				21586	requires_config_enabled MBEDTLS_SSL_SRV_C
				21587	requires_config_enabled MBEDTLS_DEBUG_C
				21588	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21589	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21590	requires_gnutls_tls1_3
				21591	requires_gnutls_next_no_ticket
				21592	requires_gnutls_next_disable_tls13_compat
				21593	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> x448" \
				21594	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21595	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				21596	0 \
				21597	-s "Protocol is TLSv1.3" \
				21598	-s "got named group: x448(001e)" \
				21599	-s "Certificate verification was skipped" \
				21600	-s "HRR selected_group: x448"
				21601
				21602	requires_config_enabled MBEDTLS_SSL_SRV_C
				21603	requires_config_enabled MBEDTLS_DEBUG_C
				21604	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21605	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21606	requires_gnutls_tls1_3
				21607	requires_gnutls_next_no_ticket
				21608	requires_gnutls_next_disable_tls13_compat
				21609	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> ffdhe2048" \
				21610	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21611	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				21612	0 \
				21613	-s "Protocol is TLSv1.3" \
				21614	-s "got named group: ffdhe2048(0100)" \
				21615	-s "Certificate verification was skipped" \
				21616	-s "HRR selected_group: ffdhe2048"
				21617
				21618	requires_config_enabled MBEDTLS_SSL_SRV_C
				21619	requires_config_enabled MBEDTLS_DEBUG_C
				21620	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21621	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21622	requires_gnutls_tls1_3
				21623	requires_gnutls_next_no_ticket
				21624	requires_gnutls_next_disable_tls13_compat
				21625	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> ffdhe4096" \
				21626	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21627	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				21628	0 \
				21629	-s "Protocol is TLSv1.3" \
				21630	-s "got named group: ffdhe4096(0102)" \
				21631	-s "Certificate verification was skipped" \
				21632	-s "HRR selected_group: ffdhe4096"
				21633
				21634	requires_config_enabled MBEDTLS_SSL_SRV_C
				21635	requires_config_enabled MBEDTLS_DEBUG_C
				21636	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21637	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21638	requires_gnutls_tls1_3
				21639	requires_gnutls_next_no_ticket
				21640	requires_gnutls_next_disable_tls13_compat
				21641	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> ffdhe6144" \
				21642	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21643	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				21644	0 \
				21645	-s "Protocol is TLSv1.3" \
				21646	-s "got named group: ffdhe6144(0103)" \
				21647	-s "Certificate verification was skipped" \
				21648	-s "HRR selected_group: ffdhe6144"
				21649
				21650	requires_config_enabled MBEDTLS_SSL_SRV_C
				21651	requires_config_enabled MBEDTLS_DEBUG_C
				21652	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21653	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21654	requires_gnutls_tls1_3
				21655	requires_gnutls_next_no_ticket
				21656	requires_gnutls_next_disable_tls13_compat
				21657	run_test "TLS 1.3 G->m: HRR ffdhe3072 -> ffdhe8192" \
				21658	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21659	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				21660	0 \
				21661	-s "Protocol is TLSv1.3" \
				21662	-s "got named group: ffdhe8192(0104)" \
				21663	-s "Certificate verification was skipped" \
				21664	-s "HRR selected_group: ffdhe8192"
				21665
				21666	requires_config_enabled MBEDTLS_SSL_SRV_C
				21667	requires_config_enabled MBEDTLS_DEBUG_C
				21668	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21669	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21670	requires_gnutls_tls1_3
				21671	requires_gnutls_next_no_ticket
				21672	requires_gnutls_next_disable_tls13_compat
				21673	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> secp256r1" \
				21674	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21675	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				21676	0 \
				21677	-s "Protocol is TLSv1.3" \
				21678	-s "got named group: secp256r1(0017)" \
				21679	-s "Certificate verification was skipped" \
				21680	-s "HRR selected_group: secp256r1"
				21681
				21682	requires_config_enabled MBEDTLS_SSL_SRV_C
				21683	requires_config_enabled MBEDTLS_DEBUG_C
				21684	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21685	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21686	requires_gnutls_tls1_3
				21687	requires_gnutls_next_no_ticket
				21688	requires_gnutls_next_disable_tls13_compat
				21689	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> secp384r1" \
				21690	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21691	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				21692	0 \
				21693	-s "Protocol is TLSv1.3" \
				21694	-s "got named group: secp384r1(0018)" \
				21695	-s "Certificate verification was skipped" \
				21696	-s "HRR selected_group: secp384r1"
				21697
				21698	requires_config_enabled MBEDTLS_SSL_SRV_C
				21699	requires_config_enabled MBEDTLS_DEBUG_C
				21700	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21701	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21702	requires_gnutls_tls1_3
				21703	requires_gnutls_next_no_ticket
				21704	requires_gnutls_next_disable_tls13_compat
				21705	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> secp521r1" \
				21706	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21707	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				21708	0 \
				21709	-s "Protocol is TLSv1.3" \
				21710	-s "got named group: secp521r1(0019)" \
				21711	-s "Certificate verification was skipped" \
				21712	-s "HRR selected_group: secp521r1"
				21713
				21714	requires_config_enabled MBEDTLS_SSL_SRV_C
				21715	requires_config_enabled MBEDTLS_DEBUG_C
				21716	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21717	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21718	requires_gnutls_tls1_3
				21719	requires_gnutls_next_no_ticket
				21720	requires_gnutls_next_disable_tls13_compat
				21721	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> x25519" \
				21722	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21723	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				21724	0 \
				21725	-s "Protocol is TLSv1.3" \
				21726	-s "got named group: x25519(001d)" \
				21727	-s "Certificate verification was skipped" \
				21728	-s "HRR selected_group: x25519"
				21729
				21730	requires_config_enabled MBEDTLS_SSL_SRV_C
				21731	requires_config_enabled MBEDTLS_DEBUG_C
				21732	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21733	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21734	requires_gnutls_tls1_3
				21735	requires_gnutls_next_no_ticket
				21736	requires_gnutls_next_disable_tls13_compat
				21737	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> x448" \
				21738	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21739	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				21740	0 \
				21741	-s "Protocol is TLSv1.3" \
				21742	-s "got named group: x448(001e)" \
				21743	-s "Certificate verification was skipped" \
				21744	-s "HRR selected_group: x448"
				21745
				21746	requires_config_enabled MBEDTLS_SSL_SRV_C
				21747	requires_config_enabled MBEDTLS_DEBUG_C
				21748	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21749	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21750	requires_gnutls_tls1_3
				21751	requires_gnutls_next_no_ticket
				21752	requires_gnutls_next_disable_tls13_compat
				21753	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> ffdhe2048" \
				21754	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21755	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				21756	0 \
				21757	-s "Protocol is TLSv1.3" \
				21758	-s "got named group: ffdhe2048(0100)" \
				21759	-s "Certificate verification was skipped" \
				21760	-s "HRR selected_group: ffdhe2048"
				21761
				21762	requires_config_enabled MBEDTLS_SSL_SRV_C
				21763	requires_config_enabled MBEDTLS_DEBUG_C
				21764	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21765	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21766	requires_gnutls_tls1_3
				21767	requires_gnutls_next_no_ticket
				21768	requires_gnutls_next_disable_tls13_compat
				21769	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> ffdhe3072" \
				21770	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21771	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				21772	0 \
				21773	-s "Protocol is TLSv1.3" \
				21774	-s "got named group: ffdhe3072(0101)" \
				21775	-s "Certificate verification was skipped" \
				21776	-s "HRR selected_group: ffdhe3072"
				21777
				21778	requires_config_enabled MBEDTLS_SSL_SRV_C
				21779	requires_config_enabled MBEDTLS_DEBUG_C
				21780	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21781	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21782	requires_gnutls_tls1_3
				21783	requires_gnutls_next_no_ticket
				21784	requires_gnutls_next_disable_tls13_compat
				21785	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> ffdhe6144" \
				21786	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21787	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				21788	0 \
				21789	-s "Protocol is TLSv1.3" \
				21790	-s "got named group: ffdhe6144(0103)" \
				21791	-s "Certificate verification was skipped" \
				21792	-s "HRR selected_group: ffdhe6144"
				21793
				21794	requires_config_enabled MBEDTLS_SSL_SRV_C
				21795	requires_config_enabled MBEDTLS_DEBUG_C
				21796	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21797	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21798	requires_gnutls_tls1_3
				21799	requires_gnutls_next_no_ticket
				21800	requires_gnutls_next_disable_tls13_compat
				21801	run_test "TLS 1.3 G->m: HRR ffdhe4096 -> ffdhe8192" \
				21802	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21803	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				21804	0 \
				21805	-s "Protocol is TLSv1.3" \
				21806	-s "got named group: ffdhe8192(0104)" \
				21807	-s "Certificate verification was skipped" \
				21808	-s "HRR selected_group: ffdhe8192"
				21809
				21810	requires_config_enabled MBEDTLS_SSL_SRV_C
				21811	requires_config_enabled MBEDTLS_DEBUG_C
				21812	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21813	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21814	requires_gnutls_tls1_3
				21815	requires_gnutls_next_no_ticket
				21816	requires_gnutls_next_disable_tls13_compat
				21817	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> secp256r1" \
				21818	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21819	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				21820	0 \
				21821	-s "Protocol is TLSv1.3" \
				21822	-s "got named group: secp256r1(0017)" \
				21823	-s "Certificate verification was skipped" \
				21824	-s "HRR selected_group: secp256r1"
				21825
				21826	requires_config_enabled MBEDTLS_SSL_SRV_C
				21827	requires_config_enabled MBEDTLS_DEBUG_C
				21828	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21829	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21830	requires_gnutls_tls1_3
				21831	requires_gnutls_next_no_ticket
				21832	requires_gnutls_next_disable_tls13_compat
				21833	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> secp384r1" \
				21834	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21835	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				21836	0 \
				21837	-s "Protocol is TLSv1.3" \
				21838	-s "got named group: secp384r1(0018)" \
				21839	-s "Certificate verification was skipped" \
				21840	-s "HRR selected_group: secp384r1"
				21841
				21842	requires_config_enabled MBEDTLS_SSL_SRV_C
				21843	requires_config_enabled MBEDTLS_DEBUG_C
				21844	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21845	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21846	requires_gnutls_tls1_3
				21847	requires_gnutls_next_no_ticket
				21848	requires_gnutls_next_disable_tls13_compat
				21849	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> secp521r1" \
				21850	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21851	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				21852	0 \
				21853	-s "Protocol is TLSv1.3" \
				21854	-s "got named group: secp521r1(0019)" \
				21855	-s "Certificate verification was skipped" \
				21856	-s "HRR selected_group: secp521r1"
				21857
				21858	requires_config_enabled MBEDTLS_SSL_SRV_C
				21859	requires_config_enabled MBEDTLS_DEBUG_C
				21860	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21861	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21862	requires_gnutls_tls1_3
				21863	requires_gnutls_next_no_ticket
				21864	requires_gnutls_next_disable_tls13_compat
				21865	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> x25519" \
				21866	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21867	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				21868	0 \
				21869	-s "Protocol is TLSv1.3" \
				21870	-s "got named group: x25519(001d)" \
				21871	-s "Certificate verification was skipped" \
				21872	-s "HRR selected_group: x25519"
				21873
				21874	requires_config_enabled MBEDTLS_SSL_SRV_C
				21875	requires_config_enabled MBEDTLS_DEBUG_C
				21876	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21877	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21878	requires_gnutls_tls1_3
				21879	requires_gnutls_next_no_ticket
				21880	requires_gnutls_next_disable_tls13_compat
				21881	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> x448" \
				21882	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21883	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				21884	0 \
				21885	-s "Protocol is TLSv1.3" \
				21886	-s "got named group: x448(001e)" \
				21887	-s "Certificate verification was skipped" \
				21888	-s "HRR selected_group: x448"
				21889
				21890	requires_config_enabled MBEDTLS_SSL_SRV_C
				21891	requires_config_enabled MBEDTLS_DEBUG_C
				21892	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21893	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21894	requires_gnutls_tls1_3
				21895	requires_gnutls_next_no_ticket
				21896	requires_gnutls_next_disable_tls13_compat
				21897	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> ffdhe2048" \
				21898	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21899	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				21900	0 \
				21901	-s "Protocol is TLSv1.3" \
				21902	-s "got named group: ffdhe2048(0100)" \
				21903	-s "Certificate verification was skipped" \
				21904	-s "HRR selected_group: ffdhe2048"
				21905
				21906	requires_config_enabled MBEDTLS_SSL_SRV_C
				21907	requires_config_enabled MBEDTLS_DEBUG_C
				21908	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21909	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21910	requires_gnutls_tls1_3
				21911	requires_gnutls_next_no_ticket
				21912	requires_gnutls_next_disable_tls13_compat
				21913	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> ffdhe3072" \
				21914	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21915	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				21916	0 \
				21917	-s "Protocol is TLSv1.3" \
				21918	-s "got named group: ffdhe3072(0101)" \
				21919	-s "Certificate verification was skipped" \
				21920	-s "HRR selected_group: ffdhe3072"
				21921
				21922	requires_config_enabled MBEDTLS_SSL_SRV_C
				21923	requires_config_enabled MBEDTLS_DEBUG_C
				21924	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21925	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21926	requires_gnutls_tls1_3
				21927	requires_gnutls_next_no_ticket
				21928	requires_gnutls_next_disable_tls13_compat
				21929	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> ffdhe4096" \
				21930	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21931	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				21932	0 \
				21933	-s "Protocol is TLSv1.3" \
				21934	-s "got named group: ffdhe4096(0102)" \
				21935	-s "Certificate verification was skipped" \
				21936	-s "HRR selected_group: ffdhe4096"
				21937
				21938	requires_config_enabled MBEDTLS_SSL_SRV_C
				21939	requires_config_enabled MBEDTLS_DEBUG_C
				21940	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21941	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21942	requires_gnutls_tls1_3
				21943	requires_gnutls_next_no_ticket
				21944	requires_gnutls_next_disable_tls13_compat
				21945	run_test "TLS 1.3 G->m: HRR ffdhe6144 -> ffdhe8192" \
				21946	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21947	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				21948	0 \
				21949	-s "Protocol is TLSv1.3" \
				21950	-s "got named group: ffdhe8192(0104)" \
				21951	-s "Certificate verification was skipped" \
				21952	-s "HRR selected_group: ffdhe8192"
				21953
				21954	requires_config_enabled MBEDTLS_SSL_SRV_C
				21955	requires_config_enabled MBEDTLS_DEBUG_C
				21956	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21957	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21958	requires_gnutls_tls1_3
				21959	requires_gnutls_next_no_ticket
				21960	requires_gnutls_next_disable_tls13_compat
				21961	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> secp256r1" \
				21962	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21963	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				21964	0 \
				21965	-s "Protocol is TLSv1.3" \
				21966	-s "got named group: secp256r1(0017)" \
				21967	-s "Certificate verification was skipped" \
				21968	-s "HRR selected_group: secp256r1"
				21969
				21970	requires_config_enabled MBEDTLS_SSL_SRV_C
				21971	requires_config_enabled MBEDTLS_DEBUG_C
				21972	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21973	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21974	requires_gnutls_tls1_3
				21975	requires_gnutls_next_no_ticket
				21976	requires_gnutls_next_disable_tls13_compat
				21977	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> secp384r1" \
				21978	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21979	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				21980	0 \
				21981	-s "Protocol is TLSv1.3" \
				21982	-s "got named group: secp384r1(0018)" \
				21983	-s "Certificate verification was skipped" \
				21984	-s "HRR selected_group: secp384r1"
				21985
				21986	requires_config_enabled MBEDTLS_SSL_SRV_C
				21987	requires_config_enabled MBEDTLS_DEBUG_C
				21988	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				21989	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				21990	requires_gnutls_tls1_3
				21991	requires_gnutls_next_no_ticket
				21992	requires_gnutls_next_disable_tls13_compat
				21993	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> secp521r1" \
				21994	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				21995	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				21996	0 \
				21997	-s "Protocol is TLSv1.3" \
				21998	-s "got named group: secp521r1(0019)" \
				21999	-s "Certificate verification was skipped" \
				22000	-s "HRR selected_group: secp521r1"
				22001
				22002	requires_config_enabled MBEDTLS_SSL_SRV_C
				22003	requires_config_enabled MBEDTLS_DEBUG_C
				22004	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22005	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22006	requires_gnutls_tls1_3
				22007	requires_gnutls_next_no_ticket
				22008	requires_gnutls_next_disable_tls13_compat
				22009	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> x25519" \
				22010	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				22011	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				22012	0 \
				22013	-s "Protocol is TLSv1.3" \
				22014	-s "got named group: x25519(001d)" \
				22015	-s "Certificate verification was skipped" \
				22016	-s "HRR selected_group: x25519"
				22017
				22018	requires_config_enabled MBEDTLS_SSL_SRV_C
				22019	requires_config_enabled MBEDTLS_DEBUG_C
				22020	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22021	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22022	requires_gnutls_tls1_3
				22023	requires_gnutls_next_no_ticket
				22024	requires_gnutls_next_disable_tls13_compat
				22025	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> x448" \
				22026	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				22027	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				22028	0 \
				22029	-s "Protocol is TLSv1.3" \
				22030	-s "got named group: x448(001e)" \
				22031	-s "Certificate verification was skipped" \
				22032	-s "HRR selected_group: x448"
				22033
				22034	requires_config_enabled MBEDTLS_SSL_SRV_C
				22035	requires_config_enabled MBEDTLS_DEBUG_C
				22036	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22037	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22038	requires_gnutls_tls1_3
				22039	requires_gnutls_next_no_ticket
				22040	requires_gnutls_next_disable_tls13_compat
				22041	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> ffdhe2048" \
				22042	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				22043	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				22044	0 \
				22045	-s "Protocol is TLSv1.3" \
				22046	-s "got named group: ffdhe2048(0100)" \
				22047	-s "Certificate verification was skipped" \
				22048	-s "HRR selected_group: ffdhe2048"
				22049
				22050	requires_config_enabled MBEDTLS_SSL_SRV_C
				22051	requires_config_enabled MBEDTLS_DEBUG_C
				22052	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22053	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22054	requires_gnutls_tls1_3
				22055	requires_gnutls_next_no_ticket
				22056	requires_gnutls_next_disable_tls13_compat
				22057	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> ffdhe3072" \
				22058	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				22059	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				22060	0 \
				22061	-s "Protocol is TLSv1.3" \
				22062	-s "got named group: ffdhe3072(0101)" \
				22063	-s "Certificate verification was skipped" \
				22064	-s "HRR selected_group: ffdhe3072"
				22065
				22066	requires_config_enabled MBEDTLS_SSL_SRV_C
				22067	requires_config_enabled MBEDTLS_DEBUG_C
				22068	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22069	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22070	requires_gnutls_tls1_3
				22071	requires_gnutls_next_no_ticket
				22072	requires_gnutls_next_disable_tls13_compat
				22073	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> ffdhe4096" \
				22074	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				22075	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				22076	0 \
				22077	-s "Protocol is TLSv1.3" \
				22078	-s "got named group: ffdhe4096(0102)" \
				22079	-s "Certificate verification was skipped" \
				22080	-s "HRR selected_group: ffdhe4096"
				22081
				22082	requires_config_enabled MBEDTLS_SSL_SRV_C
				22083	requires_config_enabled MBEDTLS_DEBUG_C
				22084	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22085	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22086	requires_gnutls_tls1_3
				22087	requires_gnutls_next_no_ticket
				22088	requires_gnutls_next_disable_tls13_compat
				22089	run_test "TLS 1.3 G->m: HRR ffdhe8192 -> ffdhe6144" \
				22090	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				22091	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				22092	0 \
				22093	-s "Protocol is TLSv1.3" \
				22094	-s "got named group: ffdhe6144(0103)" \
				22095	-s "Certificate verification was skipped" \
				22096	-s "HRR selected_group: ffdhe6144"
				22097
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22098	requires_openssl_tls1_3
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22099	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22100	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22101	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22102	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	a193144	2022-03-25 11:58:22 +0000	[diff] [blame]	22103	run_test "TLS 1.3 m->O: HRR secp256r1 -> secp384r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22104	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22105	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp384r1" \
XiaokangQian	a193144	2022-03-25 11:58:22 +0000	[diff] [blame]	22106	0 \
				22107	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22108	-c "Protocol is TLSv1.3" \
XiaokangQian	a193144	2022-03-25 11:58:22 +0000	[diff] [blame]	22109	-c "NamedGroup: secp256r1 ( 17 )" \
				22110	-c "NamedGroup: secp384r1 ( 18 )" \
				22111	-c "Verifying peer X.509 certificate... ok" \
				22112	-c "received HelloRetryRequest message" \
				22113	-c "selected_group ( 24 )"
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22114
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22115	requires_openssl_tls1_3
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22116	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22117	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22118	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22119	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	8031ba7	2022-03-22 12:53:45 +0000	[diff] [blame]	22120	run_test "TLS 1.3 m->O: HRR secp256r1 -> secp521r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22121	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22122	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp521r1" \
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22123	0 \
				22124	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22125	-c "Protocol is TLSv1.3" \
XiaokangQian	a193144	2022-03-25 11:58:22 +0000	[diff] [blame]	22126	-c "NamedGroup: secp256r1 ( 17 )" \
				22127	-c "NamedGroup: secp521r1 ( 19 )" \
				22128	-c "Verifying peer X.509 certificate... ok" \
				22129	-c "received HelloRetryRequest message" \
				22130	-c "selected_group ( 25 )"
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22131
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22132	requires_openssl_tls1_3
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22133	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22134	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22135	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22136	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	8031ba7	2022-03-22 12:53:45 +0000	[diff] [blame]	22137	run_test "TLS 1.3 m->O: HRR secp256r1 -> x25519" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22138	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22139	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x25519" \
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22140	0 \
				22141	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22142	-c "Protocol is TLSv1.3" \
XiaokangQian	a193144	2022-03-25 11:58:22 +0000	[diff] [blame]	22143	-c "NamedGroup: secp256r1 ( 17 )" \
				22144	-c "NamedGroup: x25519 ( 1d )" \
				22145	-c "Verifying peer X.509 certificate... ok" \
				22146	-c "received HelloRetryRequest message" \
				22147	-c "selected_group ( 29 )"
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22148
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22149	requires_openssl_tls1_3
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22150	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22151	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22152	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22153	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	8031ba7	2022-03-22 12:53:45 +0000	[diff] [blame]	22154	run_test "TLS 1.3 m->O: HRR secp256r1 -> x448" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22155	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22156	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x448" \
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22157	0 \
				22158	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22159	-c "Protocol is TLSv1.3" \
XiaokangQian	a193144	2022-03-25 11:58:22 +0000	[diff] [blame]	22160	-c "NamedGroup: secp256r1 ( 17 )" \
				22161	-c "NamedGroup: x448 ( 1e )" \
				22162	-c "Verifying peer X.509 certificate... ok" \
				22163	-c "received HelloRetryRequest message" \
				22164	-c "selected_group ( 30 )"
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	22165
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22166	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	22167	requires_openssl_3_x
				22168	requires_config_enabled MBEDTLS_SSL_CLI_C
				22169	requires_config_enabled MBEDTLS_DEBUG_C
				22170	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22171	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22172	run_test "TLS 1.3 m->O: HRR secp256r1 -> ffdhe2048" \
				22173	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22174	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe2048" \
				22175	0 \
				22176	-c "HTTP/1.0 200 ok" \
				22177	-c "Protocol is TLSv1.3" \
				22178	-c "NamedGroup: secp256r1 ( 17 )" \
				22179	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22180	-c "Verifying peer X.509 certificate... ok" \
				22181	-c "received HelloRetryRequest message" \
				22182	-c "selected_group ( 256 )"
				22183
				22184	requires_openssl_tls1_3
				22185	requires_openssl_3_x
				22186	requires_config_enabled MBEDTLS_SSL_CLI_C
				22187	requires_config_enabled MBEDTLS_DEBUG_C
				22188	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22189	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22190	run_test "TLS 1.3 m->O: HRR secp256r1 -> ffdhe3072" \
				22191	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22192	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe3072" \
				22193	0 \
				22194	-c "HTTP/1.0 200 ok" \
				22195	-c "Protocol is TLSv1.3" \
				22196	-c "NamedGroup: secp256r1 ( 17 )" \
				22197	-c "NamedGroup: ffdhe3072 ( 101 )" \
				22198	-c "Verifying peer X.509 certificate... ok" \
				22199	-c "received HelloRetryRequest message" \
				22200	-c "selected_group ( 257 )"
				22201
				22202	requires_openssl_tls1_3
				22203	requires_openssl_3_x
				22204	requires_config_enabled MBEDTLS_SSL_CLI_C
				22205	requires_config_enabled MBEDTLS_DEBUG_C
				22206	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22207	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22208	run_test "TLS 1.3 m->O: HRR secp256r1 -> ffdhe4096" \
				22209	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22210	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe4096" \
				22211	0 \
				22212	-c "HTTP/1.0 200 ok" \
				22213	-c "Protocol is TLSv1.3" \
				22214	-c "NamedGroup: secp256r1 ( 17 )" \
				22215	-c "NamedGroup: ffdhe4096 ( 102 )" \
				22216	-c "Verifying peer X.509 certificate... ok" \
				22217	-c "received HelloRetryRequest message" \
				22218	-c "selected_group ( 258 )"
				22219
				22220	requires_openssl_tls1_3
				22221	requires_openssl_3_x
				22222	requires_config_enabled MBEDTLS_SSL_CLI_C
				22223	requires_config_enabled MBEDTLS_DEBUG_C
				22224	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22225	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22226	run_test "TLS 1.3 m->O: HRR secp256r1 -> ffdhe6144" \
				22227	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22228	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe6144" \
				22229	0 \
				22230	-c "HTTP/1.0 200 ok" \
				22231	-c "Protocol is TLSv1.3" \
				22232	-c "NamedGroup: secp256r1 ( 17 )" \
				22233	-c "NamedGroup: ffdhe6144 ( 103 )" \
				22234	-c "Verifying peer X.509 certificate... ok" \
				22235	-c "received HelloRetryRequest message" \
				22236	-c "selected_group ( 259 )"
				22237
				22238	requires_openssl_tls1_3
				22239	requires_openssl_3_x
				22240	requires_config_enabled MBEDTLS_SSL_CLI_C
				22241	requires_config_enabled MBEDTLS_DEBUG_C
				22242	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22243	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22244	run_test "TLS 1.3 m->O: HRR secp256r1 -> ffdhe8192" \
				22245	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22246	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe8192" \
				22247	0 \
				22248	-c "HTTP/1.0 200 ok" \
				22249	-c "Protocol is TLSv1.3" \
				22250	-c "NamedGroup: secp256r1 ( 17 )" \
				22251	-c "NamedGroup: ffdhe8192 ( 104 )" \
				22252	-c "Verifying peer X.509 certificate... ok" \
				22253	-c "received HelloRetryRequest message" \
				22254	-c "selected_group ( 260 )"
				22255
				22256	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22257	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22258	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22259	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22260	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22261	run_test "TLS 1.3 m->O: HRR secp384r1 -> secp256r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22262	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22263	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp256r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22264	0 \
				22265	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22266	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22267	-c "NamedGroup: secp384r1 ( 18 )" \
				22268	-c "NamedGroup: secp256r1 ( 17 )" \
				22269	-c "Verifying peer X.509 certificate... ok" \
				22270	-c "received HelloRetryRequest message" \
				22271	-c "selected_group ( 23 )"
				22272
				22273	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22274	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22275	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22276	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22277	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22278	run_test "TLS 1.3 m->O: HRR secp384r1 -> secp521r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22279	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22280	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp521r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22281	0 \
				22282	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22283	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22284	-c "NamedGroup: secp384r1 ( 18 )" \
				22285	-c "NamedGroup: secp521r1 ( 19 )" \
				22286	-c "Verifying peer X.509 certificate... ok" \
				22287	-c "received HelloRetryRequest message" \
				22288	-c "selected_group ( 25 )"
				22289
				22290	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22291	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22292	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22293	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22294	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22295	run_test "TLS 1.3 m->O: HRR secp384r1 -> x25519" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22296	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22297	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x25519" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22298	0 \
				22299	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22300	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22301	-c "NamedGroup: secp384r1 ( 18 )" \
				22302	-c "NamedGroup: x25519 ( 1d )" \
				22303	-c "Verifying peer X.509 certificate... ok" \
				22304	-c "received HelloRetryRequest message" \
				22305	-c "selected_group ( 29 )"
				22306
				22307	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22308	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22309	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22310	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22311	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22312	run_test "TLS 1.3 m->O: HRR secp384r1 -> x448" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22313	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22314	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x448" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22315	0 \
