Blame - tests/opt-testcases/tls13-kex-modes.sh - mirror/mbed-tls

blob: cb738b88e454b4b928c3bf40375702eeded96492 [file] [log] [blame]

Gilles Peskine	1d6a950	2024-09-13 13:53:50 +0200	[diff] [blame]	1	# Systematic testing of TLS 1.3 key exchange modes.
Jerry Yu	6a9beba	2022-07-31 12:45:25 +0800	[diff] [blame]	2
Jerry Yu	97be6a9	2022-11-09 22:43:31 +0800	[diff] [blame]	3	# DO NOT ADD NEW TEST CASES INTO THIS FILE. The left cases will be generated by
Jerry Yu	616ba75	2022-11-08 21:49:47 +0800	[diff] [blame]	4	# scripts in future(#6280)
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	5
Gilles Peskine	1d6a950	2024-09-13 13:53:50 +0200	[diff] [blame]	6	# Copyright The Mbed TLS Contributors
				7	# SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
				8	#
				9
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	10	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	11	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				12	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				13	requires_config_enabled MBEDTLS_SSL_SRV_C
				14	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	15	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	16	run_test "TLS 1.3: G->m: all/psk, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	17	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	18	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				19	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				20	localhost" \
				21	0 \
				22	-s "found psk key exchange modes extension" \
				23	-s "found pre_shared_key extension" \
				24	-s "Found PSK_EPHEMERAL KEX MODE" \
				25	-s "Found PSK KEX MODE" \
				26	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	27	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	28	-s "key exchange mode: psk$" \
				29	-S "key exchange mode: psk_ephemeral" \
				30	-S "key exchange mode: ephemeral"
				31
				32	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	33	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				34	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				35	requires_config_enabled MBEDTLS_SSL_SRV_C
				36	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	37	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	38	run_test "TLS 1.3: G->m: all/psk, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	39	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	40	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				41	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				42	localhost" \
				43	1 \
				44	-s "found psk key exchange modes extension" \
				45	-s "found pre_shared_key extension" \
				46	-s "Found PSK_EPHEMERAL KEX MODE" \
				47	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	48	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	49	-S "key exchange mode: psk$" \
				50	-S "key exchange mode: psk_ephemeral" \
				51	-S "key exchange mode: ephemeral"
				52
				53	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	54	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				55	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				56	requires_config_enabled MBEDTLS_SSL_SRV_C
				57	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	58	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	59	run_test "TLS 1.3: G->m: all/psk, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	60	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	61	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				62	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				63	localhost" \
				64	1 \
				65	-s "found psk key exchange modes extension" \
				66	-s "found pre_shared_key extension" \
				67	-s "Found PSK_EPHEMERAL KEX MODE" \
				68	-s "Found PSK KEX MODE" \
				69	-s "Invalid binder." \
				70	-S "key exchange mode: psk$" \
				71	-S "key exchange mode: psk_ephemeral" \
				72	-S "key exchange mode: ephemeral"
				73
				74	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	75	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				76	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				77	requires_config_enabled MBEDTLS_SSL_SRV_C
				78	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	79	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	80	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	81	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	82	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				83	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				84	localhost" \
				85	0 \
				86	-s "found psk key exchange modes extension" \
				87	-s "found pre_shared_key extension" \
				88	-S "Found PSK_EPHEMERAL KEX MODE" \
				89	-s "Found PSK KEX MODE" \
				90	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	91	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	92	-s "key exchange mode: psk$" \
				93	-S "key exchange mode: psk_ephemeral" \
				94	-S "key exchange mode: ephemeral"
				95
				96	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	97	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				98	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				99	requires_config_enabled MBEDTLS_SSL_SRV_C
				100	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	101	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	102	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	103	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	104	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				105	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				106	localhost" \
				107	1 \
				108	-s "found psk key exchange modes extension" \
				109	-s "found pre_shared_key extension" \
				110	-S "Found PSK_EPHEMERAL KEX MODE" \
				111	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	112	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	113	-S "key exchange mode: psk$" \
				114	-S "key exchange mode: psk_ephemeral" \
				115	-S "key exchange mode: ephemeral"
				116
				117	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	118	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				119	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				120	requires_config_enabled MBEDTLS_SSL_SRV_C
				121	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	122	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	123	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	124	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	125	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				126	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				127	localhost" \
				128	1 \
				129	-s "found psk key exchange modes extension" \
				130	-s "found pre_shared_key extension" \
				131	-S "Found PSK_EPHEMERAL KEX MODE" \
				132	-s "Found PSK KEX MODE" \
				133	-s "Invalid binder." \
				134	-S "key exchange mode: psk$" \
				135	-S "key exchange mode: psk_ephemeral" \
				136	-S "key exchange mode: ephemeral"
				137
				138	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	139	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				140	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				141	requires_config_enabled MBEDTLS_SSL_SRV_C
				142	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	143	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	144	run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	145	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	146	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				147	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				148	localhost" \
				149	0 \
				150	-s "found psk key exchange modes extension" \
				151	-s "found pre_shared_key extension" \
				152	-s "Found PSK_EPHEMERAL KEX MODE" \
				153	-S "Found PSK KEX MODE" \
				154	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	155	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	156	-S "key exchange mode: psk$" \
				157	-s "key exchange mode: psk_ephemeral" \
				158	-S "key exchange mode: ephemeral"
				159
				160	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	161	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				162	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				163	requires_config_enabled MBEDTLS_SSL_SRV_C
				164	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	165	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	166	run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	167	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	168	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				169	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				170	localhost" \
				171	1 \
				172	-s "found psk key exchange modes extension" \
				173	-s "found pre_shared_key extension" \
				174	-s "Found PSK_EPHEMERAL KEX MODE" \
				175	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	176	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	177	-S "key exchange mode: psk$" \