				22316	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22317	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22318	-c "NamedGroup: secp384r1 ( 18 )" \
				22319	-c "NamedGroup: x448 ( 1e )" \
				22320	-c "Verifying peer X.509 certificate... ok" \
				22321	-c "received HelloRetryRequest message" \
				22322	-c "selected_group ( 30 )"
				22323
				22324	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	22325	requires_openssl_3_x
				22326	requires_config_enabled MBEDTLS_SSL_CLI_C
				22327	requires_config_enabled MBEDTLS_DEBUG_C
				22328	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22329	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22330	run_test "TLS 1.3 m->O: HRR secp384r1 -> ffdhe2048" \
				22331	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22332	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe2048" \
				22333	0 \
				22334	-c "HTTP/1.0 200 ok" \
				22335	-c "Protocol is TLSv1.3" \
				22336	-c "NamedGroup: secp384r1 ( 18 )" \
				22337	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22338	-c "Verifying peer X.509 certificate... ok" \
				22339	-c "received HelloRetryRequest message" \
				22340	-c "selected_group ( 256 )"
				22341
				22342	requires_openssl_tls1_3
				22343	requires_openssl_3_x
				22344	requires_config_enabled MBEDTLS_SSL_CLI_C
				22345	requires_config_enabled MBEDTLS_DEBUG_C
				22346	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22347	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22348	run_test "TLS 1.3 m->O: HRR secp384r1 -> ffdhe3072" \
				22349	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22350	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe3072" \
				22351	0 \
				22352	-c "HTTP/1.0 200 ok" \
				22353	-c "Protocol is TLSv1.3" \
				22354	-c "NamedGroup: secp384r1 ( 18 )" \
				22355	-c "NamedGroup: ffdhe3072 ( 101 )" \
				22356	-c "Verifying peer X.509 certificate... ok" \
				22357	-c "received HelloRetryRequest message" \
				22358	-c "selected_group ( 257 )"
				22359
				22360	requires_openssl_tls1_3
				22361	requires_openssl_3_x
				22362	requires_config_enabled MBEDTLS_SSL_CLI_C
				22363	requires_config_enabled MBEDTLS_DEBUG_C
				22364	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22365	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22366	run_test "TLS 1.3 m->O: HRR secp384r1 -> ffdhe4096" \
				22367	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22368	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe4096" \
				22369	0 \
				22370	-c "HTTP/1.0 200 ok" \
				22371	-c "Protocol is TLSv1.3" \
				22372	-c "NamedGroup: secp384r1 ( 18 )" \
				22373	-c "NamedGroup: ffdhe4096 ( 102 )" \
				22374	-c "Verifying peer X.509 certificate... ok" \
				22375	-c "received HelloRetryRequest message" \
				22376	-c "selected_group ( 258 )"
				22377
				22378	requires_openssl_tls1_3
				22379	requires_openssl_3_x
				22380	requires_config_enabled MBEDTLS_SSL_CLI_C
				22381	requires_config_enabled MBEDTLS_DEBUG_C
				22382	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22383	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22384	run_test "TLS 1.3 m->O: HRR secp384r1 -> ffdhe6144" \
				22385	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22386	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe6144" \
				22387	0 \
				22388	-c "HTTP/1.0 200 ok" \
				22389	-c "Protocol is TLSv1.3" \
				22390	-c "NamedGroup: secp384r1 ( 18 )" \
				22391	-c "NamedGroup: ffdhe6144 ( 103 )" \
				22392	-c "Verifying peer X.509 certificate... ok" \
				22393	-c "received HelloRetryRequest message" \
				22394	-c "selected_group ( 259 )"
				22395
				22396	requires_openssl_tls1_3
				22397	requires_openssl_3_x
				22398	requires_config_enabled MBEDTLS_SSL_CLI_C
				22399	requires_config_enabled MBEDTLS_DEBUG_C
				22400	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22401	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22402	run_test "TLS 1.3 m->O: HRR secp384r1 -> ffdhe8192" \
				22403	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22404	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe8192" \
				22405	0 \
				22406	-c "HTTP/1.0 200 ok" \
				22407	-c "Protocol is TLSv1.3" \
				22408	-c "NamedGroup: secp384r1 ( 18 )" \
				22409	-c "NamedGroup: ffdhe8192 ( 104 )" \
				22410	-c "Verifying peer X.509 certificate... ok" \
				22411	-c "received HelloRetryRequest message" \
				22412	-c "selected_group ( 260 )"
				22413
				22414	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22415	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22416	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22417	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22418	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22419	run_test "TLS 1.3 m->O: HRR secp521r1 -> secp256r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22420	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22421	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp256r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22422	0 \
				22423	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22424	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22425	-c "NamedGroup: secp521r1 ( 19 )" \
				22426	-c "NamedGroup: secp256r1 ( 17 )" \
				22427	-c "Verifying peer X.509 certificate... ok" \
				22428	-c "received HelloRetryRequest message" \
				22429	-c "selected_group ( 23 )"
				22430
				22431	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22432	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22433	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22434	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22435	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22436	run_test "TLS 1.3 m->O: HRR secp521r1 -> secp384r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22437	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22438	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp384r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22439	0 \
				22440	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22441	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22442	-c "NamedGroup: secp521r1 ( 19 )" \
				22443	-c "NamedGroup: secp384r1 ( 18 )" \
				22444	-c "Verifying peer X.509 certificate... ok" \
				22445	-c "received HelloRetryRequest message" \
				22446	-c "selected_group ( 24 )"
				22447
				22448	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22449	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22450	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22451	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22452	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22453	run_test "TLS 1.3 m->O: HRR secp521r1 -> x25519" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22454	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22455	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x25519" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22456	0 \
				22457	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22458	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22459	-c "NamedGroup: secp521r1 ( 19 )" \
				22460	-c "NamedGroup: x25519 ( 1d )" \
				22461	-c "Verifying peer X.509 certificate... ok" \
				22462	-c "received HelloRetryRequest message" \
				22463	-c "selected_group ( 29 )"
				22464
				22465	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22466	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22467	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22468	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22469	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22470	run_test "TLS 1.3 m->O: HRR secp521r1 -> x448" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22471	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22472	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x448" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22473	0 \
				22474	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22475	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22476	-c "NamedGroup: secp521r1 ( 19 )" \
				22477	-c "NamedGroup: x448 ( 1e )" \
				22478	-c "Verifying peer X.509 certificate... ok" \
				22479	-c "received HelloRetryRequest message" \
				22480	-c "selected_group ( 30 )"
				22481
				22482	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	22483	requires_openssl_3_x
				22484	requires_config_enabled MBEDTLS_SSL_CLI_C
				22485	requires_config_enabled MBEDTLS_DEBUG_C
				22486	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22487	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22488	run_test "TLS 1.3 m->O: HRR secp521r1 -> ffdhe2048" \
				22489	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22490	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe2048" \
				22491	0 \
				22492	-c "HTTP/1.0 200 ok" \
				22493	-c "Protocol is TLSv1.3" \
				22494	-c "NamedGroup: secp521r1 ( 19 )" \
				22495	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22496	-c "Verifying peer X.509 certificate... ok" \
				22497	-c "received HelloRetryRequest message" \
				22498	-c "selected_group ( 256 )"
				22499
				22500	requires_openssl_tls1_3
				22501	requires_openssl_3_x
				22502	requires_config_enabled MBEDTLS_SSL_CLI_C
				22503	requires_config_enabled MBEDTLS_DEBUG_C
				22504	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22505	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22506	run_test "TLS 1.3 m->O: HRR secp521r1 -> ffdhe3072" \
				22507	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22508	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe3072" \
				22509	0 \
				22510	-c "HTTP/1.0 200 ok" \
				22511	-c "Protocol is TLSv1.3" \
				22512	-c "NamedGroup: secp521r1 ( 19 )" \
				22513	-c "NamedGroup: ffdhe3072 ( 101 )" \
				22514	-c "Verifying peer X.509 certificate... ok" \
				22515	-c "received HelloRetryRequest message" \
				22516	-c "selected_group ( 257 )"
				22517
				22518	requires_openssl_tls1_3
				22519	requires_openssl_3_x
				22520	requires_config_enabled MBEDTLS_SSL_CLI_C
				22521	requires_config_enabled MBEDTLS_DEBUG_C
				22522	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22523	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22524	run_test "TLS 1.3 m->O: HRR secp521r1 -> ffdhe4096" \
				22525	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22526	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe4096" \
				22527	0 \
				22528	-c "HTTP/1.0 200 ok" \
				22529	-c "Protocol is TLSv1.3" \
				22530	-c "NamedGroup: secp521r1 ( 19 )" \
				22531	-c "NamedGroup: ffdhe4096 ( 102 )" \
				22532	-c "Verifying peer X.509 certificate... ok" \
				22533	-c "received HelloRetryRequest message" \
				22534	-c "selected_group ( 258 )"
				22535
				22536	requires_openssl_tls1_3
				22537	requires_openssl_3_x
				22538	requires_config_enabled MBEDTLS_SSL_CLI_C
				22539	requires_config_enabled MBEDTLS_DEBUG_C
				22540	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22541	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22542	run_test "TLS 1.3 m->O: HRR secp521r1 -> ffdhe6144" \
				22543	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22544	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe6144" \
				22545	0 \
				22546	-c "HTTP/1.0 200 ok" \
				22547	-c "Protocol is TLSv1.3" \
				22548	-c "NamedGroup: secp521r1 ( 19 )" \
				22549	-c "NamedGroup: ffdhe6144 ( 103 )" \
				22550	-c "Verifying peer X.509 certificate... ok" \
				22551	-c "received HelloRetryRequest message" \
				22552	-c "selected_group ( 259 )"
				22553
				22554	requires_openssl_tls1_3
				22555	requires_openssl_3_x
				22556	requires_config_enabled MBEDTLS_SSL_CLI_C
				22557	requires_config_enabled MBEDTLS_DEBUG_C
				22558	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22559	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22560	run_test "TLS 1.3 m->O: HRR secp521r1 -> ffdhe8192" \
				22561	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22562	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe8192" \
				22563	0 \
				22564	-c "HTTP/1.0 200 ok" \
				22565	-c "Protocol is TLSv1.3" \
				22566	-c "NamedGroup: secp521r1 ( 19 )" \
				22567	-c "NamedGroup: ffdhe8192 ( 104 )" \
				22568	-c "Verifying peer X.509 certificate... ok" \
				22569	-c "received HelloRetryRequest message" \
				22570	-c "selected_group ( 260 )"
				22571
				22572	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22573	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22574	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22575	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22576	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22577	run_test "TLS 1.3 m->O: HRR x25519 -> secp256r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22578	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22579	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp256r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22580	0 \
				22581	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22582	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22583	-c "NamedGroup: x25519 ( 1d )" \
				22584	-c "NamedGroup: secp256r1 ( 17 )" \
				22585	-c "Verifying peer X.509 certificate... ok" \
				22586	-c "received HelloRetryRequest message" \
				22587	-c "selected_group ( 23 )"
				22588
				22589	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22590	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22591	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22592	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22593	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22594	run_test "TLS 1.3 m->O: HRR x25519 -> secp384r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22595	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22596	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp384r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22597	0 \
				22598	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22599	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22600	-c "NamedGroup: x25519 ( 1d )" \
				22601	-c "NamedGroup: secp384r1 ( 18 )" \
				22602	-c "Verifying peer X.509 certificate... ok" \
				22603	-c "received HelloRetryRequest message" \
				22604	-c "selected_group ( 24 )"
				22605
				22606	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22607	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22608	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22609	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22610	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22611	run_test "TLS 1.3 m->O: HRR x25519 -> secp521r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22612	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22613	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp521r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22614	0 \
				22615	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22616	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22617	-c "NamedGroup: x25519 ( 1d )" \
				22618	-c "NamedGroup: secp521r1 ( 19 )" \
				22619	-c "Verifying peer X.509 certificate... ok" \
				22620	-c "received HelloRetryRequest message" \
				22621	-c "selected_group ( 25 )"
				22622
				22623	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22624	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22625	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22626	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22627	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22628	run_test "TLS 1.3 m->O: HRR x25519 -> x448" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22629	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22630	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,x448" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22631	0 \
				22632	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22633	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22634	-c "NamedGroup: x25519 ( 1d )" \
				22635	-c "NamedGroup: x448 ( 1e )" \
				22636	-c "Verifying peer X.509 certificate... ok" \
				22637	-c "received HelloRetryRequest message" \
				22638	-c "selected_group ( 30 )"
				22639
				22640	requires_openssl_tls1_3
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	22641	requires_openssl_3_x
				22642	requires_config_enabled MBEDTLS_SSL_CLI_C
				22643	requires_config_enabled MBEDTLS_DEBUG_C
				22644	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22645	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22646	run_test "TLS 1.3 m->O: HRR x25519 -> ffdhe2048" \
				22647	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22648	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe2048" \
				22649	0 \
				22650	-c "HTTP/1.0 200 ok" \
				22651	-c "Protocol is TLSv1.3" \
				22652	-c "NamedGroup: x25519 ( 1d )" \
				22653	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22654	-c "Verifying peer X.509 certificate... ok" \
				22655	-c "received HelloRetryRequest message" \
				22656	-c "selected_group ( 256 )"
				22657
				22658	requires_openssl_tls1_3
				22659	requires_openssl_3_x
				22660	requires_config_enabled MBEDTLS_SSL_CLI_C
				22661	requires_config_enabled MBEDTLS_DEBUG_C
				22662	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22663	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22664	run_test "TLS 1.3 m->O: HRR x25519 -> ffdhe3072" \
				22665	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22666	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe3072" \
				22667	0 \
				22668	-c "HTTP/1.0 200 ok" \
				22669	-c "Protocol is TLSv1.3" \
				22670	-c "NamedGroup: x25519 ( 1d )" \
				22671	-c "NamedGroup: ffdhe3072 ( 101 )" \
				22672	-c "Verifying peer X.509 certificate... ok" \
				22673	-c "received HelloRetryRequest message" \
				22674	-c "selected_group ( 257 )"
				22675
				22676	requires_openssl_tls1_3
				22677	requires_openssl_3_x
				22678	requires_config_enabled MBEDTLS_SSL_CLI_C
				22679	requires_config_enabled MBEDTLS_DEBUG_C
				22680	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22681	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22682	run_test "TLS 1.3 m->O: HRR x25519 -> ffdhe4096" \
				22683	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22684	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe4096" \
				22685	0 \
				22686	-c "HTTP/1.0 200 ok" \
				22687	-c "Protocol is TLSv1.3" \
				22688	-c "NamedGroup: x25519 ( 1d )" \
				22689	-c "NamedGroup: ffdhe4096 ( 102 )" \
				22690	-c "Verifying peer X.509 certificate... ok" \
				22691	-c "received HelloRetryRequest message" \
				22692	-c "selected_group ( 258 )"
				22693
				22694	requires_openssl_tls1_3
				22695	requires_openssl_3_x
				22696	requires_config_enabled MBEDTLS_SSL_CLI_C
				22697	requires_config_enabled MBEDTLS_DEBUG_C
				22698	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22699	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22700	run_test "TLS 1.3 m->O: HRR x25519 -> ffdhe6144" \
				22701	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22702	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe6144" \
				22703	0 \
				22704	-c "HTTP/1.0 200 ok" \
				22705	-c "Protocol is TLSv1.3" \
				22706	-c "NamedGroup: x25519 ( 1d )" \
				22707	-c "NamedGroup: ffdhe6144 ( 103 )" \
				22708	-c "Verifying peer X.509 certificate... ok" \
				22709	-c "received HelloRetryRequest message" \
				22710	-c "selected_group ( 259 )"
				22711
				22712	requires_openssl_tls1_3
				22713	requires_openssl_3_x
				22714	requires_config_enabled MBEDTLS_SSL_CLI_C
				22715	requires_config_enabled MBEDTLS_DEBUG_C
				22716	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22717	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22718	run_test "TLS 1.3 m->O: HRR x25519 -> ffdhe8192" \
				22719	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22720	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe8192" \
				22721	0 \
				22722	-c "HTTP/1.0 200 ok" \
				22723	-c "Protocol is TLSv1.3" \
				22724	-c "NamedGroup: x25519 ( 1d )" \
				22725	-c "NamedGroup: ffdhe8192 ( 104 )" \
				22726	-c "Verifying peer X.509 certificate... ok" \
				22727	-c "received HelloRetryRequest message" \
				22728	-c "selected_group ( 260 )"
				22729
				22730	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22731	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22732	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22733	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22734	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22735	run_test "TLS 1.3 m->O: HRR x448 -> secp256r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22736	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22737	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp256r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22738	0 \
				22739	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22740	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22741	-c "NamedGroup: x448 ( 1e )" \
				22742	-c "NamedGroup: secp256r1 ( 17 )" \
				22743	-c "Verifying peer X.509 certificate... ok" \
				22744	-c "received HelloRetryRequest message" \
				22745	-c "selected_group ( 23 )"
				22746
				22747	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22748	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22749	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22750	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22751	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22752	run_test "TLS 1.3 m->O: HRR x448 -> secp384r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22753	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22754	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp384r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22755	0 \
				22756	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22757	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22758	-c "NamedGroup: x448 ( 1e )" \
				22759	-c "NamedGroup: secp384r1 ( 18 )" \
				22760	-c "Verifying peer X.509 certificate... ok" \
				22761	-c "received HelloRetryRequest message" \
				22762	-c "selected_group ( 24 )"
				22763
				22764	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22765	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22766	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22767	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22768	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22769	run_test "TLS 1.3 m->O: HRR x448 -> secp521r1" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22770	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22771	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp521r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22772	0 \
				22773	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22774	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22775	-c "NamedGroup: x448 ( 1e )" \
				22776	-c "NamedGroup: secp521r1 ( 19 )" \
				22777	-c "Verifying peer X.509 certificate... ok" \
				22778	-c "received HelloRetryRequest message" \
				22779	-c "selected_group ( 25 )"
				22780
				22781	requires_openssl_tls1_3
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22782	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	22783	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	22784	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22785	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22786	run_test "TLS 1.3 m->O: HRR x448 -> x25519" \
Jerry Yu	b7c12a4	2022-06-12 20:53:02 +0800	[diff] [blame]	22787	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	22788	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,x25519" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22789	0 \
				22790	-c "HTTP/1.0 200 ok" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	22791	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	22792	-c "NamedGroup: x448 ( 1e )" \
				22793	-c "NamedGroup: x25519 ( 1d )" \
				22794	-c "Verifying peer X.509 certificate... ok" \
				22795	-c "received HelloRetryRequest message" \
				22796	-c "selected_group ( 29 )"
				22797
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	22798	requires_openssl_tls1_3
				22799	requires_openssl_3_x
				22800	requires_config_enabled MBEDTLS_SSL_CLI_C
				22801	requires_config_enabled MBEDTLS_DEBUG_C
				22802	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22803	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22804	run_test "TLS 1.3 m->O: HRR x448 -> ffdhe2048" \
				22805	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22806	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe2048" \
				22807	0 \
				22808	-c "HTTP/1.0 200 ok" \
				22809	-c "Protocol is TLSv1.3" \
				22810	-c "NamedGroup: x448 ( 1e )" \
				22811	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22812	-c "Verifying peer X.509 certificate... ok" \
				22813	-c "received HelloRetryRequest message" \
				22814	-c "selected_group ( 256 )"
				22815
				22816	requires_openssl_tls1_3
				22817	requires_openssl_3_x
				22818	requires_config_enabled MBEDTLS_SSL_CLI_C
				22819	requires_config_enabled MBEDTLS_DEBUG_C
				22820	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22821	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22822	run_test "TLS 1.3 m->O: HRR x448 -> ffdhe3072" \
				22823	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22824	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe3072" \
				22825	0 \
				22826	-c "HTTP/1.0 200 ok" \
				22827	-c "Protocol is TLSv1.3" \
				22828	-c "NamedGroup: x448 ( 1e )" \
				22829	-c "NamedGroup: ffdhe3072 ( 101 )" \
				22830	-c "Verifying peer X.509 certificate... ok" \
				22831	-c "received HelloRetryRequest message" \
				22832	-c "selected_group ( 257 )"
				22833
				22834	requires_openssl_tls1_3
				22835	requires_openssl_3_x
				22836	requires_config_enabled MBEDTLS_SSL_CLI_C
				22837	requires_config_enabled MBEDTLS_DEBUG_C
				22838	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22839	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22840	run_test "TLS 1.3 m->O: HRR x448 -> ffdhe4096" \
				22841	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22842	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe4096" \
				22843	0 \
				22844	-c "HTTP/1.0 200 ok" \
				22845	-c "Protocol is TLSv1.3" \
				22846	-c "NamedGroup: x448 ( 1e )" \
				22847	-c "NamedGroup: ffdhe4096 ( 102 )" \
				22848	-c "Verifying peer X.509 certificate... ok" \
				22849	-c "received HelloRetryRequest message" \
				22850	-c "selected_group ( 258 )"
				22851
				22852	requires_openssl_tls1_3
				22853	requires_openssl_3_x
				22854	requires_config_enabled MBEDTLS_SSL_CLI_C
				22855	requires_config_enabled MBEDTLS_DEBUG_C
				22856	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22857	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22858	run_test "TLS 1.3 m->O: HRR x448 -> ffdhe6144" \
				22859	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22860	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe6144" \
				22861	0 \
				22862	-c "HTTP/1.0 200 ok" \
				22863	-c "Protocol is TLSv1.3" \
				22864	-c "NamedGroup: x448 ( 1e )" \
				22865	-c "NamedGroup: ffdhe6144 ( 103 )" \
				22866	-c "Verifying peer X.509 certificate... ok" \
				22867	-c "received HelloRetryRequest message" \
				22868	-c "selected_group ( 259 )"
				22869
				22870	requires_openssl_tls1_3
				22871	requires_openssl_3_x
				22872	requires_config_enabled MBEDTLS_SSL_CLI_C
				22873	requires_config_enabled MBEDTLS_DEBUG_C
				22874	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22875	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22876	run_test "TLS 1.3 m->O: HRR x448 -> ffdhe8192" \
				22877	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22878	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe8192" \
				22879	0 \
				22880	-c "HTTP/1.0 200 ok" \
				22881	-c "Protocol is TLSv1.3" \
				22882	-c "NamedGroup: x448 ( 1e )" \
				22883	-c "NamedGroup: ffdhe8192 ( 104 )" \
				22884	-c "Verifying peer X.509 certificate... ok" \
				22885	-c "received HelloRetryRequest message" \
				22886	-c "selected_group ( 260 )"
				22887
				22888	requires_openssl_tls1_3
				22889	requires_config_enabled MBEDTLS_SSL_CLI_C
				22890	requires_config_enabled MBEDTLS_DEBUG_C
				22891	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22892	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22893	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> secp256r1" \
				22894	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22895	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp256r1" \
				22896	0 \
				22897	-c "HTTP/1.0 200 ok" \
				22898	-c "Protocol is TLSv1.3" \
				22899	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22900	-c "NamedGroup: secp256r1 ( 17 )" \
				22901	-c "Verifying peer X.509 certificate... ok" \
				22902	-c "received HelloRetryRequest message" \
				22903	-c "selected_group ( 23 )"
				22904
				22905	requires_openssl_tls1_3
				22906	requires_config_enabled MBEDTLS_SSL_CLI_C
				22907	requires_config_enabled MBEDTLS_DEBUG_C
				22908	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22909	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22910	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> secp384r1" \
				22911	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22912	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp384r1" \
				22913	0 \
				22914	-c "HTTP/1.0 200 ok" \
				22915	-c "Protocol is TLSv1.3" \
				22916	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22917	-c "NamedGroup: secp384r1 ( 18 )" \
				22918	-c "Verifying peer X.509 certificate... ok" \
				22919	-c "received HelloRetryRequest message" \
				22920	-c "selected_group ( 24 )"
				22921
				22922	requires_openssl_tls1_3
				22923	requires_config_enabled MBEDTLS_SSL_CLI_C
				22924	requires_config_enabled MBEDTLS_DEBUG_C
				22925	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22926	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22927	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> secp521r1" \
				22928	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22929	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp521r1" \
				22930	0 \
				22931	-c "HTTP/1.0 200 ok" \
				22932	-c "Protocol is TLSv1.3" \
				22933	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22934	-c "NamedGroup: secp521r1 ( 19 )" \
				22935	-c "Verifying peer X.509 certificate... ok" \
				22936	-c "received HelloRetryRequest message" \
				22937	-c "selected_group ( 25 )"
				22938
				22939	requires_openssl_tls1_3
				22940	requires_config_enabled MBEDTLS_SSL_CLI_C
				22941	requires_config_enabled MBEDTLS_DEBUG_C
				22942	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22943	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22944	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> x25519" \
				22945	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22946	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,x25519" \
				22947	0 \
				22948	-c "HTTP/1.0 200 ok" \
				22949	-c "Protocol is TLSv1.3" \
				22950	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22951	-c "NamedGroup: x25519 ( 1d )" \
				22952	-c "Verifying peer X.509 certificate... ok" \
				22953	-c "received HelloRetryRequest message" \
				22954	-c "selected_group ( 29 )"
				22955
				22956	requires_openssl_tls1_3
				22957	requires_config_enabled MBEDTLS_SSL_CLI_C
				22958	requires_config_enabled MBEDTLS_DEBUG_C
				22959	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22960	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22961	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> x448" \
				22962	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22963	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,x448" \
				22964	0 \
				22965	-c "HTTP/1.0 200 ok" \
				22966	-c "Protocol is TLSv1.3" \
				22967	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22968	-c "NamedGroup: x448 ( 1e )" \
				22969	-c "Verifying peer X.509 certificate... ok" \
				22970	-c "received HelloRetryRequest message" \
				22971	-c "selected_group ( 30 )"
				22972
				22973	requires_openssl_tls1_3
				22974	requires_openssl_3_x
				22975	requires_config_enabled MBEDTLS_SSL_CLI_C
				22976	requires_config_enabled MBEDTLS_DEBUG_C
				22977	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22978	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22979	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> ffdhe3072" \
				22980	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22981	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe3072" \
				22982	0 \
				22983	-c "HTTP/1.0 200 ok" \
				22984	-c "Protocol is TLSv1.3" \
				22985	-c "NamedGroup: ffdhe2048 ( 100 )" \
				22986	-c "NamedGroup: ffdhe3072 ( 101 )" \
				22987	-c "Verifying peer X.509 certificate... ok" \
				22988	-c "received HelloRetryRequest message" \
				22989	-c "selected_group ( 257 )"
				22990
				22991	requires_openssl_tls1_3
				22992	requires_openssl_3_x
				22993	requires_config_enabled MBEDTLS_SSL_CLI_C
				22994	requires_config_enabled MBEDTLS_DEBUG_C
				22995	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				22996	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				22997	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> ffdhe4096" \
				22998	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				22999	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe4096" \
				23000	0 \
				23001	-c "HTTP/1.0 200 ok" \
				23002	-c "Protocol is TLSv1.3" \
				23003	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23004	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23005	-c "Verifying peer X.509 certificate... ok" \
				23006	-c "received HelloRetryRequest message" \
				23007	-c "selected_group ( 258 )"
				23008
				23009	requires_openssl_tls1_3
				23010	requires_openssl_3_x
				23011	requires_config_enabled MBEDTLS_SSL_CLI_C
				23012	requires_config_enabled MBEDTLS_DEBUG_C
				23013	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23014	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23015	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> ffdhe6144" \
				23016	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23017	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe6144" \
				23018	0 \
				23019	-c "HTTP/1.0 200 ok" \
				23020	-c "Protocol is TLSv1.3" \
				23021	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23022	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23023	-c "Verifying peer X.509 certificate... ok" \
				23024	-c "received HelloRetryRequest message" \
				23025	-c "selected_group ( 259 )"
				23026
				23027	requires_openssl_tls1_3
				23028	requires_openssl_3_x
				23029	requires_config_enabled MBEDTLS_SSL_CLI_C
				23030	requires_config_enabled MBEDTLS_DEBUG_C
				23031	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23032	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23033	run_test "TLS 1.3 m->O: HRR ffdhe2048 -> ffdhe8192" \
				23034	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23035	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe8192" \
				23036	0 \
				23037	-c "HTTP/1.0 200 ok" \
				23038	-c "Protocol is TLSv1.3" \
				23039	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23040	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23041	-c "Verifying peer X.509 certificate... ok" \
				23042	-c "received HelloRetryRequest message" \
				23043	-c "selected_group ( 260 )"
				23044
				23045	requires_openssl_tls1_3
				23046	requires_config_enabled MBEDTLS_SSL_CLI_C
				23047	requires_config_enabled MBEDTLS_DEBUG_C
				23048	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23049	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23050	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> secp256r1" \
				23051	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23052	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp256r1" \
				23053	0 \
				23054	-c "HTTP/1.0 200 ok" \
				23055	-c "Protocol is TLSv1.3" \
				23056	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23057	-c "NamedGroup: secp256r1 ( 17 )" \
				23058	-c "Verifying peer X.509 certificate... ok" \
				23059	-c "received HelloRetryRequest message" \
				23060	-c "selected_group ( 23 )"
				23061
				23062	requires_openssl_tls1_3