				178	-S "key exchange mode: psk_ephemeral" \
				179	-S "key exchange mode: ephemeral"
				180
				181	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	182	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				183	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				184	requires_config_enabled MBEDTLS_SSL_SRV_C
				185	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	186	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	187	run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	188	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	189	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				190	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				191	localhost" \
				192	1 \
				193	-s "found psk key exchange modes extension" \
				194	-s "found pre_shared_key extension" \
				195	-s "Found PSK_EPHEMERAL KEX MODE" \
				196	-S "Found PSK KEX MODE" \
				197	-s "Invalid binder." \
				198	-S "key exchange mode: psk$" \
				199	-S "key exchange mode: psk_ephemeral" \
				200	-S "key exchange mode: ephemeral"
				201
				202	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	203	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				204	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				205	requires_config_enabled MBEDTLS_SSL_SRV_C
				206	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	207	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	208	run_test "TLS 1.3: G->m: all/psk_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	209	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	210	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				211	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				212	localhost" \
				213	0 \
				214	-s "found psk key exchange modes extension" \
				215	-s "found pre_shared_key extension" \
				216	-s "Found PSK_EPHEMERAL KEX MODE" \
				217	-s "Found PSK KEX MODE" \
				218	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	219	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	220	-S "key exchange mode: psk$" \
				221	-s "key exchange mode: psk_ephemeral" \
				222	-S "key exchange mode: ephemeral"
				223
				224	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	225	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				226	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				227	requires_config_enabled MBEDTLS_SSL_SRV_C
				228	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	229	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	230	run_test "TLS 1.3: G->m: all/psk_ephemeral, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	231	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	232	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				233	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				234	localhost" \
				235	1 \
				236	-s "found psk key exchange modes extension" \
				237	-s "found pre_shared_key extension" \
				238	-s "Found PSK_EPHEMERAL KEX MODE" \
				239	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	240	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	241	-S "key exchange mode: psk$" \
				242	-S "key exchange mode: psk_ephemeral" \
				243	-S "key exchange mode: ephemeral"
				244
				245	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	246	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				247	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				248	requires_config_enabled MBEDTLS_SSL_SRV_C
				249	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	250	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	251	run_test "TLS 1.3: G->m: all/psk_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	252	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	253	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				254	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				255	localhost" \
				256	1 \
				257	-s "found psk key exchange modes extension" \
				258	-s "found pre_shared_key extension" \
				259	-s "Found PSK_EPHEMERAL KEX MODE" \
				260	-s "Found PSK KEX MODE" \
				261	-s "Invalid binder." \
				262	-S "key exchange mode: psk$" \
				263	-S "key exchange mode: psk_ephemeral" \
				264	-S "key exchange mode: ephemeral"
				265
				266	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	267	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				268	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				269	requires_config_enabled MBEDTLS_SSL_SRV_C
				270	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	271	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	272	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_ephemeral, fail, no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	273	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	274	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				275	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				276	localhost" \
				277	1 \
				278	-s "found psk key exchange modes extension" \
				279	-s "found pre_shared_key extension" \
				280	-S "Found PSK_EPHEMERAL KEX MODE" \
				281	-s "Found PSK KEX MODE" \
				282	-S "key exchange mode: psk$" \
				283	-S "key exchange mode: psk_ephemeral" \
				284	-S "key exchange mode: ephemeral"
				285
				286	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	287	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				288	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				289	requires_config_enabled MBEDTLS_SSL_SRV_C
				290	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	291	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				292	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	293	run_test "TLS 1.3: G->m: ephemeral_all/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	294	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	295	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				296	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				297	localhost" \
				298	0 \
				299	-s "found psk key exchange modes extension" \
				300	-s "found pre_shared_key extension" \
				301	-s "Found PSK_EPHEMERAL KEX MODE" \
				302	-S "Found PSK KEX MODE" \
				303	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	304	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	305	-S "key exchange mode: psk$" \
				306	-s "key exchange mode: psk_ephemeral" \
				307	-S "key exchange mode: ephemeral"
				308
				309	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	310	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				311	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				312	requires_config_enabled MBEDTLS_SSL_SRV_C
				313	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	314	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				315	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	316	run_test "TLS 1.3: G->m: ephemeral_all/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	317	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	318	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				319	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				320	localhost" \
				321	1 \
				322	-s "found psk key exchange modes extension" \
				323	-s "found pre_shared_key extension" \
				324	-s "Found PSK_EPHEMERAL KEX MODE" \
				325	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	326	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	327	-S "key exchange mode: psk$" \
				328	-S "key exchange mode: psk_ephemeral" \
				329	-S "key exchange mode: ephemeral"
				330
				331	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	332	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				333	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				334	requires_config_enabled MBEDTLS_SSL_SRV_C
				335	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	336	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				337	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	338	run_test "TLS 1.3: G->m: ephemeral_all/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	339	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	340	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				341	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				342	localhost" \
				343	1 \
				344	-s "found psk key exchange modes extension" \
				345	-s "found pre_shared_key extension" \
				346	-s "Found PSK_EPHEMERAL KEX MODE" \
				347	-S "Found PSK KEX MODE" \
				348	-s "Invalid binder." \
				349	-S "key exchange mode: psk$" \
				350	-S "key exchange mode: psk_ephemeral" \
				351	-S "key exchange mode: ephemeral"
				352
				353	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	354	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				355	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				356	requires_config_enabled MBEDTLS_SSL_SRV_C