				23063	requires_config_enabled MBEDTLS_SSL_CLI_C
				23064	requires_config_enabled MBEDTLS_DEBUG_C
				23065	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23066	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23067	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> secp384r1" \
				23068	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23069	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp384r1" \
				23070	0 \
				23071	-c "HTTP/1.0 200 ok" \
				23072	-c "Protocol is TLSv1.3" \
				23073	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23074	-c "NamedGroup: secp384r1 ( 18 )" \
				23075	-c "Verifying peer X.509 certificate... ok" \
				23076	-c "received HelloRetryRequest message" \
				23077	-c "selected_group ( 24 )"
				23078
				23079	requires_openssl_tls1_3
				23080	requires_config_enabled MBEDTLS_SSL_CLI_C
				23081	requires_config_enabled MBEDTLS_DEBUG_C
				23082	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23083	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23084	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> secp521r1" \
				23085	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23086	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp521r1" \
				23087	0 \
				23088	-c "HTTP/1.0 200 ok" \
				23089	-c "Protocol is TLSv1.3" \
				23090	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23091	-c "NamedGroup: secp521r1 ( 19 )" \
				23092	-c "Verifying peer X.509 certificate... ok" \
				23093	-c "received HelloRetryRequest message" \
				23094	-c "selected_group ( 25 )"
				23095
				23096	requires_openssl_tls1_3
				23097	requires_config_enabled MBEDTLS_SSL_CLI_C
				23098	requires_config_enabled MBEDTLS_DEBUG_C
				23099	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23100	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23101	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> x25519" \
				23102	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23103	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,x25519" \
				23104	0 \
				23105	-c "HTTP/1.0 200 ok" \
				23106	-c "Protocol is TLSv1.3" \
				23107	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23108	-c "NamedGroup: x25519 ( 1d )" \
				23109	-c "Verifying peer X.509 certificate... ok" \
				23110	-c "received HelloRetryRequest message" \
				23111	-c "selected_group ( 29 )"
				23112
				23113	requires_openssl_tls1_3
				23114	requires_config_enabled MBEDTLS_SSL_CLI_C
				23115	requires_config_enabled MBEDTLS_DEBUG_C
				23116	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23117	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23118	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> x448" \
				23119	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23120	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,x448" \
				23121	0 \
				23122	-c "HTTP/1.0 200 ok" \
				23123	-c "Protocol is TLSv1.3" \
				23124	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23125	-c "NamedGroup: x448 ( 1e )" \
				23126	-c "Verifying peer X.509 certificate... ok" \
				23127	-c "received HelloRetryRequest message" \
				23128	-c "selected_group ( 30 )"
				23129
				23130	requires_openssl_tls1_3
				23131	requires_openssl_3_x
				23132	requires_config_enabled MBEDTLS_SSL_CLI_C
				23133	requires_config_enabled MBEDTLS_DEBUG_C
				23134	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23135	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23136	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> ffdhe2048" \
				23137	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23138	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe2048" \
				23139	0 \
				23140	-c "HTTP/1.0 200 ok" \
				23141	-c "Protocol is TLSv1.3" \
				23142	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23143	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23144	-c "Verifying peer X.509 certificate... ok" \
				23145	-c "received HelloRetryRequest message" \
				23146	-c "selected_group ( 256 )"
				23147
				23148	requires_openssl_tls1_3
				23149	requires_openssl_3_x
				23150	requires_config_enabled MBEDTLS_SSL_CLI_C
				23151	requires_config_enabled MBEDTLS_DEBUG_C
				23152	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23153	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23154	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> ffdhe4096" \
				23155	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23156	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe4096" \
				23157	0 \
				23158	-c "HTTP/1.0 200 ok" \
				23159	-c "Protocol is TLSv1.3" \
				23160	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23161	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23162	-c "Verifying peer X.509 certificate... ok" \
				23163	-c "received HelloRetryRequest message" \
				23164	-c "selected_group ( 258 )"
				23165
				23166	requires_openssl_tls1_3
				23167	requires_openssl_3_x
				23168	requires_config_enabled MBEDTLS_SSL_CLI_C
				23169	requires_config_enabled MBEDTLS_DEBUG_C
				23170	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23171	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23172	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> ffdhe6144" \
				23173	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23174	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe6144" \
				23175	0 \
				23176	-c "HTTP/1.0 200 ok" \
				23177	-c "Protocol is TLSv1.3" \
				23178	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23179	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23180	-c "Verifying peer X.509 certificate... ok" \
				23181	-c "received HelloRetryRequest message" \
				23182	-c "selected_group ( 259 )"
				23183
				23184	requires_openssl_tls1_3
				23185	requires_openssl_3_x
				23186	requires_config_enabled MBEDTLS_SSL_CLI_C
				23187	requires_config_enabled MBEDTLS_DEBUG_C
				23188	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23189	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23190	run_test "TLS 1.3 m->O: HRR ffdhe3072 -> ffdhe8192" \
				23191	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23192	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe8192" \
				23193	0 \
				23194	-c "HTTP/1.0 200 ok" \
				23195	-c "Protocol is TLSv1.3" \
				23196	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23197	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23198	-c "Verifying peer X.509 certificate... ok" \
				23199	-c "received HelloRetryRequest message" \
				23200	-c "selected_group ( 260 )"
				23201
				23202	requires_openssl_tls1_3
				23203	requires_config_enabled MBEDTLS_SSL_CLI_C
				23204	requires_config_enabled MBEDTLS_DEBUG_C
				23205	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23206	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23207	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> secp256r1" \
				23208	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23209	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp256r1" \
				23210	0 \
				23211	-c "HTTP/1.0 200 ok" \
				23212	-c "Protocol is TLSv1.3" \
				23213	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23214	-c "NamedGroup: secp256r1 ( 17 )" \
				23215	-c "Verifying peer X.509 certificate... ok" \
				23216	-c "received HelloRetryRequest message" \
				23217	-c "selected_group ( 23 )"
				23218
				23219	requires_openssl_tls1_3
				23220	requires_config_enabled MBEDTLS_SSL_CLI_C
				23221	requires_config_enabled MBEDTLS_DEBUG_C
				23222	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23223	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23224	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> secp384r1" \
				23225	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23226	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp384r1" \
				23227	0 \
				23228	-c "HTTP/1.0 200 ok" \
				23229	-c "Protocol is TLSv1.3" \
				23230	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23231	-c "NamedGroup: secp384r1 ( 18 )" \
				23232	-c "Verifying peer X.509 certificate... ok" \
				23233	-c "received HelloRetryRequest message" \
				23234	-c "selected_group ( 24 )"
				23235
				23236	requires_openssl_tls1_3
				23237	requires_config_enabled MBEDTLS_SSL_CLI_C
				23238	requires_config_enabled MBEDTLS_DEBUG_C
				23239	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23240	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23241	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> secp521r1" \
				23242	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23243	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp521r1" \
				23244	0 \
				23245	-c "HTTP/1.0 200 ok" \
				23246	-c "Protocol is TLSv1.3" \
				23247	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23248	-c "NamedGroup: secp521r1 ( 19 )" \
				23249	-c "Verifying peer X.509 certificate... ok" \
				23250	-c "received HelloRetryRequest message" \
				23251	-c "selected_group ( 25 )"
				23252
				23253	requires_openssl_tls1_3
				23254	requires_config_enabled MBEDTLS_SSL_CLI_C
				23255	requires_config_enabled MBEDTLS_DEBUG_C
				23256	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23257	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23258	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> x25519" \
				23259	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23260	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,x25519" \
				23261	0 \
				23262	-c "HTTP/1.0 200 ok" \
				23263	-c "Protocol is TLSv1.3" \
				23264	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23265	-c "NamedGroup: x25519 ( 1d )" \
				23266	-c "Verifying peer X.509 certificate... ok" \
				23267	-c "received HelloRetryRequest message" \
				23268	-c "selected_group ( 29 )"
				23269
				23270	requires_openssl_tls1_3
				23271	requires_config_enabled MBEDTLS_SSL_CLI_C
				23272	requires_config_enabled MBEDTLS_DEBUG_C
				23273	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23274	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23275	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> x448" \
				23276	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23277	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,x448" \
				23278	0 \
				23279	-c "HTTP/1.0 200 ok" \
				23280	-c "Protocol is TLSv1.3" \
				23281	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23282	-c "NamedGroup: x448 ( 1e )" \
				23283	-c "Verifying peer X.509 certificate... ok" \
				23284	-c "received HelloRetryRequest message" \
				23285	-c "selected_group ( 30 )"
				23286
				23287	requires_openssl_tls1_3
				23288	requires_openssl_3_x
				23289	requires_config_enabled MBEDTLS_SSL_CLI_C
				23290	requires_config_enabled MBEDTLS_DEBUG_C
				23291	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23292	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23293	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> ffdhe2048" \
				23294	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23295	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe2048" \
				23296	0 \
				23297	-c "HTTP/1.0 200 ok" \
				23298	-c "Protocol is TLSv1.3" \
				23299	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23300	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23301	-c "Verifying peer X.509 certificate... ok" \
				23302	-c "received HelloRetryRequest message" \
				23303	-c "selected_group ( 256 )"
				23304
				23305	requires_openssl_tls1_3
				23306	requires_openssl_3_x
				23307	requires_config_enabled MBEDTLS_SSL_CLI_C
				23308	requires_config_enabled MBEDTLS_DEBUG_C
				23309	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23310	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23311	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> ffdhe3072" \
				23312	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23313	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe3072" \
				23314	0 \
				23315	-c "HTTP/1.0 200 ok" \
				23316	-c "Protocol is TLSv1.3" \
				23317	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23318	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23319	-c "Verifying peer X.509 certificate... ok" \
				23320	-c "received HelloRetryRequest message" \
				23321	-c "selected_group ( 257 )"
				23322
				23323	requires_openssl_tls1_3
				23324	requires_openssl_3_x
				23325	requires_config_enabled MBEDTLS_SSL_CLI_C
				23326	requires_config_enabled MBEDTLS_DEBUG_C
				23327	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23328	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23329	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> ffdhe6144" \
				23330	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23331	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe6144" \
				23332	0 \
				23333	-c "HTTP/1.0 200 ok" \
				23334	-c "Protocol is TLSv1.3" \
				23335	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23336	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23337	-c "Verifying peer X.509 certificate... ok" \
				23338	-c "received HelloRetryRequest message" \
				23339	-c "selected_group ( 259 )"
				23340
				23341	requires_openssl_tls1_3
				23342	requires_openssl_3_x
				23343	requires_config_enabled MBEDTLS_SSL_CLI_C
				23344	requires_config_enabled MBEDTLS_DEBUG_C
				23345	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23346	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23347	run_test "TLS 1.3 m->O: HRR ffdhe4096 -> ffdhe8192" \
				23348	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23349	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe8192" \
				23350	0 \
				23351	-c "HTTP/1.0 200 ok" \
				23352	-c "Protocol is TLSv1.3" \
				23353	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23354	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23355	-c "Verifying peer X.509 certificate... ok" \
				23356	-c "received HelloRetryRequest message" \
				23357	-c "selected_group ( 260 )"
				23358
				23359	requires_openssl_tls1_3
				23360	requires_config_enabled MBEDTLS_SSL_CLI_C
				23361	requires_config_enabled MBEDTLS_DEBUG_C
				23362	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23363	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23364	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> secp256r1" \
				23365	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23366	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp256r1" \
				23367	0 \
				23368	-c "HTTP/1.0 200 ok" \
				23369	-c "Protocol is TLSv1.3" \
				23370	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23371	-c "NamedGroup: secp256r1 ( 17 )" \
				23372	-c "Verifying peer X.509 certificate... ok" \
				23373	-c "received HelloRetryRequest message" \
				23374	-c "selected_group ( 23 )"
				23375
				23376	requires_openssl_tls1_3
				23377	requires_config_enabled MBEDTLS_SSL_CLI_C
				23378	requires_config_enabled MBEDTLS_DEBUG_C
				23379	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23380	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23381	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> secp384r1" \
				23382	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23383	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp384r1" \
				23384	0 \
				23385	-c "HTTP/1.0 200 ok" \
				23386	-c "Protocol is TLSv1.3" \
				23387	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23388	-c "NamedGroup: secp384r1 ( 18 )" \
				23389	-c "Verifying peer X.509 certificate... ok" \
				23390	-c "received HelloRetryRequest message" \
				23391	-c "selected_group ( 24 )"
				23392
				23393	requires_openssl_tls1_3
				23394	requires_config_enabled MBEDTLS_SSL_CLI_C
				23395	requires_config_enabled MBEDTLS_DEBUG_C
				23396	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23397	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23398	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> secp521r1" \
				23399	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23400	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp521r1" \
				23401	0 \
				23402	-c "HTTP/1.0 200 ok" \
				23403	-c "Protocol is TLSv1.3" \
				23404	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23405	-c "NamedGroup: secp521r1 ( 19 )" \
				23406	-c "Verifying peer X.509 certificate... ok" \
				23407	-c "received HelloRetryRequest message" \
				23408	-c "selected_group ( 25 )"
				23409
				23410	requires_openssl_tls1_3
				23411	requires_config_enabled MBEDTLS_SSL_CLI_C
				23412	requires_config_enabled MBEDTLS_DEBUG_C
				23413	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23414	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23415	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> x25519" \
				23416	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23417	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,x25519" \
				23418	0 \
				23419	-c "HTTP/1.0 200 ok" \
				23420	-c "Protocol is TLSv1.3" \
				23421	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23422	-c "NamedGroup: x25519 ( 1d )" \
				23423	-c "Verifying peer X.509 certificate... ok" \
				23424	-c "received HelloRetryRequest message" \
				23425	-c "selected_group ( 29 )"
				23426
				23427	requires_openssl_tls1_3
				23428	requires_config_enabled MBEDTLS_SSL_CLI_C
				23429	requires_config_enabled MBEDTLS_DEBUG_C
				23430	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23431	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23432	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> x448" \
				23433	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23434	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,x448" \
				23435	0 \
				23436	-c "HTTP/1.0 200 ok" \
				23437	-c "Protocol is TLSv1.3" \
				23438	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23439	-c "NamedGroup: x448 ( 1e )" \
				23440	-c "Verifying peer X.509 certificate... ok" \
				23441	-c "received HelloRetryRequest message" \
				23442	-c "selected_group ( 30 )"
				23443
				23444	requires_openssl_tls1_3
				23445	requires_openssl_3_x
				23446	requires_config_enabled MBEDTLS_SSL_CLI_C
				23447	requires_config_enabled MBEDTLS_DEBUG_C
				23448	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23449	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23450	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> ffdhe2048" \
				23451	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23452	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe2048" \
				23453	0 \
				23454	-c "HTTP/1.0 200 ok" \
				23455	-c "Protocol is TLSv1.3" \
				23456	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23457	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23458	-c "Verifying peer X.509 certificate... ok" \
				23459	-c "received HelloRetryRequest message" \
				23460	-c "selected_group ( 256 )"
				23461
				23462	requires_openssl_tls1_3
				23463	requires_openssl_3_x
				23464	requires_config_enabled MBEDTLS_SSL_CLI_C
				23465	requires_config_enabled MBEDTLS_DEBUG_C
				23466	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23467	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23468	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> ffdhe3072" \
				23469	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23470	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe3072" \
				23471	0 \
				23472	-c "HTTP/1.0 200 ok" \
				23473	-c "Protocol is TLSv1.3" \
				23474	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23475	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23476	-c "Verifying peer X.509 certificate... ok" \
				23477	-c "received HelloRetryRequest message" \
				23478	-c "selected_group ( 257 )"
				23479
				23480	requires_openssl_tls1_3
				23481	requires_openssl_3_x
				23482	requires_config_enabled MBEDTLS_SSL_CLI_C
				23483	requires_config_enabled MBEDTLS_DEBUG_C
				23484	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23485	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23486	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> ffdhe4096" \
				23487	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23488	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe4096" \
				23489	0 \
				23490	-c "HTTP/1.0 200 ok" \
				23491	-c "Protocol is TLSv1.3" \
				23492	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23493	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23494	-c "Verifying peer X.509 certificate... ok" \
				23495	-c "received HelloRetryRequest message" \
				23496	-c "selected_group ( 258 )"
				23497
				23498	requires_openssl_tls1_3
				23499	requires_openssl_3_x
				23500	requires_config_enabled MBEDTLS_SSL_CLI_C
				23501	requires_config_enabled MBEDTLS_DEBUG_C
				23502	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23503	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23504	run_test "TLS 1.3 m->O: HRR ffdhe6144 -> ffdhe8192" \
				23505	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe8192 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23506	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe8192" \
				23507	0 \
				23508	-c "HTTP/1.0 200 ok" \
				23509	-c "Protocol is TLSv1.3" \
				23510	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23511	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23512	-c "Verifying peer X.509 certificate... ok" \
				23513	-c "received HelloRetryRequest message" \
				23514	-c "selected_group ( 260 )"
				23515
				23516	requires_openssl_tls1_3
				23517	requires_config_enabled MBEDTLS_SSL_CLI_C
				23518	requires_config_enabled MBEDTLS_DEBUG_C
				23519	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23520	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23521	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> secp256r1" \
				23522	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23523	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp256r1" \
				23524	0 \
				23525	-c "HTTP/1.0 200 ok" \
				23526	-c "Protocol is TLSv1.3" \
				23527	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23528	-c "NamedGroup: secp256r1 ( 17 )" \
				23529	-c "Verifying peer X.509 certificate... ok" \
				23530	-c "received HelloRetryRequest message" \
				23531	-c "selected_group ( 23 )"
				23532
				23533	requires_openssl_tls1_3
				23534	requires_config_enabled MBEDTLS_SSL_CLI_C
				23535	requires_config_enabled MBEDTLS_DEBUG_C
				23536	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23537	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23538	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> secp384r1" \
				23539	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23540	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp384r1" \
				23541	0 \
				23542	-c "HTTP/1.0 200 ok" \
				23543	-c "Protocol is TLSv1.3" \
				23544	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23545	-c "NamedGroup: secp384r1 ( 18 )" \
				23546	-c "Verifying peer X.509 certificate... ok" \
				23547	-c "received HelloRetryRequest message" \
				23548	-c "selected_group ( 24 )"
				23549
				23550	requires_openssl_tls1_3
				23551	requires_config_enabled MBEDTLS_SSL_CLI_C
				23552	requires_config_enabled MBEDTLS_DEBUG_C
				23553	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23554	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23555	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> secp521r1" \
				23556	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23557	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp521r1" \
				23558	0 \
				23559	-c "HTTP/1.0 200 ok" \
				23560	-c "Protocol is TLSv1.3" \
				23561	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23562	-c "NamedGroup: secp521r1 ( 19 )" \
				23563	-c "Verifying peer X.509 certificate... ok" \
				23564	-c "received HelloRetryRequest message" \
				23565	-c "selected_group ( 25 )"
				23566
				23567	requires_openssl_tls1_3
				23568	requires_config_enabled MBEDTLS_SSL_CLI_C
				23569	requires_config_enabled MBEDTLS_DEBUG_C
				23570	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23571	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23572	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> x25519" \
				23573	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23574	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,x25519" \
				23575	0 \
				23576	-c "HTTP/1.0 200 ok" \
				23577	-c "Protocol is TLSv1.3" \
				23578	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23579	-c "NamedGroup: x25519 ( 1d )" \
				23580	-c "Verifying peer X.509 certificate... ok" \
				23581	-c "received HelloRetryRequest message" \
				23582	-c "selected_group ( 29 )"
				23583
				23584	requires_openssl_tls1_3
				23585	requires_config_enabled MBEDTLS_SSL_CLI_C
				23586	requires_config_enabled MBEDTLS_DEBUG_C
				23587	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23588	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23589	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> x448" \
				23590	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23591	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,x448" \
				23592	0 \
				23593	-c "HTTP/1.0 200 ok" \
				23594	-c "Protocol is TLSv1.3" \
				23595	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23596	-c "NamedGroup: x448 ( 1e )" \
				23597	-c "Verifying peer X.509 certificate... ok" \
				23598	-c "received HelloRetryRequest message" \
				23599	-c "selected_group ( 30 )"
				23600
				23601	requires_openssl_tls1_3
				23602	requires_openssl_3_x
				23603	requires_config_enabled MBEDTLS_SSL_CLI_C
				23604	requires_config_enabled MBEDTLS_DEBUG_C
				23605	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23606	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23607	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> ffdhe2048" \
				23608	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23609	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe2048" \
				23610	0 \
				23611	-c "HTTP/1.0 200 ok" \
				23612	-c "Protocol is TLSv1.3" \
				23613	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23614	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23615	-c "Verifying peer X.509 certificate... ok" \
				23616	-c "received HelloRetryRequest message" \
				23617	-c "selected_group ( 256 )"
				23618
				23619	requires_openssl_tls1_3
				23620	requires_openssl_3_x
				23621	requires_config_enabled MBEDTLS_SSL_CLI_C
				23622	requires_config_enabled MBEDTLS_DEBUG_C
				23623	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23624	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23625	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> ffdhe3072" \
				23626	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe3072 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23627	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe3072" \
				23628	0 \
				23629	-c "HTTP/1.0 200 ok" \
				23630	-c "Protocol is TLSv1.3" \
				23631	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23632	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23633	-c "Verifying peer X.509 certificate... ok" \
				23634	-c "received HelloRetryRequest message" \
				23635	-c "selected_group ( 257 )"
				23636
				23637	requires_openssl_tls1_3
				23638	requires_openssl_3_x
				23639	requires_config_enabled MBEDTLS_SSL_CLI_C
				23640	requires_config_enabled MBEDTLS_DEBUG_C
				23641	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23642	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23643	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> ffdhe4096" \
				23644	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe4096 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23645	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe4096" \
				23646	0 \
				23647	-c "HTTP/1.0 200 ok" \
				23648	-c "Protocol is TLSv1.3" \
				23649	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23650	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23651	-c "Verifying peer X.509 certificate... ok" \
				23652	-c "received HelloRetryRequest message" \
				23653	-c "selected_group ( 258 )"
				23654
				23655	requires_openssl_tls1_3
				23656	requires_openssl_3_x
				23657	requires_config_enabled MBEDTLS_SSL_CLI_C
				23658	requires_config_enabled MBEDTLS_DEBUG_C
				23659	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23660	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23661	run_test "TLS 1.3 m->O: HRR ffdhe8192 -> ffdhe6144" \
				23662	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe6144 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
				23663	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe6144" \
				23664	0 \
				23665	-c "HTTP/1.0 200 ok" \
				23666	-c "Protocol is TLSv1.3" \
				23667	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23668	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23669	-c "Verifying peer X.509 certificate... ok" \
				23670	-c "received HelloRetryRequest message" \
				23671	-c "selected_group ( 259 )"
				23672
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23673	requires_gnutls_tls1_3
				23674	requires_gnutls_next_no_ticket
				23675	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23676	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23677	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23678	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23679	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23680	run_test "TLS 1.3 m->G: HRR secp256r1 -> secp384r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	23681	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	23682	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp384r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23683	0 \
				23684	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	23685	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23686	-c "NamedGroup: secp256r1 ( 17 )" \
				23687	-c "NamedGroup: secp384r1 ( 18 )" \
				23688	-c "Verifying peer X.509 certificate... ok" \
				23689	-c "received HelloRetryRequest message" \
				23690	-c "selected_group ( 24 )"
				23691
				23692	requires_gnutls_tls1_3
				23693	requires_gnutls_next_no_ticket
				23694	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23695	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23696	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23697	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23698	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23699	run_test "TLS 1.3 m->G: HRR secp256r1 -> secp521r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	23700	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	23701	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp521r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23702	0 \
				23703	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	23704	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23705	-c "NamedGroup: secp256r1 ( 17 )" \
				23706	-c "NamedGroup: secp521r1 ( 19 )" \
				23707	-c "Verifying peer X.509 certificate... ok" \
				23708	-c "received HelloRetryRequest message" \
				23709	-c "selected_group ( 25 )"
				23710
				23711	requires_gnutls_tls1_3
				23712	requires_gnutls_next_no_ticket
				23713	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23714	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23715	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23716	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23717	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23718	run_test "TLS 1.3 m->G: HRR secp256r1 -> x25519" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	23719	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	23720	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x25519" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23721	0 \
				23722	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	23723	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23724	-c "NamedGroup: secp256r1 ( 17 )" \
				23725	-c "NamedGroup: x25519 ( 1d )" \
				23726	-c "Verifying peer X.509 certificate... ok" \
				23727	-c "received HelloRetryRequest message" \
				23728	-c "selected_group ( 29 )"
				23729
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	23730	requires_gnutls_tls1_3
				23731	requires_gnutls_next_no_ticket
				23732	requires_gnutls_next_disable_tls13_compat
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	23733	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23734	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23735	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	23736	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	8031ba7	2022-03-22 12:53:45 +0000	[diff] [blame]	23737	run_test "TLS 1.3 m->G: HRR secp256r1 -> x448" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	23738	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	23739	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x448" \
XiaokangQian	83f8188	2022-03-17 06:26:36 +0000	[diff] [blame]	23740	0 \
				23741	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	23742	-c "Protocol is TLSv1.3" \
XiaokangQian	a193144	2022-03-25 11:58:22 +0000	[diff] [blame]	23743	-c "NamedGroup: secp256r1 ( 17 )" \
				23744	-c "NamedGroup: x448 ( 1e )" \
				23745	-c "Verifying peer X.509 certificate... ok" \
				23746	-c "received HelloRetryRequest message" \
				23747	-c "selected_group ( 30 )"
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23748
				23749	requires_gnutls_tls1_3
				23750	requires_gnutls_next_no_ticket
				23751	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23752	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23753	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23754	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23755	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	23756	run_test "TLS 1.3 m->G: HRR secp256r1 -> ffdhe2048" \
				23757	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				23758	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe2048" \
				23759	0 \
				23760	-c "HTTP/1.0 200 OK" \
				23761	-c "Protocol is TLSv1.3" \
				23762	-c "NamedGroup: secp256r1 ( 17 )" \
				23763	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23764	-c "Verifying peer X.509 certificate... ok" \
				23765	-c "received HelloRetryRequest message" \
				23766	-c "selected_group ( 256 )"
				23767
				23768	requires_gnutls_tls1_3
				23769	requires_gnutls_next_no_ticket
				23770	requires_gnutls_next_disable_tls13_compat
				23771	requires_config_enabled MBEDTLS_SSL_CLI_C
				23772	requires_config_enabled MBEDTLS_DEBUG_C
				23773	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23774	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23775	run_test "TLS 1.3 m->G: HRR secp256r1 -> ffdhe3072" \
				23776	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				23777	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe3072" \
				23778	0 \
				23779	-c "HTTP/1.0 200 OK" \
				23780	-c "Protocol is TLSv1.3" \
				23781	-c "NamedGroup: secp256r1 ( 17 )" \
				23782	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23783	-c "Verifying peer X.509 certificate... ok" \
				23784	-c "received HelloRetryRequest message" \
				23785	-c "selected_group ( 257 )"
				23786
				23787	requires_gnutls_tls1_3
				23788	requires_gnutls_next_no_ticket
				23789	requires_gnutls_next_disable_tls13_compat
				23790	requires_config_enabled MBEDTLS_SSL_CLI_C
				23791	requires_config_enabled MBEDTLS_DEBUG_C
				23792	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23793	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23794	run_test "TLS 1.3 m->G: HRR secp256r1 -> ffdhe4096" \
				23795	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				23796	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe4096" \
				23797	0 \
				23798	-c "HTTP/1.0 200 OK" \
				23799	-c "Protocol is TLSv1.3" \
				23800	-c "NamedGroup: secp256r1 ( 17 )" \
				23801	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23802	-c "Verifying peer X.509 certificate... ok" \
				23803	-c "received HelloRetryRequest message" \
				23804	-c "selected_group ( 258 )"
				23805
				23806	requires_gnutls_tls1_3
				23807	requires_gnutls_next_no_ticket
				23808	requires_gnutls_next_disable_tls13_compat
				23809	requires_config_enabled MBEDTLS_SSL_CLI_C
				23810	requires_config_enabled MBEDTLS_DEBUG_C
				23811	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23812	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23813	run_test "TLS 1.3 m->G: HRR secp256r1 -> ffdhe6144" \
				23814	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				23815	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe6144" \
				23816	0 \
				23817	-c "HTTP/1.0 200 OK" \
				23818	-c "Protocol is TLSv1.3" \
				23819	-c "NamedGroup: secp256r1 ( 17 )" \
				23820	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23821	-c "Verifying peer X.509 certificate... ok" \
				23822	-c "received HelloRetryRequest message" \
				23823	-c "selected_group ( 259 )"
				23824
				23825	requires_gnutls_tls1_3
				23826	requires_gnutls_next_no_ticket
				23827	requires_gnutls_next_disable_tls13_compat
				23828	requires_config_enabled MBEDTLS_SSL_CLI_C
				23829	requires_config_enabled MBEDTLS_DEBUG_C
				23830	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23831	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23832	run_test "TLS 1.3 m->G: HRR secp256r1 -> ffdhe8192" \
				23833	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				23834	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe8192" \
				23835	0 \
				23836	-c "HTTP/1.0 200 OK" \
				23837	-c "Protocol is TLSv1.3" \
				23838	-c "NamedGroup: secp256r1 ( 17 )" \
				23839	-c "NamedGroup: ffdhe8192 ( 104 )" \
				23840	-c "Verifying peer X.509 certificate... ok" \
				23841	-c "received HelloRetryRequest message" \
				23842	-c "selected_group ( 260 )"
				23843
				23844	requires_gnutls_tls1_3
				23845	requires_gnutls_next_no_ticket
				23846	requires_gnutls_next_disable_tls13_compat
				23847	requires_config_enabled MBEDTLS_SSL_CLI_C
				23848	requires_config_enabled MBEDTLS_DEBUG_C
				23849	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23850	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23851	run_test "TLS 1.3 m->G: HRR secp384r1 -> secp256r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	23852	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	23853	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp256r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23854	0 \
				23855	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	23856	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23857	-c "NamedGroup: secp384r1 ( 18 )" \
				23858	-c "NamedGroup: secp256r1 ( 17 )" \
				23859	-c "Verifying peer X.509 certificate... ok" \
				23860	-c "received HelloRetryRequest message" \
				23861	-c "selected_group ( 23 )"
				23862
				23863	requires_gnutls_tls1_3
				23864	requires_gnutls_next_no_ticket
				23865	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23866	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23867	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23868	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23869	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23870	run_test "TLS 1.3 m->G: HRR secp384r1 -> secp521r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	23871	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	23872	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp521r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23873	0 \
				23874	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	23875	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23876	-c "NamedGroup: secp384r1 ( 18 )" \
				23877	-c "NamedGroup: secp521r1 ( 19 )" \
				23878	-c "Verifying peer X.509 certificate... ok" \
				23879	-c "received HelloRetryRequest message" \
				23880	-c "selected_group ( 25 )"
				23881
				23882	requires_gnutls_tls1_3
				23883	requires_gnutls_next_no_ticket
				23884	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23885	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23886	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23887	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23888	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23889	run_test "TLS 1.3 m->G: HRR secp384r1 -> x25519" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	23890	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	23891	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x25519" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23892	0 \
				23893	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	23894	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23895	-c "NamedGroup: secp384r1 ( 18 )" \
				23896	-c "NamedGroup: x25519 ( 1d )" \
				23897	-c "Verifying peer X.509 certificate... ok" \
				23898	-c "received HelloRetryRequest message" \
				23899	-c "selected_group ( 29 )"
				23900
				23901	requires_gnutls_tls1_3
				23902	requires_gnutls_next_no_ticket
				23903	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23904	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23905	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23906	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23907	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23908	run_test "TLS 1.3 m->G: HRR secp384r1 -> x448" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	23909	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	23910	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x448" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23911	0 \
				23912	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	23913	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23914	-c "NamedGroup: secp384r1 ( 18 )" \
				23915	-c "NamedGroup: x448 ( 1e )" \
				23916	-c "Verifying peer X.509 certificate... ok" \
				23917	-c "received HelloRetryRequest message" \
				23918	-c "selected_group ( 30 )"
				23919
				23920	requires_gnutls_tls1_3
				23921	requires_gnutls_next_no_ticket
				23922	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23923	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	23924	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	23925	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	23926	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	23927	run_test "TLS 1.3 m->G: HRR secp384r1 -> ffdhe2048" \
				23928	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				23929	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe2048" \
				23930	0 \
				23931	-c "HTTP/1.0 200 OK" \
				23932	-c "Protocol is TLSv1.3" \
				23933	-c "NamedGroup: secp384r1 ( 18 )" \
				23934	-c "NamedGroup: ffdhe2048 ( 100 )" \
				23935	-c "Verifying peer X.509 certificate... ok" \
				23936	-c "received HelloRetryRequest message" \
				23937	-c "selected_group ( 256 )"
				23938
				23939	requires_gnutls_tls1_3
				23940	requires_gnutls_next_no_ticket
				23941	requires_gnutls_next_disable_tls13_compat
				23942	requires_config_enabled MBEDTLS_SSL_CLI_C
				23943	requires_config_enabled MBEDTLS_DEBUG_C
				23944	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23945	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23946	run_test "TLS 1.3 m->G: HRR secp384r1 -> ffdhe3072" \
				23947	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				23948	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe3072" \
				23949	0 \
				23950	-c "HTTP/1.0 200 OK" \
				23951	-c "Protocol is TLSv1.3" \
				23952	-c "NamedGroup: secp384r1 ( 18 )" \
				23953	-c "NamedGroup: ffdhe3072 ( 101 )" \
				23954	-c "Verifying peer X.509 certificate... ok" \
				23955	-c "received HelloRetryRequest message" \
				23956	-c "selected_group ( 257 )"
				23957
				23958	requires_gnutls_tls1_3
				23959	requires_gnutls_next_no_ticket
				23960	requires_gnutls_next_disable_tls13_compat
				23961	requires_config_enabled MBEDTLS_SSL_CLI_C
				23962	requires_config_enabled MBEDTLS_DEBUG_C
				23963	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23964	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23965	run_test "TLS 1.3 m->G: HRR secp384r1 -> ffdhe4096" \
				23966	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				23967	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe4096" \
				23968	0 \
				23969	-c "HTTP/1.0 200 OK" \
				23970	-c "Protocol is TLSv1.3" \
				23971	-c "NamedGroup: secp384r1 ( 18 )" \
				23972	-c "NamedGroup: ffdhe4096 ( 102 )" \
				23973	-c "Verifying peer X.509 certificate... ok" \
				23974	-c "received HelloRetryRequest message" \
				23975	-c "selected_group ( 258 )"
				23976
				23977	requires_gnutls_tls1_3
				23978	requires_gnutls_next_no_ticket
				23979	requires_gnutls_next_disable_tls13_compat
				23980	requires_config_enabled MBEDTLS_SSL_CLI_C
				23981	requires_config_enabled MBEDTLS_DEBUG_C
				23982	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				23983	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				23984	run_test "TLS 1.3 m->G: HRR secp384r1 -> ffdhe6144" \
				23985	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				23986	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe6144" \
				23987	0 \
				23988	-c "HTTP/1.0 200 OK" \
				23989	-c "Protocol is TLSv1.3" \
				23990	-c "NamedGroup: secp384r1 ( 18 )" \
				23991	-c "NamedGroup: ffdhe6144 ( 103 )" \
				23992	-c "Verifying peer X.509 certificate... ok" \
				23993	-c "received HelloRetryRequest message" \
				23994	-c "selected_group ( 259 )"
				23995
				23996	requires_gnutls_tls1_3
				23997	requires_gnutls_next_no_ticket
				23998	requires_gnutls_next_disable_tls13_compat
				23999	requires_config_enabled MBEDTLS_SSL_CLI_C
				24000	requires_config_enabled MBEDTLS_DEBUG_C
				24001	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24002	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24003	run_test "TLS 1.3 m->G: HRR secp384r1 -> ffdhe8192" \
				24004	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				24005	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe8192" \
				24006	0 \
				24007	-c "HTTP/1.0 200 OK" \
				24008	-c "Protocol is TLSv1.3" \
				24009	-c "NamedGroup: secp384r1 ( 18 )" \
				24010	-c "NamedGroup: ffdhe8192 ( 104 )" \
				24011	-c "Verifying peer X.509 certificate... ok" \
				24012	-c "received HelloRetryRequest message" \
				24013	-c "selected_group ( 260 )"
				24014
				24015	requires_gnutls_tls1_3
				24016	requires_gnutls_next_no_ticket
				24017	requires_gnutls_next_disable_tls13_compat
				24018	requires_config_enabled MBEDTLS_SSL_CLI_C
				24019	requires_config_enabled MBEDTLS_DEBUG_C
				24020	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24021	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24022	run_test "TLS 1.3 m->G: HRR secp521r1 -> secp256r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24023	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24024	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp256r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24025	0 \
				24026	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24027	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24028	-c "NamedGroup: secp521r1 ( 19 )" \
				24029	-c "NamedGroup: secp256r1 ( 17 )" \
				24030	-c "Verifying peer X.509 certificate... ok" \
				24031	-c "received HelloRetryRequest message" \
				24032	-c "selected_group ( 23 )"
				24033
				24034	requires_gnutls_tls1_3
				24035	requires_gnutls_next_no_ticket
				24036	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24037	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24038	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24039	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24040	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24041	run_test "TLS 1.3 m->G: HRR secp521r1 -> secp384r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24042	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24043	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp384r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24044	0 \
				24045	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24046	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24047	-c "NamedGroup: secp521r1 ( 19 )" \
				24048	-c "NamedGroup: secp384r1 ( 18 )" \
				24049	-c "Verifying peer X.509 certificate... ok" \
				24050	-c "received HelloRetryRequest message" \
				24051	-c "selected_group ( 24 )"
				24052
				24053	requires_gnutls_tls1_3
				24054	requires_gnutls_next_no_ticket
				24055	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24056	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24057	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24058	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24059	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24060	run_test "TLS 1.3 m->G: HRR secp521r1 -> x25519" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24061	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24062	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x25519" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24063	0 \
				24064	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24065	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24066	-c "NamedGroup: secp521r1 ( 19 )" \
				24067	-c "NamedGroup: x25519 ( 1d )" \
				24068	-c "Verifying peer X.509 certificate... ok" \
				24069	-c "received HelloRetryRequest message" \
				24070	-c "selected_group ( 29 )"
				24071
				24072	requires_gnutls_tls1_3
				24073	requires_gnutls_next_no_ticket
				24074	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24075	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24076	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24077	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24078	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24079	run_test "TLS 1.3 m->G: HRR secp521r1 -> x448" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24080	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24081	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x448" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24082	0 \
				24083	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24084	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24085	-c "NamedGroup: secp521r1 ( 19 )" \
				24086	-c "NamedGroup: x448 ( 1e )" \
				24087	-c "Verifying peer X.509 certificate... ok" \
				24088	-c "received HelloRetryRequest message" \
				24089	-c "selected_group ( 30 )"
				24090
				24091	requires_gnutls_tls1_3
				24092	requires_gnutls_next_no_ticket
				24093	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24094	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24095	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24096	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24097	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	24098	run_test "TLS 1.3 m->G: HRR secp521r1 -> ffdhe2048" \
				24099	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				24100	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe2048" \
				24101	0 \
				24102	-c "HTTP/1.0 200 OK" \
				24103	-c "Protocol is TLSv1.3" \
				24104	-c "NamedGroup: secp521r1 ( 19 )" \
				24105	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24106	-c "Verifying peer X.509 certificate... ok" \
				24107	-c "received HelloRetryRequest message" \
				24108	-c "selected_group ( 256 )"
				24109
				24110	requires_gnutls_tls1_3
				24111	requires_gnutls_next_no_ticket
				24112	requires_gnutls_next_disable_tls13_compat
				24113	requires_config_enabled MBEDTLS_SSL_CLI_C
				24114	requires_config_enabled MBEDTLS_DEBUG_C
				24115	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24116	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24117	run_test "TLS 1.3 m->G: HRR secp521r1 -> ffdhe3072" \
				24118	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				24119	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe3072" \
				24120	0 \
				24121	-c "HTTP/1.0 200 OK" \
				24122	-c "Protocol is TLSv1.3" \
				24123	-c "NamedGroup: secp521r1 ( 19 )" \
				24124	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24125	-c "Verifying peer X.509 certificate... ok" \
				24126	-c "received HelloRetryRequest message" \
				24127	-c "selected_group ( 257 )"
				24128
				24129	requires_gnutls_tls1_3
				24130	requires_gnutls_next_no_ticket
				24131	requires_gnutls_next_disable_tls13_compat
				24132	requires_config_enabled MBEDTLS_SSL_CLI_C
				24133	requires_config_enabled MBEDTLS_DEBUG_C
				24134	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24135	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24136	run_test "TLS 1.3 m->G: HRR secp521r1 -> ffdhe4096" \
				24137	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				24138	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe4096" \
				24139	0 \
				24140	-c "HTTP/1.0 200 OK" \
				24141	-c "Protocol is TLSv1.3" \
				24142	-c "NamedGroup: secp521r1 ( 19 )" \
				24143	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24144	-c "Verifying peer X.509 certificate... ok" \
				24145	-c "received HelloRetryRequest message" \
				24146	-c "selected_group ( 258 )"
				24147
				24148	requires_gnutls_tls1_3
				24149	requires_gnutls_next_no_ticket
				24150	requires_gnutls_next_disable_tls13_compat
				24151	requires_config_enabled MBEDTLS_SSL_CLI_C
				24152	requires_config_enabled MBEDTLS_DEBUG_C
				24153	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24154	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24155	run_test "TLS 1.3 m->G: HRR secp521r1 -> ffdhe6144" \
				24156	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				24157	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe6144" \
				24158	0 \
				24159	-c "HTTP/1.0 200 OK" \
				24160	-c "Protocol is TLSv1.3" \
				24161	-c "NamedGroup: secp521r1 ( 19 )" \
				24162	-c "NamedGroup: ffdhe6144 ( 103 )" \
				24163	-c "Verifying peer X.509 certificate... ok" \
				24164	-c "received HelloRetryRequest message" \
				24165	-c "selected_group ( 259 )"
				24166
				24167	requires_gnutls_tls1_3
				24168	requires_gnutls_next_no_ticket
				24169	requires_gnutls_next_disable_tls13_compat
				24170	requires_config_enabled MBEDTLS_SSL_CLI_C
				24171	requires_config_enabled MBEDTLS_DEBUG_C
				24172	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24173	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24174	run_test "TLS 1.3 m->G: HRR secp521r1 -> ffdhe8192" \
				24175	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				24176	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe8192" \
				24177	0 \
				24178	-c "HTTP/1.0 200 OK" \
				24179	-c "Protocol is TLSv1.3" \
				24180	-c "NamedGroup: secp521r1 ( 19 )" \
				24181	-c "NamedGroup: ffdhe8192 ( 104 )" \
				24182	-c "Verifying peer X.509 certificate... ok" \
				24183	-c "received HelloRetryRequest message" \
				24184	-c "selected_group ( 260 )"
				24185
				24186	requires_gnutls_tls1_3
				24187	requires_gnutls_next_no_ticket
				24188	requires_gnutls_next_disable_tls13_compat
				24189	requires_config_enabled MBEDTLS_SSL_CLI_C
				24190	requires_config_enabled MBEDTLS_DEBUG_C
				24191	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24192	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24193	run_test "TLS 1.3 m->G: HRR x25519 -> secp256r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24194	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24195	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp256r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24196	0 \
				24197	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24198	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24199	-c "NamedGroup: x25519 ( 1d )" \
				24200	-c "NamedGroup: secp256r1 ( 17 )" \
				24201	-c "Verifying peer X.509 certificate... ok" \
				24202	-c "received HelloRetryRequest message" \
				24203	-c "selected_group ( 23 )"
				24204
				24205	requires_gnutls_tls1_3
				24206	requires_gnutls_next_no_ticket
				24207	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24208	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24209	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24210	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24211	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24212	run_test "TLS 1.3 m->G: HRR x25519 -> secp384r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24213	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24214	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp384r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24215	0 \
				24216	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24217	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24218	-c "NamedGroup: x25519 ( 1d )" \
				24219	-c "NamedGroup: secp384r1 ( 18 )" \
				24220	-c "Verifying peer X.509 certificate... ok" \
				24221	-c "received HelloRetryRequest message" \
				24222	-c "selected_group ( 24 )"
				24223
				24224	requires_gnutls_tls1_3
				24225	requires_gnutls_next_no_ticket
				24226	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24227	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24228	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24229	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24230	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24231	run_test "TLS 1.3 m->G: HRR x25519 -> secp521r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24232	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24233	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp521r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24234	0 \
				24235	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24236	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24237	-c "NamedGroup: x25519 ( 1d )" \
				24238	-c "NamedGroup: secp521r1 ( 19 )" \
				24239	-c "Verifying peer X.509 certificate... ok" \
				24240	-c "received HelloRetryRequest message" \
				24241	-c "selected_group ( 25 )"
				24242
				24243	requires_gnutls_tls1_3
				24244	requires_gnutls_next_no_ticket
				24245	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24246	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24247	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24248	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24249	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24250	run_test "TLS 1.3 m->G: HRR x25519 -> x448" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24251	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24252	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,x448" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24253	0 \
				24254	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24255	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24256	-c "NamedGroup: x25519 ( 1d )" \
				24257	-c "NamedGroup: x448 ( 1e )" \
				24258	-c "Verifying peer X.509 certificate... ok" \
				24259	-c "received HelloRetryRequest message" \
				24260	-c "selected_group ( 30 )"
				24261
				24262	requires_gnutls_tls1_3
				24263	requires_gnutls_next_no_ticket
				24264	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24265	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24266	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24267	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24268	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	24269	run_test "TLS 1.3 m->G: HRR x25519 -> ffdhe2048" \
				24270	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				24271	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe2048" \
				24272	0 \
				24273	-c "HTTP/1.0 200 OK" \
				24274	-c "Protocol is TLSv1.3" \
				24275	-c "NamedGroup: x25519 ( 1d )" \
				24276	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24277	-c "Verifying peer X.509 certificate... ok" \
				24278	-c "received HelloRetryRequest message" \
				24279	-c "selected_group ( 256 )"
				24280
				24281	requires_gnutls_tls1_3
				24282	requires_gnutls_next_no_ticket
				24283	requires_gnutls_next_disable_tls13_compat
				24284	requires_config_enabled MBEDTLS_SSL_CLI_C
				24285	requires_config_enabled MBEDTLS_DEBUG_C
				24286	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24287	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24288	run_test "TLS 1.3 m->G: HRR x25519 -> ffdhe3072" \
				24289	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				24290	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe3072" \
				24291	0 \
				24292	-c "HTTP/1.0 200 OK" \
				24293	-c "Protocol is TLSv1.3" \
				24294	-c "NamedGroup: x25519 ( 1d )" \
				24295	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24296	-c "Verifying peer X.509 certificate... ok" \
				24297	-c "received HelloRetryRequest message" \
				24298	-c "selected_group ( 257 )"
				24299
				24300	requires_gnutls_tls1_3
				24301	requires_gnutls_next_no_ticket
				24302	requires_gnutls_next_disable_tls13_compat
				24303	requires_config_enabled MBEDTLS_SSL_CLI_C
				24304	requires_config_enabled MBEDTLS_DEBUG_C
				24305	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24306	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24307	run_test "TLS 1.3 m->G: HRR x25519 -> ffdhe4096" \
				24308	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				24309	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe4096" \
				24310	0 \
				24311	-c "HTTP/1.0 200 OK" \
				24312	-c "Protocol is TLSv1.3" \
				24313	-c "NamedGroup: x25519 ( 1d )" \
				24314	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24315	-c "Verifying peer X.509 certificate... ok" \
				24316	-c "received HelloRetryRequest message" \
				24317	-c "selected_group ( 258 )"
				24318
				24319	requires_gnutls_tls1_3
				24320	requires_gnutls_next_no_ticket
				24321	requires_gnutls_next_disable_tls13_compat
				24322	requires_config_enabled MBEDTLS_SSL_CLI_C
				24323	requires_config_enabled MBEDTLS_DEBUG_C
				24324	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24325	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24326	run_test "TLS 1.3 m->G: HRR x25519 -> ffdhe6144" \
				24327	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				24328	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe6144" \
				24329	0 \
				24330	-c "HTTP/1.0 200 OK" \
				24331	-c "Protocol is TLSv1.3" \
				24332	-c "NamedGroup: x25519 ( 1d )" \
				24333	-c "NamedGroup: ffdhe6144 ( 103 )" \
				24334	-c "Verifying peer X.509 certificate... ok" \
				24335	-c "received HelloRetryRequest message" \
				24336	-c "selected_group ( 259 )"
				24337
				24338	requires_gnutls_tls1_3
				24339	requires_gnutls_next_no_ticket
				24340	requires_gnutls_next_disable_tls13_compat
				24341	requires_config_enabled MBEDTLS_SSL_CLI_C
				24342	requires_config_enabled MBEDTLS_DEBUG_C
				24343	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24344	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24345	run_test "TLS 1.3 m->G: HRR x25519 -> ffdhe8192" \
				24346	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				24347	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe8192" \
				24348	0 \
				24349	-c "HTTP/1.0 200 OK" \
				24350	-c "Protocol is TLSv1.3" \
				24351	-c "NamedGroup: x25519 ( 1d )" \
				24352	-c "NamedGroup: ffdhe8192 ( 104 )" \
				24353	-c "Verifying peer X.509 certificate... ok" \
				24354	-c "received HelloRetryRequest message" \
				24355	-c "selected_group ( 260 )"
				24356
				24357	requires_gnutls_tls1_3
				24358	requires_gnutls_next_no_ticket
				24359	requires_gnutls_next_disable_tls13_compat
				24360	requires_config_enabled MBEDTLS_SSL_CLI_C
				24361	requires_config_enabled MBEDTLS_DEBUG_C
				24362	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24363	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24364	run_test "TLS 1.3 m->G: HRR x448 -> secp256r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24365	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24366	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp256r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24367	0 \
				24368	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24369	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24370	-c "NamedGroup: x448 ( 1e )" \
				24371	-c "NamedGroup: secp256r1 ( 17 )" \
				24372	-c "Verifying peer X.509 certificate... ok" \
				24373	-c "received HelloRetryRequest message" \
				24374	-c "selected_group ( 23 )"
				24375
				24376	requires_gnutls_tls1_3
				24377	requires_gnutls_next_no_ticket
				24378	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24379	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24380	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24381	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24382	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24383	run_test "TLS 1.3 m->G: HRR x448 -> secp384r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24384	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24385	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp384r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24386	0 \
				24387	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24388	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24389	-c "NamedGroup: x448 ( 1e )" \
				24390	-c "NamedGroup: secp384r1 ( 18 )" \
				24391	-c "Verifying peer X.509 certificate... ok" \
				24392	-c "received HelloRetryRequest message" \
				24393	-c "selected_group ( 24 )"
				24394
				24395	requires_gnutls_tls1_3
				24396	requires_gnutls_next_no_ticket
				24397	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24398	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24399	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24400	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24401	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24402	run_test "TLS 1.3 m->G: HRR x448 -> secp521r1" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24403	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24404	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp521r1" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24405	0 \
				24406	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24407	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24408	-c "NamedGroup: x448 ( 1e )" \
				24409	-c "NamedGroup: secp521r1 ( 19 )" \
				24410	-c "Verifying peer X.509 certificate... ok" \
				24411	-c "received HelloRetryRequest message" \
				24412	-c "selected_group ( 25 )"
				24413
				24414	requires_gnutls_tls1_3
				24415	requires_gnutls_next_no_ticket
				24416	requires_gnutls_next_disable_tls13_compat
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24417	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	24418	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	24419	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24420	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24421	run_test "TLS 1.3 m->G: HRR x448 -> x25519" \
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	24422	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	24423	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,x25519" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24424	0 \
				24425	-c "HTTP/1.0 200 OK" \
Ronald Cron	df5f868	2022-04-05 16:01:03 +0200	[diff] [blame]	24426	-c "Protocol is TLSv1.3" \
XiaokangQian	2e17fb8	2022-03-28 03:30:05 +0000	[diff] [blame]	24427	-c "NamedGroup: x448 ( 1e )" \
				24428	-c "NamedGroup: x25519 ( 1d )" \
				24429	-c "Verifying peer X.509 certificate... ok" \
				24430	-c "received HelloRetryRequest message" \
				24431	-c "selected_group ( 29 )"
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	24432
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	24433	requires_gnutls_tls1_3
				24434	requires_gnutls_next_no_ticket
				24435	requires_gnutls_next_disable_tls13_compat
				24436	requires_config_enabled MBEDTLS_SSL_CLI_C
				24437	requires_config_enabled MBEDTLS_DEBUG_C
				24438	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24439	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24440	run_test "TLS 1.3 m->G: HRR x448 -> ffdhe2048" \
				24441	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				24442	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe2048" \
				24443	0 \
				24444	-c "HTTP/1.0 200 OK" \
				24445	-c "Protocol is TLSv1.3" \
				24446	-c "NamedGroup: x448 ( 1e )" \
				24447	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24448	-c "Verifying peer X.509 certificate... ok" \
				24449	-c "received HelloRetryRequest message" \
				24450	-c "selected_group ( 256 )"
				24451
				24452	requires_gnutls_tls1_3
				24453	requires_gnutls_next_no_ticket
				24454	requires_gnutls_next_disable_tls13_compat
				24455	requires_config_enabled MBEDTLS_SSL_CLI_C
				24456	requires_config_enabled MBEDTLS_DEBUG_C
				24457	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24458	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24459	run_test "TLS 1.3 m->G: HRR x448 -> ffdhe3072" \
				24460	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				24461	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe3072" \
				24462	0 \
				24463	-c "HTTP/1.0 200 OK" \
				24464	-c "Protocol is TLSv1.3" \
				24465	-c "NamedGroup: x448 ( 1e )" \
				24466	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24467	-c "Verifying peer X.509 certificate... ok" \
				24468	-c "received HelloRetryRequest message" \
				24469	-c "selected_group ( 257 )"
				24470
				24471	requires_gnutls_tls1_3
				24472	requires_gnutls_next_no_ticket
				24473	requires_gnutls_next_disable_tls13_compat
				24474	requires_config_enabled MBEDTLS_SSL_CLI_C
				24475	requires_config_enabled MBEDTLS_DEBUG_C
				24476	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24477	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24478	run_test "TLS 1.3 m->G: HRR x448 -> ffdhe4096" \
				24479	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				24480	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe4096" \
				24481	0 \
				24482	-c "HTTP/1.0 200 OK" \
				24483	-c "Protocol is TLSv1.3" \
				24484	-c "NamedGroup: x448 ( 1e )" \
				24485	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24486	-c "Verifying peer X.509 certificate... ok" \
				24487	-c "received HelloRetryRequest message" \
				24488	-c "selected_group ( 258 )"
				24489
				24490	requires_gnutls_tls1_3
				24491	requires_gnutls_next_no_ticket
				24492	requires_gnutls_next_disable_tls13_compat
				24493	requires_config_enabled MBEDTLS_SSL_CLI_C
				24494	requires_config_enabled MBEDTLS_DEBUG_C
				24495	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24496	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24497	run_test "TLS 1.3 m->G: HRR x448 -> ffdhe6144" \
				24498	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				24499	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe6144" \
				24500	0 \
				24501	-c "HTTP/1.0 200 OK" \
				24502	-c "Protocol is TLSv1.3" \
				24503	-c "NamedGroup: x448 ( 1e )" \
				24504	-c "NamedGroup: ffdhe6144 ( 103 )" \
				24505	-c "Verifying peer X.509 certificate... ok" \
				24506	-c "received HelloRetryRequest message" \
				24507	-c "selected_group ( 259 )"
				24508
				24509	requires_gnutls_tls1_3
				24510	requires_gnutls_next_no_ticket
				24511	requires_gnutls_next_disable_tls13_compat
				24512	requires_config_enabled MBEDTLS_SSL_CLI_C
				24513	requires_config_enabled MBEDTLS_DEBUG_C
				24514	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24515	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24516	run_test "TLS 1.3 m->G: HRR x448 -> ffdhe8192" \
				24517	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				24518	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe8192" \
				24519	0 \
				24520	-c "HTTP/1.0 200 OK" \
				24521	-c "Protocol is TLSv1.3" \
				24522	-c "NamedGroup: x448 ( 1e )" \
				24523	-c "NamedGroup: ffdhe8192 ( 104 )" \
				24524	-c "Verifying peer X.509 certificate... ok" \
				24525	-c "received HelloRetryRequest message" \
				24526	-c "selected_group ( 260 )"
				24527
				24528	requires_gnutls_tls1_3
				24529	requires_gnutls_next_no_ticket
				24530	requires_gnutls_next_disable_tls13_compat
				24531	requires_config_enabled MBEDTLS_SSL_CLI_C
				24532	requires_config_enabled MBEDTLS_DEBUG_C
				24533	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24534	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24535	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> secp256r1" \
				24536	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				24537	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp256r1" \
				24538	0 \
				24539	-c "HTTP/1.0 200 OK" \
				24540	-c "Protocol is TLSv1.3" \