				357	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	358	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				359	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	360	run_test "TLS 1.3: G->m: all/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	361	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	362	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				363	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				364	localhost" \
				365	0 \
				366	-s "found psk key exchange modes extension" \
				367	-s "found pre_shared_key extension" \
				368	-s "Found PSK_EPHEMERAL KEX MODE" \
				369	-s "Found PSK KEX MODE" \
				370	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	371	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	372	-S "key exchange mode: psk$" \
				373	-s "key exchange mode: psk_ephemeral" \
				374	-S "key exchange mode: ephemeral"
				375
				376	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	377	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				378	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				379	requires_config_enabled MBEDTLS_SSL_SRV_C
				380	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	381	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				382	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	383	run_test "TLS 1.3: G->m: all/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	384	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	385	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				386	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				387	localhost" \
				388	1 \
				389	-s "found psk key exchange modes extension" \
				390	-s "found pre_shared_key extension" \
				391	-s "Found PSK_EPHEMERAL KEX MODE" \
				392	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	393	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	394	-S "key exchange mode: psk$" \
				395	-S "key exchange mode: psk_ephemeral" \
				396	-S "key exchange mode: ephemeral"
				397
				398	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	399	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				400	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				401	requires_config_enabled MBEDTLS_SSL_SRV_C
				402	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	403	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				404	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	405	run_test "TLS 1.3: G->m: all/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	406	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	407	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				408	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				409	localhost" \
				410	1 \
				411	-s "found psk key exchange modes extension" \
				412	-s "found pre_shared_key extension" \
				413	-s "Found PSK_EPHEMERAL KEX MODE" \
				414	-s "Found PSK KEX MODE" \
				415	-s "Invalid binder." \
				416	-S "key exchange mode: psk$" \
				417	-S "key exchange mode: psk_ephemeral" \
				418	-S "key exchange mode: ephemeral"
				419
				420	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	421	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				422	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				423	requires_config_enabled MBEDTLS_SSL_SRV_C
				424	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	425	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				426	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	427	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	428	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	429	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				430	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				431	localhost" \
				432	0 \
				433	-s "found psk key exchange modes extension" \
				434	-s "found pre_shared_key extension" \
				435	-S "Found PSK_EPHEMERAL KEX MODE" \
				436	-s "Found PSK KEX MODE" \
				437	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	438	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	439	-s "key exchange mode: psk$" \
				440	-S "key exchange mode: psk_ephemeral" \
				441	-S "key exchange mode: ephemeral"
				442
				443	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	444	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				445	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				446	requires_config_enabled MBEDTLS_SSL_SRV_C
				447	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	448	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				449	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	450	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	451	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	452	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				453	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				454	localhost" \
				455	1 \
				456	-s "found psk key exchange modes extension" \
				457	-s "found pre_shared_key extension" \
				458	-S "Found PSK_EPHEMERAL KEX MODE" \
				459	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	460	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	461	-S "key exchange mode: psk$" \
				462	-S "key exchange mode: psk_ephemeral" \
				463	-S "key exchange mode: ephemeral"
				464
				465	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	466	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				467	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				468	requires_config_enabled MBEDTLS_SSL_SRV_C
				469	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	470	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				471	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	472	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	473	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	474	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				475	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				476	localhost" \
				477	1 \
				478	-s "found psk key exchange modes extension" \
				479	-s "found pre_shared_key extension" \
				480	-S "Found PSK_EPHEMERAL KEX MODE" \
				481	-s "Found PSK KEX MODE" \
				482	-s "Invalid binder." \
				483	-S "key exchange mode: psk$" \
				484	-S "key exchange mode: psk_ephemeral" \
				485	-S "key exchange mode: ephemeral"
				486
				487	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	488	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				489	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				490	requires_config_enabled MBEDTLS_SSL_SRV_C
				491	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	492	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				493	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	494	run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	495	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	496	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				497	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				498	localhost" \
				499	0 \
				500	-s "found psk key exchange modes extension" \
				501	-s "found pre_shared_key extension" \
				502	-s "Found PSK_EPHEMERAL KEX MODE" \
				503	-S "Found PSK KEX MODE" \
				504	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	505	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	506	-S "key exchange mode: psk$" \
				507	-s "key exchange mode: psk_ephemeral" \
				508	-S "key exchange mode: ephemeral"
				509
				510	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	511	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				512	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				513	requires_config_enabled MBEDTLS_SSL_SRV_C
				514	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	515	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				516	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	517	run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, good, key id mismatch, dhe." \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	518	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	519	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				520	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				521	localhost" \
				522	0 \
				523	-s "found psk key exchange modes extension" \
				524	-s "found pre_shared_key extension" \
				525	-s "Found PSK_EPHEMERAL KEX MODE" \
				526	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	527	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	528	-S "key exchange mode: psk$" \
				529	-S "key exchange mode: psk_ephemeral" \
				530	-s "key exchange mode: ephemeral"
				531
				532	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	533	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				534	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				535	requires_config_enabled MBEDTLS_SSL_SRV_C