				24541	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24542	-c "NamedGroup: secp256r1 ( 17 )" \
				24543	-c "Verifying peer X.509 certificate... ok" \
				24544	-c "received HelloRetryRequest message" \
				24545	-c "selected_group ( 23 )"
				24546
				24547	requires_gnutls_tls1_3
				24548	requires_gnutls_next_no_ticket
				24549	requires_gnutls_next_disable_tls13_compat
				24550	requires_config_enabled MBEDTLS_SSL_CLI_C
				24551	requires_config_enabled MBEDTLS_DEBUG_C
				24552	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24553	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24554	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> secp384r1" \
				24555	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				24556	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp384r1" \
				24557	0 \
				24558	-c "HTTP/1.0 200 OK" \
				24559	-c "Protocol is TLSv1.3" \
				24560	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24561	-c "NamedGroup: secp384r1 ( 18 )" \
				24562	-c "Verifying peer X.509 certificate... ok" \
				24563	-c "received HelloRetryRequest message" \
				24564	-c "selected_group ( 24 )"
				24565
				24566	requires_gnutls_tls1_3
				24567	requires_gnutls_next_no_ticket
				24568	requires_gnutls_next_disable_tls13_compat
				24569	requires_config_enabled MBEDTLS_SSL_CLI_C
				24570	requires_config_enabled MBEDTLS_DEBUG_C
				24571	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24572	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24573	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> secp521r1" \
				24574	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				24575	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp521r1" \
				24576	0 \
				24577	-c "HTTP/1.0 200 OK" \
				24578	-c "Protocol is TLSv1.3" \
				24579	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24580	-c "NamedGroup: secp521r1 ( 19 )" \
				24581	-c "Verifying peer X.509 certificate... ok" \
				24582	-c "received HelloRetryRequest message" \
				24583	-c "selected_group ( 25 )"
				24584
				24585	requires_gnutls_tls1_3
				24586	requires_gnutls_next_no_ticket
				24587	requires_gnutls_next_disable_tls13_compat
				24588	requires_config_enabled MBEDTLS_SSL_CLI_C
				24589	requires_config_enabled MBEDTLS_DEBUG_C
				24590	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24591	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24592	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> x25519" \
				24593	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				24594	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,x25519" \
				24595	0 \
				24596	-c "HTTP/1.0 200 OK" \
				24597	-c "Protocol is TLSv1.3" \
				24598	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24599	-c "NamedGroup: x25519 ( 1d )" \
				24600	-c "Verifying peer X.509 certificate... ok" \
				24601	-c "received HelloRetryRequest message" \
				24602	-c "selected_group ( 29 )"
				24603
				24604	requires_gnutls_tls1_3
				24605	requires_gnutls_next_no_ticket
				24606	requires_gnutls_next_disable_tls13_compat
				24607	requires_config_enabled MBEDTLS_SSL_CLI_C
				24608	requires_config_enabled MBEDTLS_DEBUG_C
				24609	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24610	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24611	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> x448" \
				24612	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				24613	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,x448" \
				24614	0 \
				24615	-c "HTTP/1.0 200 OK" \
				24616	-c "Protocol is TLSv1.3" \
				24617	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24618	-c "NamedGroup: x448 ( 1e )" \
				24619	-c "Verifying peer X.509 certificate... ok" \
				24620	-c "received HelloRetryRequest message" \
				24621	-c "selected_group ( 30 )"
				24622
				24623	requires_gnutls_tls1_3
				24624	requires_gnutls_next_no_ticket
				24625	requires_gnutls_next_disable_tls13_compat
				24626	requires_config_enabled MBEDTLS_SSL_CLI_C
				24627	requires_config_enabled MBEDTLS_DEBUG_C
				24628	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24629	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24630	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> ffdhe3072" \
				24631	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				24632	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe3072" \
				24633	0 \
				24634	-c "HTTP/1.0 200 OK" \
				24635	-c "Protocol is TLSv1.3" \
				24636	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24637	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24638	-c "Verifying peer X.509 certificate... ok" \
				24639	-c "received HelloRetryRequest message" \
				24640	-c "selected_group ( 257 )"
				24641
				24642	requires_gnutls_tls1_3
				24643	requires_gnutls_next_no_ticket
				24644	requires_gnutls_next_disable_tls13_compat
				24645	requires_config_enabled MBEDTLS_SSL_CLI_C
				24646	requires_config_enabled MBEDTLS_DEBUG_C
				24647	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24648	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24649	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> ffdhe4096" \
				24650	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				24651	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe4096" \
				24652	0 \
				24653	-c "HTTP/1.0 200 OK" \
				24654	-c "Protocol is TLSv1.3" \
				24655	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24656	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24657	-c "Verifying peer X.509 certificate... ok" \
				24658	-c "received HelloRetryRequest message" \
				24659	-c "selected_group ( 258 )"
				24660
				24661	requires_gnutls_tls1_3
				24662	requires_gnutls_next_no_ticket
				24663	requires_gnutls_next_disable_tls13_compat
				24664	requires_config_enabled MBEDTLS_SSL_CLI_C
				24665	requires_config_enabled MBEDTLS_DEBUG_C
				24666	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24667	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24668	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> ffdhe6144" \
				24669	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				24670	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe6144" \
				24671	0 \
				24672	-c "HTTP/1.0 200 OK" \
				24673	-c "Protocol is TLSv1.3" \
				24674	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24675	-c "NamedGroup: ffdhe6144 ( 103 )" \
				24676	-c "Verifying peer X.509 certificate... ok" \
				24677	-c "received HelloRetryRequest message" \
				24678	-c "selected_group ( 259 )"
				24679
				24680	requires_gnutls_tls1_3
				24681	requires_gnutls_next_no_ticket
				24682	requires_gnutls_next_disable_tls13_compat
				24683	requires_config_enabled MBEDTLS_SSL_CLI_C
				24684	requires_config_enabled MBEDTLS_DEBUG_C
				24685	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24686	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24687	run_test "TLS 1.3 m->G: HRR ffdhe2048 -> ffdhe8192" \
				24688	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				24689	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe8192" \
				24690	0 \
				24691	-c "HTTP/1.0 200 OK" \
				24692	-c "Protocol is TLSv1.3" \
				24693	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24694	-c "NamedGroup: ffdhe8192 ( 104 )" \
				24695	-c "Verifying peer X.509 certificate... ok" \
				24696	-c "received HelloRetryRequest message" \
				24697	-c "selected_group ( 260 )"
				24698
				24699	requires_gnutls_tls1_3
				24700	requires_gnutls_next_no_ticket
				24701	requires_gnutls_next_disable_tls13_compat
				24702	requires_config_enabled MBEDTLS_SSL_CLI_C
				24703	requires_config_enabled MBEDTLS_DEBUG_C
				24704	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24705	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24706	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> secp256r1" \
				24707	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				24708	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp256r1" \
				24709	0 \
				24710	-c "HTTP/1.0 200 OK" \
				24711	-c "Protocol is TLSv1.3" \
				24712	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24713	-c "NamedGroup: secp256r1 ( 17 )" \
				24714	-c "Verifying peer X.509 certificate... ok" \
				24715	-c "received HelloRetryRequest message" \
				24716	-c "selected_group ( 23 )"
				24717
				24718	requires_gnutls_tls1_3
				24719	requires_gnutls_next_no_ticket
				24720	requires_gnutls_next_disable_tls13_compat
				24721	requires_config_enabled MBEDTLS_SSL_CLI_C
				24722	requires_config_enabled MBEDTLS_DEBUG_C
				24723	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24724	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24725	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> secp384r1" \
				24726	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				24727	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp384r1" \
				24728	0 \
				24729	-c "HTTP/1.0 200 OK" \
				24730	-c "Protocol is TLSv1.3" \
				24731	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24732	-c "NamedGroup: secp384r1 ( 18 )" \
				24733	-c "Verifying peer X.509 certificate... ok" \
				24734	-c "received HelloRetryRequest message" \
				24735	-c "selected_group ( 24 )"
				24736
				24737	requires_gnutls_tls1_3
				24738	requires_gnutls_next_no_ticket
				24739	requires_gnutls_next_disable_tls13_compat
				24740	requires_config_enabled MBEDTLS_SSL_CLI_C
				24741	requires_config_enabled MBEDTLS_DEBUG_C
				24742	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24743	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24744	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> secp521r1" \
				24745	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				24746	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp521r1" \
				24747	0 \
				24748	-c "HTTP/1.0 200 OK" \
				24749	-c "Protocol is TLSv1.3" \
				24750	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24751	-c "NamedGroup: secp521r1 ( 19 )" \
				24752	-c "Verifying peer X.509 certificate... ok" \
				24753	-c "received HelloRetryRequest message" \
				24754	-c "selected_group ( 25 )"
				24755
				24756	requires_gnutls_tls1_3
				24757	requires_gnutls_next_no_ticket
				24758	requires_gnutls_next_disable_tls13_compat
				24759	requires_config_enabled MBEDTLS_SSL_CLI_C
				24760	requires_config_enabled MBEDTLS_DEBUG_C
				24761	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24762	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24763	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> x25519" \
				24764	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				24765	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,x25519" \
				24766	0 \
				24767	-c "HTTP/1.0 200 OK" \
				24768	-c "Protocol is TLSv1.3" \
				24769	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24770	-c "NamedGroup: x25519 ( 1d )" \
				24771	-c "Verifying peer X.509 certificate... ok" \
				24772	-c "received HelloRetryRequest message" \
				24773	-c "selected_group ( 29 )"
				24774
				24775	requires_gnutls_tls1_3
				24776	requires_gnutls_next_no_ticket
				24777	requires_gnutls_next_disable_tls13_compat
				24778	requires_config_enabled MBEDTLS_SSL_CLI_C
				24779	requires_config_enabled MBEDTLS_DEBUG_C
				24780	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24781	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24782	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> x448" \
				24783	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				24784	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,x448" \
				24785	0 \
				24786	-c "HTTP/1.0 200 OK" \
				24787	-c "Protocol is TLSv1.3" \
				24788	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24789	-c "NamedGroup: x448 ( 1e )" \
				24790	-c "Verifying peer X.509 certificate... ok" \
				24791	-c "received HelloRetryRequest message" \
				24792	-c "selected_group ( 30 )"
				24793
				24794	requires_gnutls_tls1_3
				24795	requires_gnutls_next_no_ticket
				24796	requires_gnutls_next_disable_tls13_compat
				24797	requires_config_enabled MBEDTLS_SSL_CLI_C
				24798	requires_config_enabled MBEDTLS_DEBUG_C
				24799	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24800	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24801	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> ffdhe2048" \
				24802	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				24803	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe2048" \
				24804	0 \
				24805	-c "HTTP/1.0 200 OK" \
				24806	-c "Protocol is TLSv1.3" \
				24807	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24808	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24809	-c "Verifying peer X.509 certificate... ok" \
				24810	-c "received HelloRetryRequest message" \
				24811	-c "selected_group ( 256 )"
				24812
				24813	requires_gnutls_tls1_3
				24814	requires_gnutls_next_no_ticket
				24815	requires_gnutls_next_disable_tls13_compat
				24816	requires_config_enabled MBEDTLS_SSL_CLI_C
				24817	requires_config_enabled MBEDTLS_DEBUG_C
				24818	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24819	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24820	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> ffdhe4096" \
				24821	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				24822	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe4096" \
				24823	0 \
				24824	-c "HTTP/1.0 200 OK" \
				24825	-c "Protocol is TLSv1.3" \
				24826	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24827	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24828	-c "Verifying peer X.509 certificate... ok" \
				24829	-c "received HelloRetryRequest message" \
				24830	-c "selected_group ( 258 )"
				24831
				24832	requires_gnutls_tls1_3
				24833	requires_gnutls_next_no_ticket
				24834	requires_gnutls_next_disable_tls13_compat
				24835	requires_config_enabled MBEDTLS_SSL_CLI_C
				24836	requires_config_enabled MBEDTLS_DEBUG_C
				24837	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24838	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24839	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> ffdhe6144" \
				24840	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				24841	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe6144" \
				24842	0 \
				24843	-c "HTTP/1.0 200 OK" \
				24844	-c "Protocol is TLSv1.3" \
				24845	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24846	-c "NamedGroup: ffdhe6144 ( 103 )" \
				24847	-c "Verifying peer X.509 certificate... ok" \
				24848	-c "received HelloRetryRequest message" \
				24849	-c "selected_group ( 259 )"
				24850
				24851	requires_gnutls_tls1_3
				24852	requires_gnutls_next_no_ticket
				24853	requires_gnutls_next_disable_tls13_compat
				24854	requires_config_enabled MBEDTLS_SSL_CLI_C
				24855	requires_config_enabled MBEDTLS_DEBUG_C
				24856	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24857	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24858	run_test "TLS 1.3 m->G: HRR ffdhe3072 -> ffdhe8192" \
				24859	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				24860	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe8192" \
				24861	0 \
				24862	-c "HTTP/1.0 200 OK" \
				24863	-c "Protocol is TLSv1.3" \
				24864	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24865	-c "NamedGroup: ffdhe8192 ( 104 )" \
				24866	-c "Verifying peer X.509 certificate... ok" \
				24867	-c "received HelloRetryRequest message" \
				24868	-c "selected_group ( 260 )"
				24869
				24870	requires_gnutls_tls1_3
				24871	requires_gnutls_next_no_ticket
				24872	requires_gnutls_next_disable_tls13_compat
				24873	requires_config_enabled MBEDTLS_SSL_CLI_C
				24874	requires_config_enabled MBEDTLS_DEBUG_C
				24875	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24876	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24877	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> secp256r1" \
				24878	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				24879	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp256r1" \
				24880	0 \
				24881	-c "HTTP/1.0 200 OK" \
				24882	-c "Protocol is TLSv1.3" \
				24883	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24884	-c "NamedGroup: secp256r1 ( 17 )" \
				24885	-c "Verifying peer X.509 certificate... ok" \
				24886	-c "received HelloRetryRequest message" \
				24887	-c "selected_group ( 23 )"
				24888
				24889	requires_gnutls_tls1_3
				24890	requires_gnutls_next_no_ticket
				24891	requires_gnutls_next_disable_tls13_compat
				24892	requires_config_enabled MBEDTLS_SSL_CLI_C
				24893	requires_config_enabled MBEDTLS_DEBUG_C
				24894	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24895	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24896	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> secp384r1" \
				24897	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				24898	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp384r1" \
				24899	0 \
				24900	-c "HTTP/1.0 200 OK" \
				24901	-c "Protocol is TLSv1.3" \
				24902	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24903	-c "NamedGroup: secp384r1 ( 18 )" \
				24904	-c "Verifying peer X.509 certificate... ok" \
				24905	-c "received HelloRetryRequest message" \
				24906	-c "selected_group ( 24 )"
				24907
				24908	requires_gnutls_tls1_3
				24909	requires_gnutls_next_no_ticket
				24910	requires_gnutls_next_disable_tls13_compat
				24911	requires_config_enabled MBEDTLS_SSL_CLI_C
				24912	requires_config_enabled MBEDTLS_DEBUG_C
				24913	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24914	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24915	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> secp521r1" \
				24916	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				24917	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp521r1" \
				24918	0 \
				24919	-c "HTTP/1.0 200 OK" \
				24920	-c "Protocol is TLSv1.3" \
				24921	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24922	-c "NamedGroup: secp521r1 ( 19 )" \
				24923	-c "Verifying peer X.509 certificate... ok" \
				24924	-c "received HelloRetryRequest message" \
				24925	-c "selected_group ( 25 )"
				24926
				24927	requires_gnutls_tls1_3
				24928	requires_gnutls_next_no_ticket
				24929	requires_gnutls_next_disable_tls13_compat
				24930	requires_config_enabled MBEDTLS_SSL_CLI_C
				24931	requires_config_enabled MBEDTLS_DEBUG_C
				24932	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24933	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24934	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> x25519" \
				24935	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				24936	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,x25519" \
				24937	0 \
				24938	-c "HTTP/1.0 200 OK" \
				24939	-c "Protocol is TLSv1.3" \
				24940	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24941	-c "NamedGroup: x25519 ( 1d )" \
				24942	-c "Verifying peer X.509 certificate... ok" \
				24943	-c "received HelloRetryRequest message" \
				24944	-c "selected_group ( 29 )"
				24945
				24946	requires_gnutls_tls1_3
				24947	requires_gnutls_next_no_ticket
				24948	requires_gnutls_next_disable_tls13_compat
				24949	requires_config_enabled MBEDTLS_SSL_CLI_C
				24950	requires_config_enabled MBEDTLS_DEBUG_C
				24951	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24952	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24953	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> x448" \
				24954	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				24955	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,x448" \
				24956	0 \
				24957	-c "HTTP/1.0 200 OK" \
				24958	-c "Protocol is TLSv1.3" \
				24959	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24960	-c "NamedGroup: x448 ( 1e )" \
				24961	-c "Verifying peer X.509 certificate... ok" \
				24962	-c "received HelloRetryRequest message" \
				24963	-c "selected_group ( 30 )"
				24964
				24965	requires_gnutls_tls1_3
				24966	requires_gnutls_next_no_ticket
				24967	requires_gnutls_next_disable_tls13_compat
				24968	requires_config_enabled MBEDTLS_SSL_CLI_C
				24969	requires_config_enabled MBEDTLS_DEBUG_C
				24970	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24971	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24972	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> ffdhe2048" \
				24973	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				24974	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe2048" \
				24975	0 \
				24976	-c "HTTP/1.0 200 OK" \
				24977	-c "Protocol is TLSv1.3" \
				24978	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24979	-c "NamedGroup: ffdhe2048 ( 100 )" \
				24980	-c "Verifying peer X.509 certificate... ok" \
				24981	-c "received HelloRetryRequest message" \
				24982	-c "selected_group ( 256 )"
				24983
				24984	requires_gnutls_tls1_3
				24985	requires_gnutls_next_no_ticket
				24986	requires_gnutls_next_disable_tls13_compat
				24987	requires_config_enabled MBEDTLS_SSL_CLI_C
				24988	requires_config_enabled MBEDTLS_DEBUG_C
				24989	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				24990	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				24991	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> ffdhe3072" \
				24992	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				24993	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe3072" \
				24994	0 \
				24995	-c "HTTP/1.0 200 OK" \
				24996	-c "Protocol is TLSv1.3" \
				24997	-c "NamedGroup: ffdhe4096 ( 102 )" \
				24998	-c "NamedGroup: ffdhe3072 ( 101 )" \
				24999	-c "Verifying peer X.509 certificate... ok" \
				25000	-c "received HelloRetryRequest message" \
				25001	-c "selected_group ( 257 )"
				25002
				25003	requires_gnutls_tls1_3
				25004	requires_gnutls_next_no_ticket
				25005	requires_gnutls_next_disable_tls13_compat
				25006	requires_config_enabled MBEDTLS_SSL_CLI_C
				25007	requires_config_enabled MBEDTLS_DEBUG_C
				25008	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25009	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25010	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> ffdhe6144" \
				25011	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				25012	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe6144" \
				25013	0 \
				25014	-c "HTTP/1.0 200 OK" \
				25015	-c "Protocol is TLSv1.3" \
				25016	-c "NamedGroup: ffdhe4096 ( 102 )" \
				25017	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25018	-c "Verifying peer X.509 certificate... ok" \
				25019	-c "received HelloRetryRequest message" \
				25020	-c "selected_group ( 259 )"
				25021
				25022	requires_gnutls_tls1_3
				25023	requires_gnutls_next_no_ticket
				25024	requires_gnutls_next_disable_tls13_compat
				25025	requires_config_enabled MBEDTLS_SSL_CLI_C
				25026	requires_config_enabled MBEDTLS_DEBUG_C
				25027	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25028	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25029	run_test "TLS 1.3 m->G: HRR ffdhe4096 -> ffdhe8192" \
				25030	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				25031	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe8192" \
				25032	0 \
				25033	-c "HTTP/1.0 200 OK" \
				25034	-c "Protocol is TLSv1.3" \
				25035	-c "NamedGroup: ffdhe4096 ( 102 )" \
				25036	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25037	-c "Verifying peer X.509 certificate... ok" \
				25038	-c "received HelloRetryRequest message" \
				25039	-c "selected_group ( 260 )"
				25040
				25041	requires_gnutls_tls1_3
				25042	requires_gnutls_next_no_ticket
				25043	requires_gnutls_next_disable_tls13_compat
				25044	requires_config_enabled MBEDTLS_SSL_CLI_C
				25045	requires_config_enabled MBEDTLS_DEBUG_C
				25046	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25047	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25048	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> secp256r1" \
				25049	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				25050	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp256r1" \
				25051	0 \
				25052	-c "HTTP/1.0 200 OK" \
				25053	-c "Protocol is TLSv1.3" \
				25054	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25055	-c "NamedGroup: secp256r1 ( 17 )" \
				25056	-c "Verifying peer X.509 certificate... ok" \
				25057	-c "received HelloRetryRequest message" \
				25058	-c "selected_group ( 23 )"
				25059
				25060	requires_gnutls_tls1_3
				25061	requires_gnutls_next_no_ticket
				25062	requires_gnutls_next_disable_tls13_compat
				25063	requires_config_enabled MBEDTLS_SSL_CLI_C
				25064	requires_config_enabled MBEDTLS_DEBUG_C
				25065	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25066	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25067	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> secp384r1" \
				25068	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				25069	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp384r1" \
				25070	0 \
				25071	-c "HTTP/1.0 200 OK" \
				25072	-c "Protocol is TLSv1.3" \
				25073	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25074	-c "NamedGroup: secp384r1 ( 18 )" \
				25075	-c "Verifying peer X.509 certificate... ok" \
				25076	-c "received HelloRetryRequest message" \
				25077	-c "selected_group ( 24 )"
				25078
				25079	requires_gnutls_tls1_3
				25080	requires_gnutls_next_no_ticket
				25081	requires_gnutls_next_disable_tls13_compat
				25082	requires_config_enabled MBEDTLS_SSL_CLI_C
				25083	requires_config_enabled MBEDTLS_DEBUG_C
				25084	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25085	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25086	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> secp521r1" \
				25087	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				25088	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp521r1" \
				25089	0 \
				25090	-c "HTTP/1.0 200 OK" \
				25091	-c "Protocol is TLSv1.3" \
				25092	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25093	-c "NamedGroup: secp521r1 ( 19 )" \
				25094	-c "Verifying peer X.509 certificate... ok" \
				25095	-c "received HelloRetryRequest message" \
				25096	-c "selected_group ( 25 )"
				25097
				25098	requires_gnutls_tls1_3
				25099	requires_gnutls_next_no_ticket
				25100	requires_gnutls_next_disable_tls13_compat
				25101	requires_config_enabled MBEDTLS_SSL_CLI_C
				25102	requires_config_enabled MBEDTLS_DEBUG_C
				25103	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25104	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25105	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> x25519" \
				25106	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				25107	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,x25519" \
				25108	0 \
				25109	-c "HTTP/1.0 200 OK" \
				25110	-c "Protocol is TLSv1.3" \
				25111	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25112	-c "NamedGroup: x25519 ( 1d )" \
				25113	-c "Verifying peer X.509 certificate... ok" \
				25114	-c "received HelloRetryRequest message" \
				25115	-c "selected_group ( 29 )"
				25116
				25117	requires_gnutls_tls1_3
				25118	requires_gnutls_next_no_ticket
				25119	requires_gnutls_next_disable_tls13_compat
				25120	requires_config_enabled MBEDTLS_SSL_CLI_C
				25121	requires_config_enabled MBEDTLS_DEBUG_C
				25122	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25123	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25124	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> x448" \
				25125	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				25126	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,x448" \
				25127	0 \
				25128	-c "HTTP/1.0 200 OK" \
				25129	-c "Protocol is TLSv1.3" \
				25130	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25131	-c "NamedGroup: x448 ( 1e )" \
				25132	-c "Verifying peer X.509 certificate... ok" \
				25133	-c "received HelloRetryRequest message" \
				25134	-c "selected_group ( 30 )"
				25135
				25136	requires_gnutls_tls1_3
				25137	requires_gnutls_next_no_ticket
				25138	requires_gnutls_next_disable_tls13_compat
				25139	requires_config_enabled MBEDTLS_SSL_CLI_C
				25140	requires_config_enabled MBEDTLS_DEBUG_C
				25141	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25142	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25143	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> ffdhe2048" \
				25144	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				25145	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe2048" \
				25146	0 \
				25147	-c "HTTP/1.0 200 OK" \
				25148	-c "Protocol is TLSv1.3" \
				25149	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25150	-c "NamedGroup: ffdhe2048 ( 100 )" \
				25151	-c "Verifying peer X.509 certificate... ok" \
				25152	-c "received HelloRetryRequest message" \
				25153	-c "selected_group ( 256 )"
				25154
				25155	requires_gnutls_tls1_3
				25156	requires_gnutls_next_no_ticket
				25157	requires_gnutls_next_disable_tls13_compat
				25158	requires_config_enabled MBEDTLS_SSL_CLI_C
				25159	requires_config_enabled MBEDTLS_DEBUG_C
				25160	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25161	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25162	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> ffdhe3072" \
				25163	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				25164	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe3072" \
				25165	0 \
				25166	-c "HTTP/1.0 200 OK" \
				25167	-c "Protocol is TLSv1.3" \
				25168	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25169	-c "NamedGroup: ffdhe3072 ( 101 )" \
				25170	-c "Verifying peer X.509 certificate... ok" \
				25171	-c "received HelloRetryRequest message" \
				25172	-c "selected_group ( 257 )"
				25173
				25174	requires_gnutls_tls1_3
				25175	requires_gnutls_next_no_ticket
				25176	requires_gnutls_next_disable_tls13_compat
				25177	requires_config_enabled MBEDTLS_SSL_CLI_C
				25178	requires_config_enabled MBEDTLS_DEBUG_C
				25179	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25180	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25181	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> ffdhe4096" \
				25182	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				25183	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe4096" \
				25184	0 \
				25185	-c "HTTP/1.0 200 OK" \
				25186	-c "Protocol is TLSv1.3" \
				25187	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25188	-c "NamedGroup: ffdhe4096 ( 102 )" \
				25189	-c "Verifying peer X.509 certificate... ok" \
				25190	-c "received HelloRetryRequest message" \
				25191	-c "selected_group ( 258 )"
				25192
				25193	requires_gnutls_tls1_3
				25194	requires_gnutls_next_no_ticket
				25195	requires_gnutls_next_disable_tls13_compat
				25196	requires_config_enabled MBEDTLS_SSL_CLI_C
				25197	requires_config_enabled MBEDTLS_DEBUG_C
				25198	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25199	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25200	run_test "TLS 1.3 m->G: HRR ffdhe6144 -> ffdhe8192" \
				25201	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
				25202	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe8192" \
				25203	0 \
				25204	-c "HTTP/1.0 200 OK" \
				25205	-c "Protocol is TLSv1.3" \
				25206	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25207	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25208	-c "Verifying peer X.509 certificate... ok" \
				25209	-c "received HelloRetryRequest message" \
				25210	-c "selected_group ( 260 )"
				25211
				25212	requires_gnutls_tls1_3
				25213	requires_gnutls_next_no_ticket
				25214	requires_gnutls_next_disable_tls13_compat
				25215	requires_config_enabled MBEDTLS_SSL_CLI_C
				25216	requires_config_enabled MBEDTLS_DEBUG_C
				25217	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25218	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25219	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> secp256r1" \
				25220	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
				25221	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp256r1" \
				25222	0 \
				25223	-c "HTTP/1.0 200 OK" \
				25224	-c "Protocol is TLSv1.3" \
				25225	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25226	-c "NamedGroup: secp256r1 ( 17 )" \
				25227	-c "Verifying peer X.509 certificate... ok" \
				25228	-c "received HelloRetryRequest message" \
				25229	-c "selected_group ( 23 )"
				25230
				25231	requires_gnutls_tls1_3
				25232	requires_gnutls_next_no_ticket
				25233	requires_gnutls_next_disable_tls13_compat
				25234	requires_config_enabled MBEDTLS_SSL_CLI_C
				25235	requires_config_enabled MBEDTLS_DEBUG_C
				25236	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25237	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25238	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> secp384r1" \
				25239	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
				25240	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp384r1" \
				25241	0 \
				25242	-c "HTTP/1.0 200 OK" \
				25243	-c "Protocol is TLSv1.3" \
				25244	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25245	-c "NamedGroup: secp384r1 ( 18 )" \
				25246	-c "Verifying peer X.509 certificate... ok" \
				25247	-c "received HelloRetryRequest message" \
				25248	-c "selected_group ( 24 )"
				25249
				25250	requires_gnutls_tls1_3
				25251	requires_gnutls_next_no_ticket
				25252	requires_gnutls_next_disable_tls13_compat
				25253	requires_config_enabled MBEDTLS_SSL_CLI_C
				25254	requires_config_enabled MBEDTLS_DEBUG_C
				25255	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25256	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25257	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> secp521r1" \
				25258	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
				25259	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp521r1" \
				25260	0 \
				25261	-c "HTTP/1.0 200 OK" \
				25262	-c "Protocol is TLSv1.3" \
				25263	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25264	-c "NamedGroup: secp521r1 ( 19 )" \
				25265	-c "Verifying peer X.509 certificate... ok" \
				25266	-c "received HelloRetryRequest message" \
				25267	-c "selected_group ( 25 )"
				25268
				25269	requires_gnutls_tls1_3
				25270	requires_gnutls_next_no_ticket
				25271	requires_gnutls_next_disable_tls13_compat
				25272	requires_config_enabled MBEDTLS_SSL_CLI_C
				25273	requires_config_enabled MBEDTLS_DEBUG_C
				25274	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25275	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25276	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> x25519" \
				25277	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
				25278	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,x25519" \
				25279	0 \
				25280	-c "HTTP/1.0 200 OK" \
				25281	-c "Protocol is TLSv1.3" \
				25282	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25283	-c "NamedGroup: x25519 ( 1d )" \
				25284	-c "Verifying peer X.509 certificate... ok" \
				25285	-c "received HelloRetryRequest message" \
				25286	-c "selected_group ( 29 )"
				25287
				25288	requires_gnutls_tls1_3
				25289	requires_gnutls_next_no_ticket
				25290	requires_gnutls_next_disable_tls13_compat
				25291	requires_config_enabled MBEDTLS_SSL_CLI_C
				25292	requires_config_enabled MBEDTLS_DEBUG_C
				25293	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25294	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25295	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> x448" \
				25296	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
				25297	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,x448" \
				25298	0 \
				25299	-c "HTTP/1.0 200 OK" \
				25300	-c "Protocol is TLSv1.3" \
				25301	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25302	-c "NamedGroup: x448 ( 1e )" \
				25303	-c "Verifying peer X.509 certificate... ok" \
				25304	-c "received HelloRetryRequest message" \
				25305	-c "selected_group ( 30 )"
				25306
				25307	requires_gnutls_tls1_3
				25308	requires_gnutls_next_no_ticket