				536	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	537	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				538	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	539	run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	540	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	541	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				542	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				543	localhost" \
				544	1 \
				545	-s "found psk key exchange modes extension" \
				546	-s "found pre_shared_key extension" \
				547	-s "Found PSK_EPHEMERAL KEX MODE" \
				548	-S "Found PSK KEX MODE" \
				549	-s "Invalid binder." \
				550	-S "key exchange mode: psk$" \
				551	-S "key exchange mode: psk_ephemeral" \
				552	-S "key exchange mode: ephemeral"
				553
				554	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	555	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				556	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				557	requires_config_enabled MBEDTLS_SSL_SRV_C
				558	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	559	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				560	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	561	run_test "TLS 1.3: G->m: all/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	562	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	563	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				564	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				565	localhost" \
				566	0 \
				567	-s "found psk key exchange modes extension" \
				568	-s "found pre_shared_key extension" \
				569	-s "Found PSK_EPHEMERAL KEX MODE" \
				570	-s "Found PSK KEX MODE" \
				571	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	572	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	573	-S "key exchange mode: psk$" \
				574	-s "key exchange mode: psk_ephemeral" \
				575	-S "key exchange mode: ephemeral"
				576
				577	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	578	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				579	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				580	requires_config_enabled MBEDTLS_SSL_SRV_C
				581	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	582	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				583	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	584	run_test "TLS 1.3: G->m: all/ephemeral_all, good, key id mismatch, dhe." \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	585	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	586	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				587	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				588	localhost" \
				589	0 \
				590	-s "found psk key exchange modes extension" \
				591	-s "found pre_shared_key extension" \
				592	-s "Found PSK_EPHEMERAL KEX MODE" \
				593	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	594	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	595	-S "key exchange mode: psk$" \
				596	-S "key exchange mode: psk_ephemeral" \
				597	-s "key exchange mode: ephemeral"
				598
				599	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	600	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				601	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				602	requires_config_enabled MBEDTLS_SSL_SRV_C
				603	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	604	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				605	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	606	run_test "TLS 1.3: G->m: all/ephemeral_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	607	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	608	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				609	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				610	localhost" \
				611	1 \
				612	-s "found psk key exchange modes extension" \
				613	-s "found pre_shared_key extension" \
				614	-s "Found PSK_EPHEMERAL KEX MODE" \
				615	-s "Found PSK KEX MODE" \
				616	-s "Invalid binder." \
				617	-S "key exchange mode: psk$" \
				618	-S "key exchange mode: psk_ephemeral" \
				619	-S "key exchange mode: ephemeral"
				620
				621	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	622	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				623	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				624	requires_config_enabled MBEDTLS_SSL_SRV_C
				625	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	626	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				627	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	628	run_test "TLS 1.3: G->m: psk_or_ephemeral/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	629	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	630	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				631	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				632	localhost" \
				633	0 \
				634	-s "found psk key exchange modes extension" \
				635	-s "found pre_shared_key extension" \
				636	-S "Found PSK_EPHEMERAL KEX MODE" \
				637	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	638	-s "No suitable PSK key exchange mode" \
				639	-S "Pre shared key found" \
				640	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	641	-S "key exchange mode: psk$" \
				642	-S "key exchange mode: psk_ephemeral" \
				643	-s "key exchange mode: ephemeral"
				644
				645	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	646	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				647	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				648	requires_config_enabled MBEDTLS_SSL_SRV_C
				649	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	650	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				651	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				652	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	653	run_test "TLS 1.3: G->m: ephemeral_all/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	654	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	655	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				656	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				657	localhost" \
				658	0 \
				659	-s "found psk key exchange modes extension" \
				660	-s "found pre_shared_key extension" \
				661	-s "Found PSK_EPHEMERAL KEX MODE" \
				662	-S "Found PSK KEX MODE" \
				663	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	664	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	665	-S "key exchange mode: psk$" \
				666	-s "key exchange mode: psk_ephemeral" \
				667	-S "key exchange mode: ephemeral"
				668
				669	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	670	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				671	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				672	requires_config_enabled MBEDTLS_SSL_SRV_C
				673	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	674	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				675	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				676	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	677	run_test "TLS 1.3: G->m: ephemeral_all/all, good, key id mismatch, dhe." \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	678	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	679	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				680	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				681	localhost" \
				682	0 \
				683	-s "found psk key exchange modes extension" \
				684	-s "found pre_shared_key extension" \
				685	-s "Found PSK_EPHEMERAL KEX MODE" \
				686	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	687	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	688	-S "key exchange mode: psk$" \
				689	-S "key exchange mode: psk_ephemeral" \
				690	-s "key exchange mode: ephemeral"
				691
				692	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	693	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				694	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				695	requires_config_enabled MBEDTLS_SSL_SRV_C
				696	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	697	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				698	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				699	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	700	run_test "TLS 1.3: G->m: ephemeral_all/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	701	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	702	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				703	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				704	localhost" \
				705	1 \
				706	-s "found psk key exchange modes extension" \
				707	-s "found pre_shared_key extension" \
				708	-s "Found PSK_EPHEMERAL KEX MODE" \
				709	-S "Found PSK KEX MODE" \
				710	-s "Invalid binder." \
				711	-S "key exchange mode: psk$" \