				25309	requires_gnutls_next_disable_tls13_compat
				25310	requires_config_enabled MBEDTLS_SSL_CLI_C
				25311	requires_config_enabled MBEDTLS_DEBUG_C
				25312	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25313	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25314	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> ffdhe2048" \
				25315	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
				25316	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe2048" \
				25317	0 \
				25318	-c "HTTP/1.0 200 OK" \
				25319	-c "Protocol is TLSv1.3" \
				25320	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25321	-c "NamedGroup: ffdhe2048 ( 100 )" \
				25322	-c "Verifying peer X.509 certificate... ok" \
				25323	-c "received HelloRetryRequest message" \
				25324	-c "selected_group ( 256 )"
				25325
				25326	requires_gnutls_tls1_3
				25327	requires_gnutls_next_no_ticket
				25328	requires_gnutls_next_disable_tls13_compat
				25329	requires_config_enabled MBEDTLS_SSL_CLI_C
				25330	requires_config_enabled MBEDTLS_DEBUG_C
				25331	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25332	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25333	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> ffdhe3072" \
				25334	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
				25335	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe3072" \
				25336	0 \
				25337	-c "HTTP/1.0 200 OK" \
				25338	-c "Protocol is TLSv1.3" \
				25339	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25340	-c "NamedGroup: ffdhe3072 ( 101 )" \
				25341	-c "Verifying peer X.509 certificate... ok" \
				25342	-c "received HelloRetryRequest message" \
				25343	-c "selected_group ( 257 )"
				25344
				25345	requires_gnutls_tls1_3
				25346	requires_gnutls_next_no_ticket
				25347	requires_gnutls_next_disable_tls13_compat
				25348	requires_config_enabled MBEDTLS_SSL_CLI_C
				25349	requires_config_enabled MBEDTLS_DEBUG_C
				25350	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25351	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25352	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> ffdhe4096" \
				25353	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
				25354	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe4096" \
				25355	0 \
				25356	-c "HTTP/1.0 200 OK" \
				25357	-c "Protocol is TLSv1.3" \
				25358	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25359	-c "NamedGroup: ffdhe4096 ( 102 )" \
				25360	-c "Verifying peer X.509 certificate... ok" \
				25361	-c "received HelloRetryRequest message" \
				25362	-c "selected_group ( 258 )"
				25363
				25364	requires_gnutls_tls1_3
				25365	requires_gnutls_next_no_ticket
				25366	requires_gnutls_next_disable_tls13_compat
				25367	requires_config_enabled MBEDTLS_SSL_CLI_C
				25368	requires_config_enabled MBEDTLS_DEBUG_C
				25369	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25370	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25371	run_test "TLS 1.3 m->G: HRR ffdhe8192 -> ffdhe6144" \
				25372	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
				25373	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe6144" \
				25374	0 \
				25375	-c "HTTP/1.0 200 OK" \
				25376	-c "Protocol is TLSv1.3" \
				25377	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25378	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25379	-c "Verifying peer X.509 certificate... ok" \
				25380	-c "received HelloRetryRequest message" \
				25381	-c "selected_group ( 259 )"
				25382
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25383	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25384	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25385	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25386	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25387	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25388	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25389	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25390	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25391	run_test "TLS 1.3 m->m: HRR secp256r1 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25392	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25393	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25394	0 \
				25395	-s "Protocol is TLSv1.3" \
				25396	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25397	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25398	-c "Protocol is TLSv1.3" \
				25399	-c "NamedGroup: secp256r1 ( 17 )" \
				25400	-c "NamedGroup: secp384r1 ( 18 )" \
				25401	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25402	-s "HRR selected_group: secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25403	-c "received HelloRetryRequest message" \
				25404	-c "selected_group ( 24 )"
				25405
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25406	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25407	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25408	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25409	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25410	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25411	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25412	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25413	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25414	run_test "TLS 1.3 m->m: HRR secp256r1 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25415	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25416	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25417	0 \
				25418	-s "Protocol is TLSv1.3" \
				25419	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25420	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25421	-c "Protocol is TLSv1.3" \
				25422	-c "NamedGroup: secp256r1 ( 17 )" \
				25423	-c "NamedGroup: secp521r1 ( 19 )" \
				25424	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25425	-s "HRR selected_group: secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25426	-c "received HelloRetryRequest message" \
				25427	-c "selected_group ( 25 )"
				25428
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25429	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25430	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25431	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25432	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25433	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25434	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25435	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25436	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25437	run_test "TLS 1.3 m->m: HRR secp256r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25438	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25439	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25440	0 \
				25441	-s "Protocol is TLSv1.3" \
				25442	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25443	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25444	-c "Protocol is TLSv1.3" \
				25445	-c "NamedGroup: secp256r1 ( 17 )" \
				25446	-c "NamedGroup: x25519 ( 1d )" \
				25447	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25448	-s "HRR selected_group: x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25449	-c "received HelloRetryRequest message" \
				25450	-c "selected_group ( 29 )"
				25451
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25452	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25453	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25454	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25455	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25456	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25457	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25458	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25459	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25460	run_test "TLS 1.3 m->m: HRR secp256r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25461	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25462	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25463	0 \
				25464	-s "Protocol is TLSv1.3" \
				25465	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25466	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25467	-c "Protocol is TLSv1.3" \
				25468	-c "NamedGroup: secp256r1 ( 17 )" \
				25469	-c "NamedGroup: x448 ( 1e )" \
				25470	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25471	-s "HRR selected_group: x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25472	-c "received HelloRetryRequest message" \
				25473	-c "selected_group ( 30 )"
				25474
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25475	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25476	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25477	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25478	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25479	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25480	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25481	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25482	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	25483	run_test "TLS 1.3 m->m: HRR secp256r1 -> ffdhe2048" \
				25484	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25485	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe2048" \
				25486	0 \
				25487	-s "Protocol is TLSv1.3" \
				25488	-s "got named group: ffdhe2048(0100)" \
				25489	-s "Certificate verification was skipped" \
				25490	-c "Protocol is TLSv1.3" \
				25491	-c "NamedGroup: secp256r1 ( 17 )" \
				25492	-c "NamedGroup: ffdhe2048 ( 100 )" \
				25493	-c "Verifying peer X.509 certificate... ok" \
				25494	-s "HRR selected_group: ffdhe2048" \
				25495	-c "received HelloRetryRequest message" \
				25496	-c "selected_group ( 256 )"
				25497
				25498	requires_config_enabled MBEDTLS_SSL_SRV_C
				25499	requires_config_enabled MBEDTLS_DEBUG_C
				25500	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25501	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25502	requires_config_enabled MBEDTLS_SSL_CLI_C
				25503	requires_config_enabled MBEDTLS_DEBUG_C
				25504	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25505	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25506	run_test "TLS 1.3 m->m: HRR secp256r1 -> ffdhe3072" \
				25507	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25508	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe3072" \
				25509	0 \
				25510	-s "Protocol is TLSv1.3" \
				25511	-s "got named group: ffdhe3072(0101)" \
				25512	-s "Certificate verification was skipped" \
				25513	-c "Protocol is TLSv1.3" \
				25514	-c "NamedGroup: secp256r1 ( 17 )" \
				25515	-c "NamedGroup: ffdhe3072 ( 101 )" \
				25516	-c "Verifying peer X.509 certificate... ok" \
				25517	-s "HRR selected_group: ffdhe3072" \
				25518	-c "received HelloRetryRequest message" \
				25519	-c "selected_group ( 257 )"
				25520
				25521	requires_config_enabled MBEDTLS_SSL_SRV_C
				25522	requires_config_enabled MBEDTLS_DEBUG_C
				25523	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25524	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25525	requires_config_enabled MBEDTLS_SSL_CLI_C
				25526	requires_config_enabled MBEDTLS_DEBUG_C
				25527	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25528	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25529	run_test "TLS 1.3 m->m: HRR secp256r1 -> ffdhe4096" \
				25530	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25531	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe4096" \
				25532	0 \
				25533	-s "Protocol is TLSv1.3" \
				25534	-s "got named group: ffdhe4096(0102)" \
				25535	-s "Certificate verification was skipped" \
				25536	-c "Protocol is TLSv1.3" \
				25537	-c "NamedGroup: secp256r1 ( 17 )" \
				25538	-c "NamedGroup: ffdhe4096 ( 102 )" \
				25539	-c "Verifying peer X.509 certificate... ok" \
				25540	-s "HRR selected_group: ffdhe4096" \
				25541	-c "received HelloRetryRequest message" \
				25542	-c "selected_group ( 258 )"
				25543
				25544	requires_config_enabled MBEDTLS_SSL_SRV_C
				25545	requires_config_enabled MBEDTLS_DEBUG_C
				25546	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25547	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25548	requires_config_enabled MBEDTLS_SSL_CLI_C
				25549	requires_config_enabled MBEDTLS_DEBUG_C
				25550	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25551	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25552	run_test "TLS 1.3 m->m: HRR secp256r1 -> ffdhe6144" \
				25553	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25554	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe6144" \
				25555	0 \
				25556	-s "Protocol is TLSv1.3" \
				25557	-s "got named group: ffdhe6144(0103)" \
				25558	-s "Certificate verification was skipped" \
				25559	-c "Protocol is TLSv1.3" \
				25560	-c "NamedGroup: secp256r1 ( 17 )" \
				25561	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25562	-c "Verifying peer X.509 certificate... ok" \
				25563	-s "HRR selected_group: ffdhe6144" \
				25564	-c "received HelloRetryRequest message" \
				25565	-c "selected_group ( 259 )"
				25566
				25567	requires_config_enabled MBEDTLS_SSL_SRV_C
				25568	requires_config_enabled MBEDTLS_DEBUG_C
				25569	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25570	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25571	requires_config_enabled MBEDTLS_SSL_CLI_C
				25572	requires_config_enabled MBEDTLS_DEBUG_C
				25573	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25574	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25575	run_test "TLS 1.3 m->m: HRR secp256r1 -> ffdhe8192" \
				25576	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25577	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,ffdhe8192" \
				25578	0 \
				25579	-s "Protocol is TLSv1.3" \
				25580	-s "got named group: ffdhe8192(0104)" \
				25581	-s "Certificate verification was skipped" \
				25582	-c "Protocol is TLSv1.3" \
				25583	-c "NamedGroup: secp256r1 ( 17 )" \
				25584	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25585	-c "Verifying peer X.509 certificate... ok" \
				25586	-s "HRR selected_group: ffdhe8192" \
				25587	-c "received HelloRetryRequest message" \
				25588	-c "selected_group ( 260 )"
				25589
				25590	requires_config_enabled MBEDTLS_SSL_SRV_C
				25591	requires_config_enabled MBEDTLS_DEBUG_C
				25592	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25593	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25594	requires_config_enabled MBEDTLS_SSL_CLI_C
				25595	requires_config_enabled MBEDTLS_DEBUG_C
				25596	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25597	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25598	run_test "TLS 1.3 m->m: HRR secp384r1 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25599	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25600	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25601	0 \
				25602	-s "Protocol is TLSv1.3" \
				25603	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25604	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25605	-c "Protocol is TLSv1.3" \
				25606	-c "NamedGroup: secp384r1 ( 18 )" \
				25607	-c "NamedGroup: secp256r1 ( 17 )" \
				25608	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25609	-s "HRR selected_group: secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25610	-c "received HelloRetryRequest message" \
				25611	-c "selected_group ( 23 )"
				25612
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25613	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25614	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25615	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25616	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25617	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25618	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25619	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25620	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25621	run_test "TLS 1.3 m->m: HRR secp384r1 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25622	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25623	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25624	0 \
				25625	-s "Protocol is TLSv1.3" \
				25626	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25627	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25628	-c "Protocol is TLSv1.3" \
				25629	-c "NamedGroup: secp384r1 ( 18 )" \
				25630	-c "NamedGroup: secp521r1 ( 19 )" \
				25631	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25632	-s "HRR selected_group: secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25633	-c "received HelloRetryRequest message" \
				25634	-c "selected_group ( 25 )"
				25635
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25636	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25637	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25638	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25639	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25640	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25641	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25642	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25643	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25644	run_test "TLS 1.3 m->m: HRR secp384r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25645	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25646	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25647	0 \
				25648	-s "Protocol is TLSv1.3" \
				25649	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25650	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25651	-c "Protocol is TLSv1.3" \
				25652	-c "NamedGroup: secp384r1 ( 18 )" \
				25653	-c "NamedGroup: x25519 ( 1d )" \
				25654	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25655	-s "HRR selected_group: x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25656	-c "received HelloRetryRequest message" \
				25657	-c "selected_group ( 29 )"
				25658
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25659	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25660	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25661	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25662	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25663	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25664	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25665	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25666	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25667	run_test "TLS 1.3 m->m: HRR secp384r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25668	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25669	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25670	0 \
				25671	-s "Protocol is TLSv1.3" \
				25672	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25673	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25674	-c "Protocol is TLSv1.3" \
				25675	-c "NamedGroup: secp384r1 ( 18 )" \
				25676	-c "NamedGroup: x448 ( 1e )" \
				25677	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25678	-s "HRR selected_group: x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25679	-c "received HelloRetryRequest message" \
				25680	-c "selected_group ( 30 )"
				25681
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25682	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25683	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25684	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25685	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25686	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25687	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25688	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25689	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	25690	run_test "TLS 1.3 m->m: HRR secp384r1 -> ffdhe2048" \
				25691	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25692	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe2048" \
				25693	0 \
				25694	-s "Protocol is TLSv1.3" \
				25695	-s "got named group: ffdhe2048(0100)" \
				25696	-s "Certificate verification was skipped" \
				25697	-c "Protocol is TLSv1.3" \
				25698	-c "NamedGroup: secp384r1 ( 18 )" \
				25699	-c "NamedGroup: ffdhe2048 ( 100 )" \
				25700	-c "Verifying peer X.509 certificate... ok" \
				25701	-s "HRR selected_group: ffdhe2048" \
				25702	-c "received HelloRetryRequest message" \
				25703	-c "selected_group ( 256 )"
				25704
				25705	requires_config_enabled MBEDTLS_SSL_SRV_C
				25706	requires_config_enabled MBEDTLS_DEBUG_C
				25707	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25708	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25709	requires_config_enabled MBEDTLS_SSL_CLI_C
				25710	requires_config_enabled MBEDTLS_DEBUG_C
				25711	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25712	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25713	run_test "TLS 1.3 m->m: HRR secp384r1 -> ffdhe3072" \
				25714	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25715	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe3072" \
				25716	0 \
				25717	-s "Protocol is TLSv1.3" \
				25718	-s "got named group: ffdhe3072(0101)" \
				25719	-s "Certificate verification was skipped" \
				25720	-c "Protocol is TLSv1.3" \
				25721	-c "NamedGroup: secp384r1 ( 18 )" \
				25722	-c "NamedGroup: ffdhe3072 ( 101 )" \
				25723	-c "Verifying peer X.509 certificate... ok" \
				25724	-s "HRR selected_group: ffdhe3072" \
				25725	-c "received HelloRetryRequest message" \
				25726	-c "selected_group ( 257 )"
				25727
				25728	requires_config_enabled MBEDTLS_SSL_SRV_C
				25729	requires_config_enabled MBEDTLS_DEBUG_C
				25730	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25731	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25732	requires_config_enabled MBEDTLS_SSL_CLI_C
				25733	requires_config_enabled MBEDTLS_DEBUG_C
				25734	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25735	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25736	run_test "TLS 1.3 m->m: HRR secp384r1 -> ffdhe4096" \
				25737	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25738	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe4096" \
				25739	0 \
				25740	-s "Protocol is TLSv1.3" \
				25741	-s "got named group: ffdhe4096(0102)" \
				25742	-s "Certificate verification was skipped" \
				25743	-c "Protocol is TLSv1.3" \
				25744	-c "NamedGroup: secp384r1 ( 18 )" \
				25745	-c "NamedGroup: ffdhe4096 ( 102 )" \
				25746	-c "Verifying peer X.509 certificate... ok" \
				25747	-s "HRR selected_group: ffdhe4096" \
				25748	-c "received HelloRetryRequest message" \
				25749	-c "selected_group ( 258 )"
				25750
				25751	requires_config_enabled MBEDTLS_SSL_SRV_C
				25752	requires_config_enabled MBEDTLS_DEBUG_C
				25753	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25754	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25755	requires_config_enabled MBEDTLS_SSL_CLI_C
				25756	requires_config_enabled MBEDTLS_DEBUG_C
				25757	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25758	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25759	run_test "TLS 1.3 m->m: HRR secp384r1 -> ffdhe6144" \
				25760	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25761	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe6144" \
				25762	0 \
				25763	-s "Protocol is TLSv1.3" \
				25764	-s "got named group: ffdhe6144(0103)" \
				25765	-s "Certificate verification was skipped" \
				25766	-c "Protocol is TLSv1.3" \
				25767	-c "NamedGroup: secp384r1 ( 18 )" \
				25768	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25769	-c "Verifying peer X.509 certificate... ok" \
				25770	-s "HRR selected_group: ffdhe6144" \
				25771	-c "received HelloRetryRequest message" \
				25772	-c "selected_group ( 259 )"
				25773
				25774	requires_config_enabled MBEDTLS_SSL_SRV_C
				25775	requires_config_enabled MBEDTLS_DEBUG_C
				25776	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25777	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25778	requires_config_enabled MBEDTLS_SSL_CLI_C
				25779	requires_config_enabled MBEDTLS_DEBUG_C
				25780	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25781	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25782	run_test "TLS 1.3 m->m: HRR secp384r1 -> ffdhe8192" \
				25783	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25784	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,ffdhe8192" \
				25785	0 \
				25786	-s "Protocol is TLSv1.3" \
				25787	-s "got named group: ffdhe8192(0104)" \
				25788	-s "Certificate verification was skipped" \
				25789	-c "Protocol is TLSv1.3" \
				25790	-c "NamedGroup: secp384r1 ( 18 )" \
				25791	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25792	-c "Verifying peer X.509 certificate... ok" \
				25793	-s "HRR selected_group: ffdhe8192" \
				25794	-c "received HelloRetryRequest message" \
				25795	-c "selected_group ( 260 )"
				25796
				25797	requires_config_enabled MBEDTLS_SSL_SRV_C
				25798	requires_config_enabled MBEDTLS_DEBUG_C
				25799	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25800	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25801	requires_config_enabled MBEDTLS_SSL_CLI_C
				25802	requires_config_enabled MBEDTLS_DEBUG_C
				25803	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25804	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25805	run_test "TLS 1.3 m->m: HRR secp521r1 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25806	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25807	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25808	0 \
				25809	-s "Protocol is TLSv1.3" \
				25810	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25811	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25812	-c "Protocol is TLSv1.3" \
				25813	-c "NamedGroup: secp521r1 ( 19 )" \
				25814	-c "NamedGroup: secp256r1 ( 17 )" \
				25815	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25816	-s "HRR selected_group: secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25817	-c "received HelloRetryRequest message" \
				25818	-c "selected_group ( 23 )"
				25819
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25820	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25821	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25822	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25823	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25824	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25825	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25826	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25827	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25828	run_test "TLS 1.3 m->m: HRR secp521r1 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25829	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25830	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25831	0 \
				25832	-s "Protocol is TLSv1.3" \
				25833	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25834	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25835	-c "Protocol is TLSv1.3" \
				25836	-c "NamedGroup: secp521r1 ( 19 )" \
				25837	-c "NamedGroup: secp384r1 ( 18 )" \
				25838	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25839	-s "HRR selected_group: secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25840	-c "received HelloRetryRequest message" \
				25841	-c "selected_group ( 24 )"
				25842
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25843	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25844	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25845	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25846	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25847	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25848	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25849	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25850	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25851	run_test "TLS 1.3 m->m: HRR secp521r1 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25852	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25853	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25854	0 \
				25855	-s "Protocol is TLSv1.3" \
				25856	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25857	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25858	-c "Protocol is TLSv1.3" \
				25859	-c "NamedGroup: secp521r1 ( 19 )" \
				25860	-c "NamedGroup: x25519 ( 1d )" \
				25861	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25862	-s "HRR selected_group: x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25863	-c "received HelloRetryRequest message" \
				25864	-c "selected_group ( 29 )"
				25865
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25866	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25867	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25868	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25869	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25870	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25871	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25872	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25873	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25874	run_test "TLS 1.3 m->m: HRR secp521r1 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	25875	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25876	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25877	0 \
				25878	-s "Protocol is TLSv1.3" \
				25879	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	25880	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25881	-c "Protocol is TLSv1.3" \
				25882	-c "NamedGroup: secp521r1 ( 19 )" \
				25883	-c "NamedGroup: x448 ( 1e )" \
				25884	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25885	-s "HRR selected_group: x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25886	-c "received HelloRetryRequest message" \
				25887	-c "selected_group ( 30 )"
				25888
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	25889	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25890	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25891	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25892	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25893	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	25894	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	25895	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	25896	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	25897	run_test "TLS 1.3 m->m: HRR secp521r1 -> ffdhe2048" \
				25898	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25899	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe2048" \
				25900	0 \
				25901	-s "Protocol is TLSv1.3" \
				25902	-s "got named group: ffdhe2048(0100)" \
				25903	-s "Certificate verification was skipped" \
				25904	-c "Protocol is TLSv1.3" \
				25905	-c "NamedGroup: secp521r1 ( 19 )" \
				25906	-c "NamedGroup: ffdhe2048 ( 100 )" \
				25907	-c "Verifying peer X.509 certificate... ok" \
				25908	-s "HRR selected_group: ffdhe2048" \
				25909	-c "received HelloRetryRequest message" \
				25910	-c "selected_group ( 256 )"
				25911
				25912	requires_config_enabled MBEDTLS_SSL_SRV_C
				25913	requires_config_enabled MBEDTLS_DEBUG_C
				25914	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25915	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25916	requires_config_enabled MBEDTLS_SSL_CLI_C
				25917	requires_config_enabled MBEDTLS_DEBUG_C
				25918	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25919	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25920	run_test "TLS 1.3 m->m: HRR secp521r1 -> ffdhe3072" \
				25921	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25922	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe3072" \
				25923	0 \
				25924	-s "Protocol is TLSv1.3" \
				25925	-s "got named group: ffdhe3072(0101)" \
				25926	-s "Certificate verification was skipped" \
				25927	-c "Protocol is TLSv1.3" \
				25928	-c "NamedGroup: secp521r1 ( 19 )" \
				25929	-c "NamedGroup: ffdhe3072 ( 101 )" \
				25930	-c "Verifying peer X.509 certificate... ok" \
				25931	-s "HRR selected_group: ffdhe3072" \
				25932	-c "received HelloRetryRequest message" \
				25933	-c "selected_group ( 257 )"
				25934
				25935	requires_config_enabled MBEDTLS_SSL_SRV_C
				25936	requires_config_enabled MBEDTLS_DEBUG_C
				25937	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25938	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25939	requires_config_enabled MBEDTLS_SSL_CLI_C
				25940	requires_config_enabled MBEDTLS_DEBUG_C
				25941	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25942	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25943	run_test "TLS 1.3 m->m: HRR secp521r1 -> ffdhe4096" \
				25944	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25945	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe4096" \
				25946	0 \
				25947	-s "Protocol is TLSv1.3" \
				25948	-s "got named group: ffdhe4096(0102)" \
				25949	-s "Certificate verification was skipped" \
				25950	-c "Protocol is TLSv1.3" \
				25951	-c "NamedGroup: secp521r1 ( 19 )" \
				25952	-c "NamedGroup: ffdhe4096 ( 102 )" \
				25953	-c "Verifying peer X.509 certificate... ok" \
				25954	-s "HRR selected_group: ffdhe4096" \
				25955	-c "received HelloRetryRequest message" \
				25956	-c "selected_group ( 258 )"
				25957
				25958	requires_config_enabled MBEDTLS_SSL_SRV_C
				25959	requires_config_enabled MBEDTLS_DEBUG_C
				25960	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25961	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25962	requires_config_enabled MBEDTLS_SSL_CLI_C
				25963	requires_config_enabled MBEDTLS_DEBUG_C
				25964	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25965	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25966	run_test "TLS 1.3 m->m: HRR secp521r1 -> ffdhe6144" \
				25967	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25968	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe6144" \
				25969	0 \
				25970	-s "Protocol is TLSv1.3" \
				25971	-s "got named group: ffdhe6144(0103)" \
				25972	-s "Certificate verification was skipped" \
				25973	-c "Protocol is TLSv1.3" \
				25974	-c "NamedGroup: secp521r1 ( 19 )" \
				25975	-c "NamedGroup: ffdhe6144 ( 103 )" \
				25976	-c "Verifying peer X.509 certificate... ok" \
				25977	-s "HRR selected_group: ffdhe6144" \
				25978	-c "received HelloRetryRequest message" \
				25979	-c "selected_group ( 259 )"
				25980
				25981	requires_config_enabled MBEDTLS_SSL_SRV_C
				25982	requires_config_enabled MBEDTLS_DEBUG_C
				25983	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25984	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25985	requires_config_enabled MBEDTLS_SSL_CLI_C
				25986	requires_config_enabled MBEDTLS_DEBUG_C
				25987	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				25988	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				25989	run_test "TLS 1.3 m->m: HRR secp521r1 -> ffdhe8192" \
				25990	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				25991	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,ffdhe8192" \
				25992	0 \
				25993	-s "Protocol is TLSv1.3" \
				25994	-s "got named group: ffdhe8192(0104)" \
				25995	-s "Certificate verification was skipped" \
				25996	-c "Protocol is TLSv1.3" \
				25997	-c "NamedGroup: secp521r1 ( 19 )" \
				25998	-c "NamedGroup: ffdhe8192 ( 104 )" \
				25999	-c "Verifying peer X.509 certificate... ok" \
				26000	-s "HRR selected_group: ffdhe8192" \
				26001	-c "received HelloRetryRequest message" \
				26002	-c "selected_group ( 260 )"
				26003
				26004	requires_config_enabled MBEDTLS_SSL_SRV_C
				26005	requires_config_enabled MBEDTLS_DEBUG_C
				26006	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26007	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26008	requires_config_enabled MBEDTLS_SSL_CLI_C
				26009	requires_config_enabled MBEDTLS_DEBUG_C
				26010	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26011	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26012	run_test "TLS 1.3 m->m: HRR x25519 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	26013	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26014	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26015	0 \