				712	-S "key exchange mode: psk_ephemeral" \
				713	-S "key exchange mode: ephemeral"
				714
				715	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	716	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				717	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				718	requires_config_enabled MBEDTLS_SSL_SRV_C
				719	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	720	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				721	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				722	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	723	run_test "TLS 1.3: G->m: all/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	724	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	725	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				726	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				727	localhost" \
				728	0 \
				729	-s "found psk key exchange modes extension" \
				730	-s "found pre_shared_key extension" \
				731	-s "Found PSK_EPHEMERAL KEX MODE" \
				732	-s "Found PSK KEX MODE" \
				733	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	734	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	735	-S "key exchange mode: psk$" \
				736	-s "key exchange mode: psk_ephemeral" \
				737	-S "key exchange mode: ephemeral"
				738
				739	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	740	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				741	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				742	requires_config_enabled MBEDTLS_SSL_SRV_C
				743	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	744	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				745	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				746	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	747	run_test "TLS 1.3: G->m: all/all, good, key id mismatch, dhe." \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	748	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	749	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				750	--pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				751	localhost" \
				752	0 \
				753	-s "found psk key exchange modes extension" \
				754	-s "found pre_shared_key extension" \
				755	-s "Found PSK_EPHEMERAL KEX MODE" \
				756	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	757	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	758	-S "key exchange mode: psk$" \
				759	-S "key exchange mode: psk_ephemeral" \
				760	-s "key exchange mode: ephemeral"
				761
				762	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	763	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				764	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				765	requires_config_enabled MBEDTLS_SSL_SRV_C
				766	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	767	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				768	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				769	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	770	run_test "TLS 1.3: G->m: all/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	771	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	772	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				773	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				774	localhost" \
				775	1 \
				776	-s "found psk key exchange modes extension" \
				777	-s "found pre_shared_key extension" \
				778	-s "Found PSK_EPHEMERAL KEX MODE" \
				779	-s "Found PSK KEX MODE" \
				780	-s "Invalid binder." \
				781	-S "key exchange mode: psk$" \
				782	-S "key exchange mode: psk_ephemeral" \
				783	-S "key exchange mode: ephemeral"
				784
				785	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	786	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				787	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				788	requires_config_enabled MBEDTLS_SSL_SRV_C
				789	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	790	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				791	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				792	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	793	run_test "TLS 1.3: G->m: psk_or_ephemeral/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	794	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	795	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				796	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				797	localhost" \
				798	0 \
				799	-s "found psk key exchange modes extension" \
				800	-s "found pre_shared_key extension" \
				801	-S "Found PSK_EPHEMERAL KEX MODE" \
				802	-s "Found PSK KEX MODE" \
				803	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	804	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	805	-S "key exchange mode: psk$" \
				806	-S "key exchange mode: psk_ephemeral" \
				807	-s "key exchange mode: ephemeral"
				808
				809	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	810	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				811	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				812	requires_config_enabled MBEDTLS_SSL_SRV_C
				813	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	814	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				815	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				816	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	817	run_test "TLS 1.3: G->m: psk_or_ephemeral/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	818	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	819	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				820	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				821	localhost" \
				822	1 \
				823	-s "found psk key exchange modes extension" \
				824	-s "found pre_shared_key extension" \
				825	-S "Found PSK_EPHEMERAL KEX MODE" \
				826	-s "Found PSK KEX MODE" \
				827	-s "Invalid binder." \
				828	-S "key exchange mode: psk$" \
				829	-S "key exchange mode: psk_ephemeral" \
				830	-S "key exchange mode: ephemeral"
				831
				832	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	833	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				834	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				835	requires_config_enabled MBEDTLS_SSL_SRV_C
				836	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	837	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				838	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	839	run_test "TLS 1.3: G->m: ephemeral_all/psk_or_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	840	"$P_SRV tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	841	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
				842	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				843	localhost" \
				844	0 \
				845	-s "found psk key exchange modes extension" \
				846	-s "found pre_shared_key extension" \
				847	-s "Found PSK_EPHEMERAL KEX MODE" \
				848	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	849	-s "No suitable PSK key exchange mode" \
				850	-S "Pre shared key found" \
				851	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	852	-S "key exchange mode: psk$" \
				853	-S "key exchange mode: psk_ephemeral" \
				854	-s "key exchange mode: ephemeral"
				855
				856	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	857	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				858	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				859	requires_config_enabled MBEDTLS_SSL_SRV_C
				860	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	861	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				862	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	863	run_test "TLS 1.3: G->m: all/psk_or_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	864	"$P_SRV tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	865	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				866	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				867	localhost" \
				868	0 \
				869	-s "found psk key exchange modes extension" \
				870	-s "found pre_shared_key extension" \
				871	-s "Found PSK_EPHEMERAL KEX MODE" \
				872	-s "Found PSK KEX MODE" \
				873	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	874	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	875	-S "key exchange mode: psk$" \
				876	-S "key exchange mode: psk_ephemeral" \
				877	-s "key exchange mode: ephemeral"
				878
				879	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	880	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				881	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				882	requires_config_enabled MBEDTLS_SSL_SRV_C
				883	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	884	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				885	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	886	run_test "TLS 1.3: G->m: all/psk_or_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	887	"$P_SRV tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	888	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