				26016	-s "Protocol is TLSv1.3" \
				26017	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	26018	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26019	-c "Protocol is TLSv1.3" \
				26020	-c "NamedGroup: x25519 ( 1d )" \
				26021	-c "NamedGroup: secp256r1 ( 17 )" \
				26022	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26023	-s "HRR selected_group: secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26024	-c "received HelloRetryRequest message" \
				26025	-c "selected_group ( 23 )"
				26026
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	26027	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26028	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26029	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26030	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26031	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26032	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26033	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26034	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26035	run_test "TLS 1.3 m->m: HRR x25519 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	26036	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26037	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26038	0 \
				26039	-s "Protocol is TLSv1.3" \
				26040	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	26041	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26042	-c "Protocol is TLSv1.3" \
				26043	-c "NamedGroup: x25519 ( 1d )" \
				26044	-c "NamedGroup: secp384r1 ( 18 )" \
				26045	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26046	-s "HRR selected_group: secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26047	-c "received HelloRetryRequest message" \
				26048	-c "selected_group ( 24 )"
				26049
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	26050	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26051	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26052	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26053	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26054	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26055	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26056	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26057	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26058	run_test "TLS 1.3 m->m: HRR x25519 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	26059	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26060	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26061	0 \
				26062	-s "Protocol is TLSv1.3" \
				26063	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	26064	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26065	-c "Protocol is TLSv1.3" \
				26066	-c "NamedGroup: x25519 ( 1d )" \
				26067	-c "NamedGroup: secp521r1 ( 19 )" \
				26068	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26069	-s "HRR selected_group: secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26070	-c "received HelloRetryRequest message" \
				26071	-c "selected_group ( 25 )"
				26072
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	26073	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26074	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26075	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26076	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26077	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26078	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26079	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26080	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26081	run_test "TLS 1.3 m->m: HRR x25519 -> x448" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	26082	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26083	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26084	0 \
				26085	-s "Protocol is TLSv1.3" \
				26086	-s "got named group: x448(001e)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	26087	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26088	-c "Protocol is TLSv1.3" \
				26089	-c "NamedGroup: x25519 ( 1d )" \
				26090	-c "NamedGroup: x448 ( 1e )" \
				26091	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26092	-s "HRR selected_group: x448" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26093	-c "received HelloRetryRequest message" \
				26094	-c "selected_group ( 30 )"
				26095
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	26096	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26097	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26098	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26099	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26100	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26101	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26102	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26103	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	26104	run_test "TLS 1.3 m->m: HRR x25519 -> ffdhe2048" \
				26105	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26106	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe2048" \
				26107	0 \
				26108	-s "Protocol is TLSv1.3" \
				26109	-s "got named group: ffdhe2048(0100)" \
				26110	-s "Certificate verification was skipped" \
				26111	-c "Protocol is TLSv1.3" \
				26112	-c "NamedGroup: x25519 ( 1d )" \
				26113	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26114	-c "Verifying peer X.509 certificate... ok" \
				26115	-s "HRR selected_group: ffdhe2048" \
				26116	-c "received HelloRetryRequest message" \
				26117	-c "selected_group ( 256 )"
				26118
				26119	requires_config_enabled MBEDTLS_SSL_SRV_C
				26120	requires_config_enabled MBEDTLS_DEBUG_C
				26121	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26122	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26123	requires_config_enabled MBEDTLS_SSL_CLI_C
				26124	requires_config_enabled MBEDTLS_DEBUG_C
				26125	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26126	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26127	run_test "TLS 1.3 m->m: HRR x25519 -> ffdhe3072" \
				26128	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26129	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe3072" \
				26130	0 \
				26131	-s "Protocol is TLSv1.3" \
				26132	-s "got named group: ffdhe3072(0101)" \
				26133	-s "Certificate verification was skipped" \
				26134	-c "Protocol is TLSv1.3" \
				26135	-c "NamedGroup: x25519 ( 1d )" \
				26136	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26137	-c "Verifying peer X.509 certificate... ok" \
				26138	-s "HRR selected_group: ffdhe3072" \
				26139	-c "received HelloRetryRequest message" \
				26140	-c "selected_group ( 257 )"
				26141
				26142	requires_config_enabled MBEDTLS_SSL_SRV_C
				26143	requires_config_enabled MBEDTLS_DEBUG_C
				26144	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26145	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26146	requires_config_enabled MBEDTLS_SSL_CLI_C
				26147	requires_config_enabled MBEDTLS_DEBUG_C
				26148	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26149	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26150	run_test "TLS 1.3 m->m: HRR x25519 -> ffdhe4096" \
				26151	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26152	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe4096" \
				26153	0 \
				26154	-s "Protocol is TLSv1.3" \
				26155	-s "got named group: ffdhe4096(0102)" \
				26156	-s "Certificate verification was skipped" \
				26157	-c "Protocol is TLSv1.3" \
				26158	-c "NamedGroup: x25519 ( 1d )" \
				26159	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26160	-c "Verifying peer X.509 certificate... ok" \
				26161	-s "HRR selected_group: ffdhe4096" \
				26162	-c "received HelloRetryRequest message" \
				26163	-c "selected_group ( 258 )"
				26164
				26165	requires_config_enabled MBEDTLS_SSL_SRV_C
				26166	requires_config_enabled MBEDTLS_DEBUG_C
				26167	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26168	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26169	requires_config_enabled MBEDTLS_SSL_CLI_C
				26170	requires_config_enabled MBEDTLS_DEBUG_C
				26171	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26172	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26173	run_test "TLS 1.3 m->m: HRR x25519 -> ffdhe6144" \
				26174	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26175	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe6144" \
				26176	0 \
				26177	-s "Protocol is TLSv1.3" \
				26178	-s "got named group: ffdhe6144(0103)" \
				26179	-s "Certificate verification was skipped" \
				26180	-c "Protocol is TLSv1.3" \
				26181	-c "NamedGroup: x25519 ( 1d )" \
				26182	-c "NamedGroup: ffdhe6144 ( 103 )" \
				26183	-c "Verifying peer X.509 certificate... ok" \
				26184	-s "HRR selected_group: ffdhe6144" \
				26185	-c "received HelloRetryRequest message" \
				26186	-c "selected_group ( 259 )"
				26187
				26188	requires_config_enabled MBEDTLS_SSL_SRV_C
				26189	requires_config_enabled MBEDTLS_DEBUG_C
				26190	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26191	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26192	requires_config_enabled MBEDTLS_SSL_CLI_C
				26193	requires_config_enabled MBEDTLS_DEBUG_C
				26194	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26195	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26196	run_test "TLS 1.3 m->m: HRR x25519 -> ffdhe8192" \
				26197	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26198	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,ffdhe8192" \
				26199	0 \
				26200	-s "Protocol is TLSv1.3" \
				26201	-s "got named group: ffdhe8192(0104)" \
				26202	-s "Certificate verification was skipped" \
				26203	-c "Protocol is TLSv1.3" \
				26204	-c "NamedGroup: x25519 ( 1d )" \
				26205	-c "NamedGroup: ffdhe8192 ( 104 )" \
				26206	-c "Verifying peer X.509 certificate... ok" \
				26207	-s "HRR selected_group: ffdhe8192" \
				26208	-c "received HelloRetryRequest message" \
				26209	-c "selected_group ( 260 )"
				26210
				26211	requires_config_enabled MBEDTLS_SSL_SRV_C
				26212	requires_config_enabled MBEDTLS_DEBUG_C
				26213	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26214	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26215	requires_config_enabled MBEDTLS_SSL_CLI_C
				26216	requires_config_enabled MBEDTLS_DEBUG_C
				26217	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26218	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26219	run_test "TLS 1.3 m->m: HRR x448 -> secp256r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	26220	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26221	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26222	0 \
				26223	-s "Protocol is TLSv1.3" \
				26224	-s "got named group: secp256r1(0017)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	26225	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26226	-c "Protocol is TLSv1.3" \
				26227	-c "NamedGroup: x448 ( 1e )" \
				26228	-c "NamedGroup: secp256r1 ( 17 )" \
				26229	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26230	-s "HRR selected_group: secp256r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26231	-c "received HelloRetryRequest message" \
				26232	-c "selected_group ( 23 )"
				26233
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	26234	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26235	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26236	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26237	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26238	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26239	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26240	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26241	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26242	run_test "TLS 1.3 m->m: HRR x448 -> secp384r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	26243	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26244	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26245	0 \
				26246	-s "Protocol is TLSv1.3" \
				26247	-s "got named group: secp384r1(0018)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	26248	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26249	-c "Protocol is TLSv1.3" \
				26250	-c "NamedGroup: x448 ( 1e )" \
				26251	-c "NamedGroup: secp384r1 ( 18 )" \
				26252	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26253	-s "HRR selected_group: secp384r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26254	-c "received HelloRetryRequest message" \
				26255	-c "selected_group ( 24 )"
				26256
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	26257	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26258	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26259	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26260	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26261	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26262	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26263	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26264	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26265	run_test "TLS 1.3 m->m: HRR x448 -> secp521r1" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	26266	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26267	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26268	0 \
				26269	-s "Protocol is TLSv1.3" \
				26270	-s "got named group: secp521r1(0019)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	26271	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26272	-c "Protocol is TLSv1.3" \
				26273	-c "NamedGroup: x448 ( 1e )" \
				26274	-c "NamedGroup: secp521r1 ( 19 )" \
				26275	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26276	-s "HRR selected_group: secp521r1" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26277	-c "received HelloRetryRequest message" \
				26278	-c "selected_group ( 25 )"
				26279
XiaokangQian	fb1a3fe	2022-06-09 06:37:33 +0000	[diff] [blame]	26280	requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26281	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26282	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26283	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26284	requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26285	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	928cbd3	2022-10-04 16:14:26 +0200	[diff] [blame]	26286	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26287	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26288	run_test "TLS 1.3 m->m: HRR x448 -> x25519" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	26289	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26290	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26291	0 \
				26292	-s "Protocol is TLSv1.3" \
				26293	-s "got named group: x25519(001d)" \
Ronald Cron	eac00ad	2022-09-13 10:16:31 +0200	[diff] [blame]	26294	-s "Certificate verification was skipped" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26295	-c "Protocol is TLSv1.3" \
				26296	-c "NamedGroup: x448 ( 1e )" \
				26297	-c "NamedGroup: x25519 ( 1d )" \
				26298	-c "Verifying peer X.509 certificate... ok" \
XiaokangQian	9b938b7	2022-06-10 03:10:59 +0000	[diff] [blame]	26299	-s "HRR selected_group: x25519" \
XiaokangQian	b1847a2	2022-06-08 07:49:31 +0000	[diff] [blame]	26300	-c "received HelloRetryRequest message" \
				26301	-c "selected_group ( 29 )"
Przemek Stekiel	422ab1f	2023-06-14 11:04:28 +0200	[diff] [blame^]	26302
				26303	requires_config_enabled MBEDTLS_SSL_SRV_C
				26304	requires_config_enabled MBEDTLS_DEBUG_C
				26305	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26306	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26307	requires_config_enabled MBEDTLS_SSL_CLI_C
				26308	requires_config_enabled MBEDTLS_DEBUG_C
				26309	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26310	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26311	run_test "TLS 1.3 m->m: HRR x448 -> ffdhe2048" \
				26312	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26313	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe2048" \
				26314	0 \
				26315	-s "Protocol is TLSv1.3" \
				26316	-s "got named group: ffdhe2048(0100)" \
				26317	-s "Certificate verification was skipped" \
				26318	-c "Protocol is TLSv1.3" \
				26319	-c "NamedGroup: x448 ( 1e )" \
				26320	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26321	-c "Verifying peer X.509 certificate... ok" \
				26322	-s "HRR selected_group: ffdhe2048" \
				26323	-c "received HelloRetryRequest message" \
				26324	-c "selected_group ( 256 )"
				26325
				26326	requires_config_enabled MBEDTLS_SSL_SRV_C
				26327	requires_config_enabled MBEDTLS_DEBUG_C
				26328	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26329	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26330	requires_config_enabled MBEDTLS_SSL_CLI_C
				26331	requires_config_enabled MBEDTLS_DEBUG_C
				26332	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26333	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26334	run_test "TLS 1.3 m->m: HRR x448 -> ffdhe3072" \
				26335	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26336	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe3072" \
				26337	0 \
				26338	-s "Protocol is TLSv1.3" \
				26339	-s "got named group: ffdhe3072(0101)" \
				26340	-s "Certificate verification was skipped" \
				26341	-c "Protocol is TLSv1.3" \
				26342	-c "NamedGroup: x448 ( 1e )" \
				26343	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26344	-c "Verifying peer X.509 certificate... ok" \
				26345	-s "HRR selected_group: ffdhe3072" \
				26346	-c "received HelloRetryRequest message" \
				26347	-c "selected_group ( 257 )"
				26348
				26349	requires_config_enabled MBEDTLS_SSL_SRV_C
				26350	requires_config_enabled MBEDTLS_DEBUG_C
				26351	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26352	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26353	requires_config_enabled MBEDTLS_SSL_CLI_C
				26354	requires_config_enabled MBEDTLS_DEBUG_C
				26355	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26356	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26357	run_test "TLS 1.3 m->m: HRR x448 -> ffdhe4096" \
				26358	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26359	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe4096" \
				26360	0 \
				26361	-s "Protocol is TLSv1.3" \
				26362	-s "got named group: ffdhe4096(0102)" \
				26363	-s "Certificate verification was skipped" \
				26364	-c "Protocol is TLSv1.3" \
				26365	-c "NamedGroup: x448 ( 1e )" \
				26366	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26367	-c "Verifying peer X.509 certificate... ok" \
				26368	-s "HRR selected_group: ffdhe4096" \
				26369	-c "received HelloRetryRequest message" \
				26370	-c "selected_group ( 258 )"
				26371
				26372	requires_config_enabled MBEDTLS_SSL_SRV_C
				26373	requires_config_enabled MBEDTLS_DEBUG_C
				26374	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26375	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26376	requires_config_enabled MBEDTLS_SSL_CLI_C
				26377	requires_config_enabled MBEDTLS_DEBUG_C
				26378	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26379	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26380	run_test "TLS 1.3 m->m: HRR x448 -> ffdhe6144" \
				26381	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26382	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe6144" \
				26383	0 \
				26384	-s "Protocol is TLSv1.3" \
				26385	-s "got named group: ffdhe6144(0103)" \
				26386	-s "Certificate verification was skipped" \
				26387	-c "Protocol is TLSv1.3" \
				26388	-c "NamedGroup: x448 ( 1e )" \
				26389	-c "NamedGroup: ffdhe6144 ( 103 )" \
				26390	-c "Verifying peer X.509 certificate... ok" \
				26391	-s "HRR selected_group: ffdhe6144" \
				26392	-c "received HelloRetryRequest message" \
				26393	-c "selected_group ( 259 )"
				26394
				26395	requires_config_enabled MBEDTLS_SSL_SRV_C
				26396	requires_config_enabled MBEDTLS_DEBUG_C
				26397	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26398	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26399	requires_config_enabled MBEDTLS_SSL_CLI_C
				26400	requires_config_enabled MBEDTLS_DEBUG_C
				26401	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26402	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26403	run_test "TLS 1.3 m->m: HRR x448 -> ffdhe8192" \
				26404	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26405	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,ffdhe8192" \
				26406	0 \
				26407	-s "Protocol is TLSv1.3" \
				26408	-s "got named group: ffdhe8192(0104)" \
				26409	-s "Certificate verification was skipped" \
				26410	-c "Protocol is TLSv1.3" \
				26411	-c "NamedGroup: x448 ( 1e )" \
				26412	-c "NamedGroup: ffdhe8192 ( 104 )" \
				26413	-c "Verifying peer X.509 certificate... ok" \
				26414	-s "HRR selected_group: ffdhe8192" \
				26415	-c "received HelloRetryRequest message" \
				26416	-c "selected_group ( 260 )"
				26417
				26418	requires_config_enabled MBEDTLS_SSL_SRV_C
				26419	requires_config_enabled MBEDTLS_DEBUG_C
				26420	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26421	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26422	requires_config_enabled MBEDTLS_SSL_CLI_C
				26423	requires_config_enabled MBEDTLS_DEBUG_C
				26424	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26425	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26426	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> secp256r1" \
				26427	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26428	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp256r1" \
				26429	0 \
				26430	-s "Protocol is TLSv1.3" \
				26431	-s "got named group: secp256r1(0017)" \
				26432	-s "Certificate verification was skipped" \
				26433	-c "Protocol is TLSv1.3" \
				26434	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26435	-c "NamedGroup: secp256r1 ( 17 )" \
				26436	-c "Verifying peer X.509 certificate... ok" \
				26437	-s "HRR selected_group: secp256r1" \
				26438	-c "received HelloRetryRequest message" \
				26439	-c "selected_group ( 23 )"
				26440
				26441	requires_config_enabled MBEDTLS_SSL_SRV_C
				26442	requires_config_enabled MBEDTLS_DEBUG_C
				26443	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26444	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26445	requires_config_enabled MBEDTLS_SSL_CLI_C
				26446	requires_config_enabled MBEDTLS_DEBUG_C
				26447	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26448	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26449	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> secp384r1" \
				26450	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26451	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp384r1" \
				26452	0 \
				26453	-s "Protocol is TLSv1.3" \
				26454	-s "got named group: secp384r1(0018)" \
				26455	-s "Certificate verification was skipped" \
				26456	-c "Protocol is TLSv1.3" \
				26457	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26458	-c "NamedGroup: secp384r1 ( 18 )" \
				26459	-c "Verifying peer X.509 certificate... ok" \
				26460	-s "HRR selected_group: secp384r1" \
				26461	-c "received HelloRetryRequest message" \
				26462	-c "selected_group ( 24 )"
				26463
				26464	requires_config_enabled MBEDTLS_SSL_SRV_C
				26465	requires_config_enabled MBEDTLS_DEBUG_C
				26466	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26467	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26468	requires_config_enabled MBEDTLS_SSL_CLI_C
				26469	requires_config_enabled MBEDTLS_DEBUG_C
				26470	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26471	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26472	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> secp521r1" \
				26473	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26474	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,secp521r1" \
				26475	0 \
				26476	-s "Protocol is TLSv1.3" \
				26477	-s "got named group: secp521r1(0019)" \
				26478	-s "Certificate verification was skipped" \
				26479	-c "Protocol is TLSv1.3" \
				26480	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26481	-c "NamedGroup: secp521r1 ( 19 )" \
				26482	-c "Verifying peer X.509 certificate... ok" \
				26483	-s "HRR selected_group: secp521r1" \
				26484	-c "received HelloRetryRequest message" \
				26485	-c "selected_group ( 25 )"
				26486
				26487	requires_config_enabled MBEDTLS_SSL_SRV_C
				26488	requires_config_enabled MBEDTLS_DEBUG_C
				26489	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26490	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26491	requires_config_enabled MBEDTLS_SSL_CLI_C
				26492	requires_config_enabled MBEDTLS_DEBUG_C
				26493	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26494	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26495	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> x25519" \
				26496	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26497	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,x25519" \
				26498	0 \
				26499	-s "Protocol is TLSv1.3" \
				26500	-s "got named group: x25519(001d)" \
				26501	-s "Certificate verification was skipped" \
				26502	-c "Protocol is TLSv1.3" \
				26503	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26504	-c "NamedGroup: x25519 ( 1d )" \
				26505	-c "Verifying peer X.509 certificate... ok" \
				26506	-s "HRR selected_group: x25519" \
				26507	-c "received HelloRetryRequest message" \
				26508	-c "selected_group ( 29 )"
				26509
				26510	requires_config_enabled MBEDTLS_SSL_SRV_C
				26511	requires_config_enabled MBEDTLS_DEBUG_C
				26512	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26513	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26514	requires_config_enabled MBEDTLS_SSL_CLI_C
				26515	requires_config_enabled MBEDTLS_DEBUG_C
				26516	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26517	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26518	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> x448" \
				26519	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26520	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,x448" \
				26521	0 \
				26522	-s "Protocol is TLSv1.3" \
				26523	-s "got named group: x448(001e)" \
				26524	-s "Certificate verification was skipped" \
				26525	-c "Protocol is TLSv1.3" \
				26526	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26527	-c "NamedGroup: x448 ( 1e )" \
				26528	-c "Verifying peer X.509 certificate... ok" \
				26529	-s "HRR selected_group: x448" \
				26530	-c "received HelloRetryRequest message" \
				26531	-c "selected_group ( 30 )"
				26532
				26533	requires_config_enabled MBEDTLS_SSL_SRV_C
				26534	requires_config_enabled MBEDTLS_DEBUG_C
				26535	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26536	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26537	requires_config_enabled MBEDTLS_SSL_CLI_C
				26538	requires_config_enabled MBEDTLS_DEBUG_C
				26539	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26540	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26541	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> ffdhe3072" \
				26542	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26543	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe3072" \
				26544	0 \
				26545	-s "Protocol is TLSv1.3" \
				26546	-s "got named group: ffdhe3072(0101)" \
				26547	-s "Certificate verification was skipped" \
				26548	-c "Protocol is TLSv1.3" \
				26549	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26550	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26551	-c "Verifying peer X.509 certificate... ok" \
				26552	-s "HRR selected_group: ffdhe3072" \
				26553	-c "received HelloRetryRequest message" \
				26554	-c "selected_group ( 257 )"
				26555
				26556	requires_config_enabled MBEDTLS_SSL_SRV_C
				26557	requires_config_enabled MBEDTLS_DEBUG_C
				26558	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26559	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26560	requires_config_enabled MBEDTLS_SSL_CLI_C
				26561	requires_config_enabled MBEDTLS_DEBUG_C
				26562	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26563	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26564	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> ffdhe4096" \
				26565	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26566	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe4096" \
				26567	0 \
				26568	-s "Protocol is TLSv1.3" \
				26569	-s "got named group: ffdhe4096(0102)" \
				26570	-s "Certificate verification was skipped" \
				26571	-c "Protocol is TLSv1.3" \
				26572	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26573	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26574	-c "Verifying peer X.509 certificate... ok" \
				26575	-s "HRR selected_group: ffdhe4096" \
				26576	-c "received HelloRetryRequest message" \
				26577	-c "selected_group ( 258 )"
				26578
				26579	requires_config_enabled MBEDTLS_SSL_SRV_C
				26580	requires_config_enabled MBEDTLS_DEBUG_C
				26581	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26582	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26583	requires_config_enabled MBEDTLS_SSL_CLI_C
				26584	requires_config_enabled MBEDTLS_DEBUG_C
				26585	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26586	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26587	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> ffdhe6144" \
				26588	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26589	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe6144" \
				26590	0 \
				26591	-s "Protocol is TLSv1.3" \
				26592	-s "got named group: ffdhe6144(0103)" \
				26593	-s "Certificate verification was skipped" \
				26594	-c "Protocol is TLSv1.3" \
				26595	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26596	-c "NamedGroup: ffdhe6144 ( 103 )" \
				26597	-c "Verifying peer X.509 certificate... ok" \
				26598	-s "HRR selected_group: ffdhe6144" \
				26599	-c "received HelloRetryRequest message" \
				26600	-c "selected_group ( 259 )"
				26601
				26602	requires_config_enabled MBEDTLS_SSL_SRV_C
				26603	requires_config_enabled MBEDTLS_DEBUG_C
				26604	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26605	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26606	requires_config_enabled MBEDTLS_SSL_CLI_C
				26607	requires_config_enabled MBEDTLS_DEBUG_C
				26608	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26609	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26610	run_test "TLS 1.3 m->m: HRR ffdhe2048 -> ffdhe8192" \
				26611	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26612	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048,ffdhe8192" \
				26613	0 \
				26614	-s "Protocol is TLSv1.3" \
				26615	-s "got named group: ffdhe8192(0104)" \
				26616	-s "Certificate verification was skipped" \
				26617	-c "Protocol is TLSv1.3" \
				26618	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26619	-c "NamedGroup: ffdhe8192 ( 104 )" \
				26620	-c "Verifying peer X.509 certificate... ok" \
				26621	-s "HRR selected_group: ffdhe8192" \
				26622	-c "received HelloRetryRequest message" \
				26623	-c "selected_group ( 260 )"
				26624
				26625	requires_config_enabled MBEDTLS_SSL_SRV_C
				26626	requires_config_enabled MBEDTLS_DEBUG_C
				26627	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26628	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26629	requires_config_enabled MBEDTLS_SSL_CLI_C
				26630	requires_config_enabled MBEDTLS_DEBUG_C
				26631	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26632	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26633	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> secp256r1" \
				26634	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26635	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp256r1" \
				26636	0 \
				26637	-s "Protocol is TLSv1.3" \
				26638	-s "got named group: secp256r1(0017)" \
				26639	-s "Certificate verification was skipped" \
				26640	-c "Protocol is TLSv1.3" \
				26641	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26642	-c "NamedGroup: secp256r1 ( 17 )" \
				26643	-c "Verifying peer X.509 certificate... ok" \
				26644	-s "HRR selected_group: secp256r1" \
				26645	-c "received HelloRetryRequest message" \
				26646	-c "selected_group ( 23 )"
				26647
				26648	requires_config_enabled MBEDTLS_SSL_SRV_C
				26649	requires_config_enabled MBEDTLS_DEBUG_C
				26650	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26651	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26652	requires_config_enabled MBEDTLS_SSL_CLI_C
				26653	requires_config_enabled MBEDTLS_DEBUG_C
				26654	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26655	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26656	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> secp384r1" \
				26657	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26658	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp384r1" \
				26659	0 \
				26660	-s "Protocol is TLSv1.3" \
				26661	-s "got named group: secp384r1(0018)" \
				26662	-s "Certificate verification was skipped" \
				26663	-c "Protocol is TLSv1.3" \
				26664	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26665	-c "NamedGroup: secp384r1 ( 18 )" \
				26666	-c "Verifying peer X.509 certificate... ok" \
				26667	-s "HRR selected_group: secp384r1" \
				26668	-c "received HelloRetryRequest message" \
				26669	-c "selected_group ( 24 )"
				26670
				26671	requires_config_enabled MBEDTLS_SSL_SRV_C
				26672	requires_config_enabled MBEDTLS_DEBUG_C
				26673	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26674	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26675	requires_config_enabled MBEDTLS_SSL_CLI_C
				26676	requires_config_enabled MBEDTLS_DEBUG_C
				26677	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26678	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26679	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> secp521r1" \
				26680	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26681	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,secp521r1" \
				26682	0 \
				26683	-s "Protocol is TLSv1.3" \
				26684	-s "got named group: secp521r1(0019)" \
				26685	-s "Certificate verification was skipped" \
				26686	-c "Protocol is TLSv1.3" \
				26687	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26688	-c "NamedGroup: secp521r1 ( 19 )" \
				26689	-c "Verifying peer X.509 certificate... ok" \
				26690	-s "HRR selected_group: secp521r1" \
				26691	-c "received HelloRetryRequest message" \
				26692	-c "selected_group ( 25 )"
				26693
				26694	requires_config_enabled MBEDTLS_SSL_SRV_C
				26695	requires_config_enabled MBEDTLS_DEBUG_C
				26696	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26697	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26698	requires_config_enabled MBEDTLS_SSL_CLI_C
				26699	requires_config_enabled MBEDTLS_DEBUG_C
				26700	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26701	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26702	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> x25519" \
				26703	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26704	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,x25519" \
				26705	0 \
				26706	-s "Protocol is TLSv1.3" \
				26707	-s "got named group: x25519(001d)" \
				26708	-s "Certificate verification was skipped" \
				26709	-c "Protocol is TLSv1.3" \
				26710	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26711	-c "NamedGroup: x25519 ( 1d )" \
				26712	-c "Verifying peer X.509 certificate... ok" \
				26713	-s "HRR selected_group: x25519" \
				26714	-c "received HelloRetryRequest message" \
				26715	-c "selected_group ( 29 )"
				26716
				26717	requires_config_enabled MBEDTLS_SSL_SRV_C
				26718	requires_config_enabled MBEDTLS_DEBUG_C
				26719	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26720	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26721	requires_config_enabled MBEDTLS_SSL_CLI_C