				889	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				890	localhost" \
				891	1 \
				892	-s "found psk key exchange modes extension" \
				893	-s "found pre_shared_key extension" \
				894	-s "Found PSK_EPHEMERAL KEX MODE" \
				895	-s "Found PSK KEX MODE" \
				896	-s "Invalid binder." \
				897	-S "key exchange mode: psk$" \
				898	-S "key exchange mode: psk_ephemeral" \
				899	-S "key exchange mode: ephemeral"
				900
				901	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	902	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				903	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				904	requires_config_enabled MBEDTLS_SSL_SRV_C
				905	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	906	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				907	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	908	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	909	"$P_SRV tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	910	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				911	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				912	localhost" \
				913	0 \
				914	-s "found psk key exchange modes extension" \
				915	-s "found pre_shared_key extension" \
				916	-S "Found PSK_EPHEMERAL KEX MODE" \
				917	-s "Found PSK KEX MODE" \
				918	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	919	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	920	-S "key exchange mode: psk$" \
				921	-S "key exchange mode: psk_ephemeral" \
				922	-s "key exchange mode: ephemeral"
				923
				924	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	925	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				926	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				927	requires_config_enabled MBEDTLS_SSL_SRV_C
				928	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	929	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				930	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu	6688669	2022-08-31 17:08:34 +0800	[diff] [blame]	931	run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	932	"$P_SRV tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	933	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
				934	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
				935	localhost" \
				936	1 \
				937	-s "found psk key exchange modes extension" \
				938	-s "found pre_shared_key extension" \
				939	-S "Found PSK_EPHEMERAL KEX MODE" \
				940	-s "Found PSK KEX MODE" \
				941	-s "Invalid binder." \
				942	-S "key exchange mode: psk$" \
				943	-S "key exchange mode: psk_ephemeral" \
				944	-S "key exchange mode: ephemeral"
				945
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	946	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	947	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				948	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				949	requires_config_enabled MBEDTLS_SSL_SRV_C
				950	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	951	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Przemek Stekiel	c31a798	2023-06-27 10:53:33 +0200	[diff] [blame]	952	requires_config_enabled PSA_WANT_ALG_ECDH
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	953	run_test "TLS 1.3: G->m: psk_ephemeral group(secp256r1) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	954	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	955	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP256R1 \
				956	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				957	localhost" \
				958	0 \
				959	-s "write selected_group: secp256r1" \
				960	-S "key exchange mode: psk$" \
				961	-s "key exchange mode: psk_ephemeral" \
				962	-S "key exchange mode: ephemeral"
				963
				964	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	965	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				966	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				967	requires_config_enabled MBEDTLS_SSL_SRV_C
				968	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	969	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Przemek Stekiel	c31a798	2023-06-27 10:53:33 +0200	[diff] [blame]	970	requires_config_enabled PSA_WANT_ALG_ECDH
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	971	run_test "TLS 1.3: G->m: psk_ephemeral group(secp384r1) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	972	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	973	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP384R1 \
				974	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				975	localhost" \
				976	0 \
				977	-s "write selected_group: secp384r1" \
				978	-S "key exchange mode: psk$" \
				979	-s "key exchange mode: psk_ephemeral" \
				980	-S "key exchange mode: ephemeral"
				981
				982	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	983	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				984	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				985	requires_config_enabled MBEDTLS_SSL_SRV_C
				986	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	987	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Przemek Stekiel	c31a798	2023-06-27 10:53:33 +0200	[diff] [blame]	988	requires_config_enabled PSA_WANT_ALG_ECDH
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	989	run_test "TLS 1.3: G->m: psk_ephemeral group(secp521r1) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	990	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	991	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP521R1 \
				992	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				993	localhost" \
				994	0 \
				995	-s "write selected_group: secp521r1" \
				996	-S "key exchange mode: psk$" \
				997	-s "key exchange mode: psk_ephemeral" \
				998	-S "key exchange mode: ephemeral"
				999
				1000	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1001	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1002	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1003	requires_config_enabled MBEDTLS_SSL_SRV_C
				1004	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1005	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Przemek Stekiel	c31a798	2023-06-27 10:53:33 +0200	[diff] [blame]	1006	requires_config_enabled PSA_WANT_ALG_ECDH
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1007	run_test "TLS 1.3: G->m: psk_ephemeral group(x25519) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1008	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1009	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-X25519 \
				1010	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				1011	localhost" \
				1012	0 \
				1013	-s "write selected_group: x25519" \
				1014	-S "key exchange mode: psk$" \
				1015	-s "key exchange mode: psk_ephemeral" \
				1016	-S "key exchange mode: ephemeral"
				1017
				1018	requires_gnutls_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1019	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1020	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1021	requires_config_enabled MBEDTLS_SSL_SRV_C
				1022	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1023	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Przemek Stekiel	c31a798	2023-06-27 10:53:33 +0200	[diff] [blame]	1024	requires_config_enabled PSA_WANT_ALG_ECDH
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1025	run_test "TLS 1.3: G->m: psk_ephemeral group(x448) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1026	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1027	"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-X448 \
				1028	--pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
				1029	localhost" \
				1030	0 \
				1031	-s "write selected_group: x448" \
				1032	-S "key exchange mode: psk$" \
				1033	-s "key exchange mode: psk_ephemeral" \
				1034	-S "key exchange mode: ephemeral"
				1035
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1036	requires_openssl_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1037	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1038	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1039	requires_config_enabled MBEDTLS_SSL_SRV_C
				1040	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1041	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1042	run_test "TLS 1.3: O->m: ephemeral_all/psk, fail, no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1043	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1044	"$O_NEXT_CLI -tls1_3 -msg \
				1045	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1046	1 \
				1047	-s "found psk key exchange modes extension" \
				1048	-s "found pre_shared_key extension" \