				26722	requires_config_enabled MBEDTLS_DEBUG_C
				26723	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26724	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26725	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> x448" \
				26726	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26727	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,x448" \
				26728	0 \
				26729	-s "Protocol is TLSv1.3" \
				26730	-s "got named group: x448(001e)" \
				26731	-s "Certificate verification was skipped" \
				26732	-c "Protocol is TLSv1.3" \
				26733	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26734	-c "NamedGroup: x448 ( 1e )" \
				26735	-c "Verifying peer X.509 certificate... ok" \
				26736	-s "HRR selected_group: x448" \
				26737	-c "received HelloRetryRequest message" \
				26738	-c "selected_group ( 30 )"
				26739
				26740	requires_config_enabled MBEDTLS_SSL_SRV_C
				26741	requires_config_enabled MBEDTLS_DEBUG_C
				26742	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26743	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26744	requires_config_enabled MBEDTLS_SSL_CLI_C
				26745	requires_config_enabled MBEDTLS_DEBUG_C
				26746	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26747	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26748	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> ffdhe2048" \
				26749	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26750	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe2048" \
				26751	0 \
				26752	-s "Protocol is TLSv1.3" \
				26753	-s "got named group: ffdhe2048(0100)" \
				26754	-s "Certificate verification was skipped" \
				26755	-c "Protocol is TLSv1.3" \
				26756	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26757	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26758	-c "Verifying peer X.509 certificate... ok" \
				26759	-s "HRR selected_group: ffdhe2048" \
				26760	-c "received HelloRetryRequest message" \
				26761	-c "selected_group ( 256 )"
				26762
				26763	requires_config_enabled MBEDTLS_SSL_SRV_C
				26764	requires_config_enabled MBEDTLS_DEBUG_C
				26765	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26766	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26767	requires_config_enabled MBEDTLS_SSL_CLI_C
				26768	requires_config_enabled MBEDTLS_DEBUG_C
				26769	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26770	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26771	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> ffdhe4096" \
				26772	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26773	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe4096" \
				26774	0 \
				26775	-s "Protocol is TLSv1.3" \
				26776	-s "got named group: ffdhe4096(0102)" \
				26777	-s "Certificate verification was skipped" \
				26778	-c "Protocol is TLSv1.3" \
				26779	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26780	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26781	-c "Verifying peer X.509 certificate... ok" \
				26782	-s "HRR selected_group: ffdhe4096" \
				26783	-c "received HelloRetryRequest message" \
				26784	-c "selected_group ( 258 )"
				26785
				26786	requires_config_enabled MBEDTLS_SSL_SRV_C
				26787	requires_config_enabled MBEDTLS_DEBUG_C
				26788	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26789	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26790	requires_config_enabled MBEDTLS_SSL_CLI_C
				26791	requires_config_enabled MBEDTLS_DEBUG_C
				26792	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26793	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26794	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> ffdhe6144" \
				26795	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26796	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe6144" \
				26797	0 \
				26798	-s "Protocol is TLSv1.3" \
				26799	-s "got named group: ffdhe6144(0103)" \
				26800	-s "Certificate verification was skipped" \
				26801	-c "Protocol is TLSv1.3" \
				26802	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26803	-c "NamedGroup: ffdhe6144 ( 103 )" \
				26804	-c "Verifying peer X.509 certificate... ok" \
				26805	-s "HRR selected_group: ffdhe6144" \
				26806	-c "received HelloRetryRequest message" \
				26807	-c "selected_group ( 259 )"
				26808
				26809	requires_config_enabled MBEDTLS_SSL_SRV_C
				26810	requires_config_enabled MBEDTLS_DEBUG_C
				26811	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26812	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26813	requires_config_enabled MBEDTLS_SSL_CLI_C
				26814	requires_config_enabled MBEDTLS_DEBUG_C
				26815	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26816	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26817	run_test "TLS 1.3 m->m: HRR ffdhe3072 -> ffdhe8192" \
				26818	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26819	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072,ffdhe8192" \
				26820	0 \
				26821	-s "Protocol is TLSv1.3" \
				26822	-s "got named group: ffdhe8192(0104)" \
				26823	-s "Certificate verification was skipped" \
				26824	-c "Protocol is TLSv1.3" \
				26825	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26826	-c "NamedGroup: ffdhe8192 ( 104 )" \
				26827	-c "Verifying peer X.509 certificate... ok" \
				26828	-s "HRR selected_group: ffdhe8192" \
				26829	-c "received HelloRetryRequest message" \
				26830	-c "selected_group ( 260 )"
				26831
				26832	requires_config_enabled MBEDTLS_SSL_SRV_C
				26833	requires_config_enabled MBEDTLS_DEBUG_C
				26834	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26835	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26836	requires_config_enabled MBEDTLS_SSL_CLI_C
				26837	requires_config_enabled MBEDTLS_DEBUG_C
				26838	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26839	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26840	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> secp256r1" \
				26841	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26842	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp256r1" \
				26843	0 \
				26844	-s "Protocol is TLSv1.3" \
				26845	-s "got named group: secp256r1(0017)" \
				26846	-s "Certificate verification was skipped" \
				26847	-c "Protocol is TLSv1.3" \
				26848	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26849	-c "NamedGroup: secp256r1 ( 17 )" \
				26850	-c "Verifying peer X.509 certificate... ok" \
				26851	-s "HRR selected_group: secp256r1" \
				26852	-c "received HelloRetryRequest message" \
				26853	-c "selected_group ( 23 )"
				26854
				26855	requires_config_enabled MBEDTLS_SSL_SRV_C
				26856	requires_config_enabled MBEDTLS_DEBUG_C
				26857	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26858	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26859	requires_config_enabled MBEDTLS_SSL_CLI_C
				26860	requires_config_enabled MBEDTLS_DEBUG_C
				26861	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26862	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26863	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> secp384r1" \
				26864	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26865	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp384r1" \
				26866	0 \
				26867	-s "Protocol is TLSv1.3" \
				26868	-s "got named group: secp384r1(0018)" \
				26869	-s "Certificate verification was skipped" \
				26870	-c "Protocol is TLSv1.3" \
				26871	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26872	-c "NamedGroup: secp384r1 ( 18 )" \
				26873	-c "Verifying peer X.509 certificate... ok" \
				26874	-s "HRR selected_group: secp384r1" \
				26875	-c "received HelloRetryRequest message" \
				26876	-c "selected_group ( 24 )"
				26877
				26878	requires_config_enabled MBEDTLS_SSL_SRV_C
				26879	requires_config_enabled MBEDTLS_DEBUG_C
				26880	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26881	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26882	requires_config_enabled MBEDTLS_SSL_CLI_C
				26883	requires_config_enabled MBEDTLS_DEBUG_C
				26884	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26885	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26886	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> secp521r1" \
				26887	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26888	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,secp521r1" \
				26889	0 \
				26890	-s "Protocol is TLSv1.3" \
				26891	-s "got named group: secp521r1(0019)" \
				26892	-s "Certificate verification was skipped" \
				26893	-c "Protocol is TLSv1.3" \
				26894	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26895	-c "NamedGroup: secp521r1 ( 19 )" \
				26896	-c "Verifying peer X.509 certificate... ok" \
				26897	-s "HRR selected_group: secp521r1" \
				26898	-c "received HelloRetryRequest message" \
				26899	-c "selected_group ( 25 )"
				26900
				26901	requires_config_enabled MBEDTLS_SSL_SRV_C
				26902	requires_config_enabled MBEDTLS_DEBUG_C
				26903	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26904	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26905	requires_config_enabled MBEDTLS_SSL_CLI_C
				26906	requires_config_enabled MBEDTLS_DEBUG_C
				26907	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26908	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26909	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> x25519" \
				26910	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26911	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,x25519" \
				26912	0 \
				26913	-s "Protocol is TLSv1.3" \
				26914	-s "got named group: x25519(001d)" \
				26915	-s "Certificate verification was skipped" \
				26916	-c "Protocol is TLSv1.3" \
				26917	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26918	-c "NamedGroup: x25519 ( 1d )" \
				26919	-c "Verifying peer X.509 certificate... ok" \
				26920	-s "HRR selected_group: x25519" \
				26921	-c "received HelloRetryRequest message" \
				26922	-c "selected_group ( 29 )"
				26923
				26924	requires_config_enabled MBEDTLS_SSL_SRV_C
				26925	requires_config_enabled MBEDTLS_DEBUG_C
				26926	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26927	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26928	requires_config_enabled MBEDTLS_SSL_CLI_C
				26929	requires_config_enabled MBEDTLS_DEBUG_C
				26930	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26931	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26932	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> x448" \
				26933	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26934	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,x448" \
				26935	0 \
				26936	-s "Protocol is TLSv1.3" \
				26937	-s "got named group: x448(001e)" \
				26938	-s "Certificate verification was skipped" \
				26939	-c "Protocol is TLSv1.3" \
				26940	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26941	-c "NamedGroup: x448 ( 1e )" \
				26942	-c "Verifying peer X.509 certificate... ok" \
				26943	-s "HRR selected_group: x448" \
				26944	-c "received HelloRetryRequest message" \
				26945	-c "selected_group ( 30 )"
				26946
				26947	requires_config_enabled MBEDTLS_SSL_SRV_C
				26948	requires_config_enabled MBEDTLS_DEBUG_C
				26949	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26950	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26951	requires_config_enabled MBEDTLS_SSL_CLI_C
				26952	requires_config_enabled MBEDTLS_DEBUG_C
				26953	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26954	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26955	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> ffdhe2048" \
				26956	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26957	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe2048" \
				26958	0 \
				26959	-s "Protocol is TLSv1.3" \
				26960	-s "got named group: ffdhe2048(0100)" \
				26961	-s "Certificate verification was skipped" \
				26962	-c "Protocol is TLSv1.3" \
				26963	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26964	-c "NamedGroup: ffdhe2048 ( 100 )" \
				26965	-c "Verifying peer X.509 certificate... ok" \
				26966	-s "HRR selected_group: ffdhe2048" \
				26967	-c "received HelloRetryRequest message" \
				26968	-c "selected_group ( 256 )"
				26969
				26970	requires_config_enabled MBEDTLS_SSL_SRV_C
				26971	requires_config_enabled MBEDTLS_DEBUG_C
				26972	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26973	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26974	requires_config_enabled MBEDTLS_SSL_CLI_C
				26975	requires_config_enabled MBEDTLS_DEBUG_C
				26976	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26977	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26978	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> ffdhe3072" \
				26979	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				26980	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe3072" \
				26981	0 \
				26982	-s "Protocol is TLSv1.3" \
				26983	-s "got named group: ffdhe3072(0101)" \
				26984	-s "Certificate verification was skipped" \
				26985	-c "Protocol is TLSv1.3" \
				26986	-c "NamedGroup: ffdhe4096 ( 102 )" \
				26987	-c "NamedGroup: ffdhe3072 ( 101 )" \
				26988	-c "Verifying peer X.509 certificate... ok" \
				26989	-s "HRR selected_group: ffdhe3072" \
				26990	-c "received HelloRetryRequest message" \
				26991	-c "selected_group ( 257 )"
				26992
				26993	requires_config_enabled MBEDTLS_SSL_SRV_C
				26994	requires_config_enabled MBEDTLS_DEBUG_C
				26995	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				26996	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				26997	requires_config_enabled MBEDTLS_SSL_CLI_C
				26998	requires_config_enabled MBEDTLS_DEBUG_C
				26999	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27000	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27001	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> ffdhe6144" \
				27002	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27003	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe6144" \
				27004	0 \
				27005	-s "Protocol is TLSv1.3" \
				27006	-s "got named group: ffdhe6144(0103)" \
				27007	-s "Certificate verification was skipped" \
				27008	-c "Protocol is TLSv1.3" \
				27009	-c "NamedGroup: ffdhe4096 ( 102 )" \
				27010	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27011	-c "Verifying peer X.509 certificate... ok" \
				27012	-s "HRR selected_group: ffdhe6144" \
				27013	-c "received HelloRetryRequest message" \
				27014	-c "selected_group ( 259 )"
				27015
				27016	requires_config_enabled MBEDTLS_SSL_SRV_C
				27017	requires_config_enabled MBEDTLS_DEBUG_C
				27018	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27019	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27020	requires_config_enabled MBEDTLS_SSL_CLI_C
				27021	requires_config_enabled MBEDTLS_DEBUG_C
				27022	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27023	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27024	run_test "TLS 1.3 m->m: HRR ffdhe4096 -> ffdhe8192" \
				27025	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27026	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096,ffdhe8192" \
				27027	0 \
				27028	-s "Protocol is TLSv1.3" \
				27029	-s "got named group: ffdhe8192(0104)" \
				27030	-s "Certificate verification was skipped" \
				27031	-c "Protocol is TLSv1.3" \
				27032	-c "NamedGroup: ffdhe4096 ( 102 )" \
				27033	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27034	-c "Verifying peer X.509 certificate... ok" \
				27035	-s "HRR selected_group: ffdhe8192" \
				27036	-c "received HelloRetryRequest message" \
				27037	-c "selected_group ( 260 )"
				27038
				27039	requires_config_enabled MBEDTLS_SSL_SRV_C
				27040	requires_config_enabled MBEDTLS_DEBUG_C
				27041	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27042	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27043	requires_config_enabled MBEDTLS_SSL_CLI_C
				27044	requires_config_enabled MBEDTLS_DEBUG_C
				27045	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27046	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27047	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> secp256r1" \
				27048	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27049	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp256r1" \
				27050	0 \
				27051	-s "Protocol is TLSv1.3" \
				27052	-s "got named group: secp256r1(0017)" \
				27053	-s "Certificate verification was skipped" \
				27054	-c "Protocol is TLSv1.3" \
				27055	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27056	-c "NamedGroup: secp256r1 ( 17 )" \
				27057	-c "Verifying peer X.509 certificate... ok" \
				27058	-s "HRR selected_group: secp256r1" \
				27059	-c "received HelloRetryRequest message" \
				27060	-c "selected_group ( 23 )"
				27061
				27062	requires_config_enabled MBEDTLS_SSL_SRV_C
				27063	requires_config_enabled MBEDTLS_DEBUG_C
				27064	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27065	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27066	requires_config_enabled MBEDTLS_SSL_CLI_C
				27067	requires_config_enabled MBEDTLS_DEBUG_C
				27068	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27069	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27070	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> secp384r1" \
				27071	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27072	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp384r1" \
				27073	0 \
				27074	-s "Protocol is TLSv1.3" \
				27075	-s "got named group: secp384r1(0018)" \
				27076	-s "Certificate verification was skipped" \
				27077	-c "Protocol is TLSv1.3" \
				27078	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27079	-c "NamedGroup: secp384r1 ( 18 )" \
				27080	-c "Verifying peer X.509 certificate... ok" \
				27081	-s "HRR selected_group: secp384r1" \
				27082	-c "received HelloRetryRequest message" \
				27083	-c "selected_group ( 24 )"
				27084
				27085	requires_config_enabled MBEDTLS_SSL_SRV_C
				27086	requires_config_enabled MBEDTLS_DEBUG_C
				27087	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27088	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27089	requires_config_enabled MBEDTLS_SSL_CLI_C
				27090	requires_config_enabled MBEDTLS_DEBUG_C
				27091	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27092	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27093	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> secp521r1" \
				27094	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27095	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,secp521r1" \
				27096	0 \
				27097	-s "Protocol is TLSv1.3" \
				27098	-s "got named group: secp521r1(0019)" \
				27099	-s "Certificate verification was skipped" \
				27100	-c "Protocol is TLSv1.3" \
				27101	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27102	-c "NamedGroup: secp521r1 ( 19 )" \
				27103	-c "Verifying peer X.509 certificate... ok" \
				27104	-s "HRR selected_group: secp521r1" \
				27105	-c "received HelloRetryRequest message" \
				27106	-c "selected_group ( 25 )"
				27107
				27108	requires_config_enabled MBEDTLS_SSL_SRV_C
				27109	requires_config_enabled MBEDTLS_DEBUG_C
				27110	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27111	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27112	requires_config_enabled MBEDTLS_SSL_CLI_C
				27113	requires_config_enabled MBEDTLS_DEBUG_C
				27114	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27115	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27116	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> x25519" \
				27117	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27118	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,x25519" \
				27119	0 \
				27120	-s "Protocol is TLSv1.3" \
				27121	-s "got named group: x25519(001d)" \
				27122	-s "Certificate verification was skipped" \
				27123	-c "Protocol is TLSv1.3" \
				27124	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27125	-c "NamedGroup: x25519 ( 1d )" \
				27126	-c "Verifying peer X.509 certificate... ok" \
				27127	-s "HRR selected_group: x25519" \
				27128	-c "received HelloRetryRequest message" \
				27129	-c "selected_group ( 29 )"
				27130
				27131	requires_config_enabled MBEDTLS_SSL_SRV_C
				27132	requires_config_enabled MBEDTLS_DEBUG_C
				27133	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27134	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27135	requires_config_enabled MBEDTLS_SSL_CLI_C
				27136	requires_config_enabled MBEDTLS_DEBUG_C
				27137	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27138	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27139	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> x448" \
				27140	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27141	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,x448" \
				27142	0 \
				27143	-s "Protocol is TLSv1.3" \
				27144	-s "got named group: x448(001e)" \
				27145	-s "Certificate verification was skipped" \
				27146	-c "Protocol is TLSv1.3" \
				27147	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27148	-c "NamedGroup: x448 ( 1e )" \
				27149	-c "Verifying peer X.509 certificate... ok" \
				27150	-s "HRR selected_group: x448" \
				27151	-c "received HelloRetryRequest message" \
				27152	-c "selected_group ( 30 )"
				27153
				27154	requires_config_enabled MBEDTLS_SSL_SRV_C
				27155	requires_config_enabled MBEDTLS_DEBUG_C
				27156	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27157	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27158	requires_config_enabled MBEDTLS_SSL_CLI_C
				27159	requires_config_enabled MBEDTLS_DEBUG_C
				27160	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27161	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27162	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> ffdhe2048" \
				27163	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27164	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe2048" \
				27165	0 \
				27166	-s "Protocol is TLSv1.3" \
				27167	-s "got named group: ffdhe2048(0100)" \
				27168	-s "Certificate verification was skipped" \
				27169	-c "Protocol is TLSv1.3" \
				27170	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27171	-c "NamedGroup: ffdhe2048 ( 100 )" \
				27172	-c "Verifying peer X.509 certificate... ok" \
				27173	-s "HRR selected_group: ffdhe2048" \
				27174	-c "received HelloRetryRequest message" \
				27175	-c "selected_group ( 256 )"
				27176
				27177	requires_config_enabled MBEDTLS_SSL_SRV_C
				27178	requires_config_enabled MBEDTLS_DEBUG_C
				27179	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27180	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27181	requires_config_enabled MBEDTLS_SSL_CLI_C
				27182	requires_config_enabled MBEDTLS_DEBUG_C
				27183	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27184	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27185	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> ffdhe3072" \
				27186	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27187	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe3072" \
				27188	0 \
				27189	-s "Protocol is TLSv1.3" \
				27190	-s "got named group: ffdhe3072(0101)" \
				27191	-s "Certificate verification was skipped" \
				27192	-c "Protocol is TLSv1.3" \
				27193	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27194	-c "NamedGroup: ffdhe3072 ( 101 )" \
				27195	-c "Verifying peer X.509 certificate... ok" \
				27196	-s "HRR selected_group: ffdhe3072" \
				27197	-c "received HelloRetryRequest message" \
				27198	-c "selected_group ( 257 )"
				27199
				27200	requires_config_enabled MBEDTLS_SSL_SRV_C
				27201	requires_config_enabled MBEDTLS_DEBUG_C
				27202	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27203	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27204	requires_config_enabled MBEDTLS_SSL_CLI_C
				27205	requires_config_enabled MBEDTLS_DEBUG_C
				27206	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27207	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27208	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> ffdhe4096" \
				27209	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27210	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe4096" \
				27211	0 \
				27212	-s "Protocol is TLSv1.3" \
				27213	-s "got named group: ffdhe4096(0102)" \
				27214	-s "Certificate verification was skipped" \
				27215	-c "Protocol is TLSv1.3" \
				27216	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27217	-c "NamedGroup: ffdhe4096 ( 102 )" \
				27218	-c "Verifying peer X.509 certificate... ok" \
				27219	-s "HRR selected_group: ffdhe4096" \
				27220	-c "received HelloRetryRequest message" \
				27221	-c "selected_group ( 258 )"
				27222
				27223	requires_config_enabled MBEDTLS_SSL_SRV_C
				27224	requires_config_enabled MBEDTLS_DEBUG_C
				27225	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27226	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27227	requires_config_enabled MBEDTLS_SSL_CLI_C
				27228	requires_config_enabled MBEDTLS_DEBUG_C
				27229	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27230	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27231	run_test "TLS 1.3 m->m: HRR ffdhe6144 -> ffdhe8192" \
				27232	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27233	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144,ffdhe8192" \
				27234	0 \
				27235	-s "Protocol is TLSv1.3" \
				27236	-s "got named group: ffdhe8192(0104)" \
				27237	-s "Certificate verification was skipped" \
				27238	-c "Protocol is TLSv1.3" \
				27239	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27240	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27241	-c "Verifying peer X.509 certificate... ok" \
				27242	-s "HRR selected_group: ffdhe8192" \
				27243	-c "received HelloRetryRequest message" \
				27244	-c "selected_group ( 260 )"
				27245
				27246	requires_config_enabled MBEDTLS_SSL_SRV_C
				27247	requires_config_enabled MBEDTLS_DEBUG_C
				27248	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27249	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27250	requires_config_enabled MBEDTLS_SSL_CLI_C
				27251	requires_config_enabled MBEDTLS_DEBUG_C
				27252	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27253	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27254	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> secp256r1" \
				27255	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27256	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp256r1" \
				27257	0 \
				27258	-s "Protocol is TLSv1.3" \
				27259	-s "got named group: secp256r1(0017)" \
				27260	-s "Certificate verification was skipped" \
				27261	-c "Protocol is TLSv1.3" \
				27262	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27263	-c "NamedGroup: secp256r1 ( 17 )" \
				27264	-c "Verifying peer X.509 certificate... ok" \
				27265	-s "HRR selected_group: secp256r1" \
				27266	-c "received HelloRetryRequest message" \
				27267	-c "selected_group ( 23 )"
				27268
				27269	requires_config_enabled MBEDTLS_SSL_SRV_C
				27270	requires_config_enabled MBEDTLS_DEBUG_C
				27271	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27272	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27273	requires_config_enabled MBEDTLS_SSL_CLI_C
				27274	requires_config_enabled MBEDTLS_DEBUG_C
				27275	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27276	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27277	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> secp384r1" \
				27278	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27279	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp384r1" \
				27280	0 \
				27281	-s "Protocol is TLSv1.3" \
				27282	-s "got named group: secp384r1(0018)" \
				27283	-s "Certificate verification was skipped" \
				27284	-c "Protocol is TLSv1.3" \
				27285	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27286	-c "NamedGroup: secp384r1 ( 18 )" \
				27287	-c "Verifying peer X.509 certificate... ok" \
				27288	-s "HRR selected_group: secp384r1" \
				27289	-c "received HelloRetryRequest message" \
				27290	-c "selected_group ( 24 )"
				27291
				27292	requires_config_enabled MBEDTLS_SSL_SRV_C
				27293	requires_config_enabled MBEDTLS_DEBUG_C
				27294	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27295	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27296	requires_config_enabled MBEDTLS_SSL_CLI_C
				27297	requires_config_enabled MBEDTLS_DEBUG_C
				27298	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27299	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27300	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> secp521r1" \
				27301	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27302	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,secp521r1" \
				27303	0 \
				27304	-s "Protocol is TLSv1.3" \
				27305	-s "got named group: secp521r1(0019)" \
				27306	-s "Certificate verification was skipped" \
				27307	-c "Protocol is TLSv1.3" \
				27308	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27309	-c "NamedGroup: secp521r1 ( 19 )" \
				27310	-c "Verifying peer X.509 certificate... ok" \
				27311	-s "HRR selected_group: secp521r1" \
				27312	-c "received HelloRetryRequest message" \
				27313	-c "selected_group ( 25 )"
				27314
				27315	requires_config_enabled MBEDTLS_SSL_SRV_C
				27316	requires_config_enabled MBEDTLS_DEBUG_C
				27317	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27318	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27319	requires_config_enabled MBEDTLS_SSL_CLI_C
				27320	requires_config_enabled MBEDTLS_DEBUG_C
				27321	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27322	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27323	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> x25519" \
				27324	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27325	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,x25519" \
				27326	0 \
				27327	-s "Protocol is TLSv1.3" \
				27328	-s "got named group: x25519(001d)" \
				27329	-s "Certificate verification was skipped" \
				27330	-c "Protocol is TLSv1.3" \
				27331	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27332	-c "NamedGroup: x25519 ( 1d )" \
				27333	-c "Verifying peer X.509 certificate... ok" \
				27334	-s "HRR selected_group: x25519" \
				27335	-c "received HelloRetryRequest message" \
				27336	-c "selected_group ( 29 )"
				27337
				27338	requires_config_enabled MBEDTLS_SSL_SRV_C
				27339	requires_config_enabled MBEDTLS_DEBUG_C
				27340	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27341	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27342	requires_config_enabled MBEDTLS_SSL_CLI_C
				27343	requires_config_enabled MBEDTLS_DEBUG_C
				27344	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27345	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27346	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> x448" \
				27347	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27348	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,x448" \
				27349	0 \
				27350	-s "Protocol is TLSv1.3" \
				27351	-s "got named group: x448(001e)" \
				27352	-s "Certificate verification was skipped" \
				27353	-c "Protocol is TLSv1.3" \
				27354	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27355	-c "NamedGroup: x448 ( 1e )" \
				27356	-c "Verifying peer X.509 certificate... ok" \
				27357	-s "HRR selected_group: x448" \
				27358	-c "received HelloRetryRequest message" \
				27359	-c "selected_group ( 30 )"
				27360
				27361	requires_config_enabled MBEDTLS_SSL_SRV_C
				27362	requires_config_enabled MBEDTLS_DEBUG_C
				27363	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27364	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27365	requires_config_enabled MBEDTLS_SSL_CLI_C
				27366	requires_config_enabled MBEDTLS_DEBUG_C
				27367	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27368	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27369	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> ffdhe2048" \
				27370	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27371	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe2048" \
				27372	0 \
				27373	-s "Protocol is TLSv1.3" \
				27374	-s "got named group: ffdhe2048(0100)" \
				27375	-s "Certificate verification was skipped" \
				27376	-c "Protocol is TLSv1.3" \
				27377	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27378	-c "NamedGroup: ffdhe2048 ( 100 )" \
				27379	-c "Verifying peer X.509 certificate... ok" \
				27380	-s "HRR selected_group: ffdhe2048" \
				27381	-c "received HelloRetryRequest message" \
				27382	-c "selected_group ( 256 )"
				27383
				27384	requires_config_enabled MBEDTLS_SSL_SRV_C
				27385	requires_config_enabled MBEDTLS_DEBUG_C
				27386	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27387	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27388	requires_config_enabled MBEDTLS_SSL_CLI_C
				27389	requires_config_enabled MBEDTLS_DEBUG_C
				27390	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27391	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27392	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> ffdhe3072" \
				27393	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27394	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe3072" \
				27395	0 \
				27396	-s "Protocol is TLSv1.3" \
				27397	-s "got named group: ffdhe3072(0101)" \
				27398	-s "Certificate verification was skipped" \
				27399	-c "Protocol is TLSv1.3" \
				27400	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27401	-c "NamedGroup: ffdhe3072 ( 101 )" \
				27402	-c "Verifying peer X.509 certificate... ok" \
				27403	-s "HRR selected_group: ffdhe3072" \
				27404	-c "received HelloRetryRequest message" \
				27405	-c "selected_group ( 257 )"
				27406
				27407	requires_config_enabled MBEDTLS_SSL_SRV_C
				27408	requires_config_enabled MBEDTLS_DEBUG_C
				27409	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27410	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27411	requires_config_enabled MBEDTLS_SSL_CLI_C
				27412	requires_config_enabled MBEDTLS_DEBUG_C
				27413	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27414	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27415	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> ffdhe4096" \
				27416	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27417	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe4096" \
				27418	0 \
				27419	-s "Protocol is TLSv1.3" \
				27420	-s "got named group: ffdhe4096(0102)" \
				27421	-s "Certificate verification was skipped" \
				27422	-c "Protocol is TLSv1.3" \
				27423	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27424	-c "NamedGroup: ffdhe4096 ( 102 )" \
				27425	-c "Verifying peer X.509 certificate... ok" \
				27426	-s "HRR selected_group: ffdhe4096" \
				27427	-c "received HelloRetryRequest message" \
				27428	-c "selected_group ( 258 )"
				27429
				27430	requires_config_enabled MBEDTLS_SSL_SRV_C
				27431	requires_config_enabled MBEDTLS_DEBUG_C
				27432	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27433	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27434	requires_config_enabled MBEDTLS_SSL_CLI_C
				27435	requires_config_enabled MBEDTLS_DEBUG_C
				27436	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				27437	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				27438	run_test "TLS 1.3 m->m: HRR ffdhe8192 -> ffdhe6144" \
				27439	"$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
				27440	"$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=ffdhe8192,ffdhe6144" \
				27441	0 \
				27442	-s "Protocol is TLSv1.3" \
				27443	-s "got named group: ffdhe6144(0103)" \
				27444	-s "Certificate verification was skipped" \
				27445	-c "Protocol is TLSv1.3" \
				27446	-c "NamedGroup: ffdhe8192 ( 104 )" \
				27447	-c "NamedGroup: ffdhe6144 ( 103 )" \
				27448	-c "Verifying peer X.509 certificate... ok" \
				27449	-s "HRR selected_group: ffdhe6144" \
				27450	-c "received HelloRetryRequest message" \
				27451	-c "selected_group ( 259 )"