				1049	-s "Found PSK_EPHEMERAL KEX MODE" \
				1050	-S "Found PSK KEX MODE" \
				1051	-S "key exchange mode: psk$" \
				1052	-S "key exchange mode: psk_ephemeral" \
				1053	-S "key exchange mode: ephemeral"
				1054
				1055	requires_openssl_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1056	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1057	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1058	requires_config_enabled MBEDTLS_SSL_SRV_C
				1059	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1060	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1061	run_test "TLS 1.3: O->m: all/psk, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1062	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1063	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1064	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1065	0 \
				1066	-s "found psk key exchange modes extension" \
				1067	-s "found pre_shared_key extension" \
				1068	-s "Found PSK_EPHEMERAL KEX MODE" \
				1069	-s "Found PSK KEX MODE" \
				1070	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1071	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1072	-s "key exchange mode: psk$" \
				1073	-S "key exchange mode: psk_ephemeral" \
				1074	-S "key exchange mode: ephemeral"
				1075
				1076	requires_openssl_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1077	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1078	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1079	requires_config_enabled MBEDTLS_SSL_SRV_C
				1080	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1081	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1082	run_test "TLS 1.3: O->m: all/psk, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1083	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1084	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1085	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1086	1 \
				1087	-s "found psk key exchange modes extension" \
				1088	-s "found pre_shared_key extension" \
				1089	-s "Found PSK_EPHEMERAL KEX MODE" \
				1090	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1091	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1092	-S "key exchange mode: psk$" \
				1093	-S "key exchange mode: psk_ephemeral" \
				1094	-S "key exchange mode: ephemeral"
				1095
				1096	requires_openssl_tls1_3
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1097	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1098	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1099	requires_config_enabled MBEDTLS_SSL_SRV_C
				1100	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1101	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1102	run_test "TLS 1.3: O->m: all/psk, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1103	"$P_SRV tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1104	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1105	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1106	1 \
				1107	-s "found psk key exchange modes extension" \
				1108	-s "found pre_shared_key extension" \
				1109	-s "Found PSK_EPHEMERAL KEX MODE" \
				1110	-s "Found PSK KEX MODE" \
				1111	-s "Invalid binder." \
				1112	-S "key exchange mode: psk$" \
				1113	-S "key exchange mode: psk_ephemeral" \
				1114	-S "key exchange mode: ephemeral"
				1115
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1116	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1117	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1118	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1119	requires_config_enabled MBEDTLS_SSL_SRV_C
				1120	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1121	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1122	run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1123	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1124	"$O_NEXT_CLI -tls1_3 -msg \
				1125	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1126	0 \
				1127	-s "found psk key exchange modes extension" \
				1128	-s "found pre_shared_key extension" \
				1129	-s "Found PSK_EPHEMERAL KEX MODE" \
				1130	-S "Found PSK KEX MODE" \
				1131	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1132	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1133	-S "key exchange mode: psk$" \
				1134	-s "key exchange mode: psk_ephemeral" \
				1135	-S "key exchange mode: ephemeral"
				1136
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1137	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1138	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1139	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1140	requires_config_enabled MBEDTLS_SSL_SRV_C
				1141	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1142	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1143	run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1144	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1145	"$O_NEXT_CLI -tls1_3 -msg \
				1146	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1147	1 \
				1148	-s "found psk key exchange modes extension" \
				1149	-s "found pre_shared_key extension" \
				1150	-s "Found PSK_EPHEMERAL KEX MODE" \
				1151	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1152	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1153	-S "key exchange mode: psk$" \
				1154	-S "key exchange mode: psk_ephemeral" \
				1155	-S "key exchange mode: ephemeral"
				1156
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1157	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1158	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1159	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1160	requires_config_enabled MBEDTLS_SSL_SRV_C
				1161	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1162	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1163	run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1164	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1165	"$O_NEXT_CLI -tls1_3 -msg \
				1166	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1167	1 \
				1168	-s "found psk key exchange modes extension" \
				1169	-s "found pre_shared_key extension" \
				1170	-s "Found PSK_EPHEMERAL KEX MODE" \
				1171	-S "Found PSK KEX MODE" \
				1172	-s "Invalid binder." \
				1173	-S "key exchange mode: psk$" \
				1174	-S "key exchange mode: psk_ephemeral" \
				1175	-S "key exchange mode: ephemeral"
				1176
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1177	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1178	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1179	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1180	requires_config_enabled MBEDTLS_SSL_SRV_C
				1181	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1182	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1183	run_test "TLS 1.3: O->m: all/psk_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1184	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1185	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1186	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1187	0 \
				1188	-s "found psk key exchange modes extension" \
				1189	-s "found pre_shared_key extension" \
				1190	-s "Found PSK_EPHEMERAL KEX MODE" \
				1191	-s "Found PSK KEX MODE" \
				1192	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1193	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1194	-S "key exchange mode: psk$" \
				1195	-s "key exchange mode: psk_ephemeral" \
				1196	-S "key exchange mode: ephemeral"
				1197
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1198	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1199	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1200	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1201	requires_config_enabled MBEDTLS_SSL_SRV_C
				1202	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1203	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1204	run_test "TLS 1.3: O->m: all/psk_ephemeral, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1205	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1206	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1207	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1208	1 \
				1209	-s "found psk key exchange modes extension" \
				1210	-s "found pre_shared_key extension" \
				1211	-s "Found PSK_EPHEMERAL KEX MODE" \
				1212	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1213	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1214	-S "key exchange mode: psk$" \
				1215	-S "key exchange mode: psk_ephemeral" \
				1216	-S "key exchange mode: ephemeral"
				1217
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1218	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1219	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1220	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1221	requires_config_enabled MBEDTLS_SSL_SRV_C
				1222	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1223	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1224	run_test "TLS 1.3: O->m: all/psk_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1225	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1226	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1227	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1228	1 \
				1229	-s "found psk key exchange modes extension" \
				1230	-s "found pre_shared_key extension" \
				1231	-s "Found PSK_EPHEMERAL KEX MODE" \
				1232	-s "Found PSK KEX MODE" \
				1233	-s "Invalid binder." \
				1234	-S "key exchange mode: psk$" \
				1235	-S "key exchange mode: psk_ephemeral" \
				1236	-S "key exchange mode: ephemeral"
				1237
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1238	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1239	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1240	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1241	requires_config_enabled MBEDTLS_SSL_SRV_C
				1242	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1243	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1244	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1245	run_test "TLS 1.3: O->m: ephemeral_all/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1246	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1247	"$O_NEXT_CLI -tls1_3 -msg \
				1248	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1249	0 \
				1250	-s "found psk key exchange modes extension" \
				1251	-s "found pre_shared_key extension" \
				1252	-s "Found PSK_EPHEMERAL KEX MODE" \
				1253	-S "Found PSK KEX MODE" \
				1254	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1255	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1256	-S "key exchange mode: psk$" \
				1257	-s "key exchange mode: psk_ephemeral" \
				1258	-S "key exchange mode: ephemeral"
				1259
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1260	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1261	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1262	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1263	requires_config_enabled MBEDTLS_SSL_SRV_C
				1264	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1265	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1266	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1267	run_test "TLS 1.3: O->m: ephemeral_all/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1268	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1269	"$O_NEXT_CLI -tls1_3 -msg \
				1270	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1271	1 \
				1272	-s "found psk key exchange modes extension" \
				1273	-s "found pre_shared_key extension" \
				1274	-s "Found PSK_EPHEMERAL KEX MODE" \
				1275	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1276	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1277	-S "key exchange mode: psk$" \
				1278	-S "key exchange mode: psk_ephemeral" \
				1279	-S "key exchange mode: ephemeral"
				1280
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1281	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1282	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1283	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1284	requires_config_enabled MBEDTLS_SSL_SRV_C
				1285	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1286	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1287	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1288	run_test "TLS 1.3: O->m: ephemeral_all/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1289	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1290	"$O_NEXT_CLI -tls1_3 -msg \
				1291	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1292	1 \
				1293	-s "found psk key exchange modes extension" \
				1294	-s "found pre_shared_key extension" \
				1295	-s "Found PSK_EPHEMERAL KEX MODE" \
				1296	-S "Found PSK KEX MODE" \
				1297	-s "Invalid binder." \
				1298	-S "key exchange mode: psk$" \
				1299	-S "key exchange mode: psk_ephemeral" \
				1300	-S "key exchange mode: ephemeral"
				1301
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1302	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1303	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1304	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1305	requires_config_enabled MBEDTLS_SSL_SRV_C
				1306	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1307	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1308	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1309	run_test "TLS 1.3: O->m: all/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1310	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1311	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1312	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1313	0 \
				1314	-s "found psk key exchange modes extension" \
				1315	-s "found pre_shared_key extension" \
				1316	-s "Found PSK_EPHEMERAL KEX MODE" \
				1317	-s "Found PSK KEX MODE" \
				1318	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1319	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1320	-S "key exchange mode: psk$" \
				1321	-s "key exchange mode: psk_ephemeral" \
				1322	-S "key exchange mode: ephemeral"
				1323
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1324	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1325	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1326	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1327	requires_config_enabled MBEDTLS_SSL_SRV_C
				1328	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1329	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1330	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1331	run_test "TLS 1.3: O->m: all/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1332	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1333	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1334	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1335	1 \
				1336	-s "found psk key exchange modes extension" \
				1337	-s "found pre_shared_key extension" \
				1338	-s "Found PSK_EPHEMERAL KEX MODE" \
				1339	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1340	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1341	-S "key exchange mode: psk$" \
				1342	-S "key exchange mode: psk_ephemeral" \
				1343	-S "key exchange mode: ephemeral"
				1344
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1345	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1346	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1347	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1348	requires_config_enabled MBEDTLS_SSL_SRV_C
				1349	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1350	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1351	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1352	run_test "TLS 1.3: O->m: all/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1353	"$P_SRV tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1354	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1355	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1356	1 \
				1357	-s "found psk key exchange modes extension" \
				1358	-s "found pre_shared_key extension" \
				1359	-s "Found PSK_EPHEMERAL KEX MODE" \
				1360	-s "Found PSK KEX MODE" \
				1361	-s "Invalid binder." \
				1362	-S "key exchange mode: psk$" \
				1363	-S "key exchange mode: psk_ephemeral" \
				1364	-S "key exchange mode: ephemeral"
				1365
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1366	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1367	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1368	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1369	requires_config_enabled MBEDTLS_SSL_SRV_C
				1370	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1371	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1372	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1373	run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1374	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1375	"$O_NEXT_CLI -tls1_3 -msg \
				1376	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1377	0 \
				1378	-s "found psk key exchange modes extension" \
				1379	-s "found pre_shared_key extension" \
				1380	-s "Found PSK_EPHEMERAL KEX MODE" \
				1381	-S "Found PSK KEX MODE" \
				1382	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1383	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1384	-S "key exchange mode: psk$" \
				1385	-s "key exchange mode: psk_ephemeral" \
				1386	-S "key exchange mode: ephemeral"
				1387
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1388	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1389	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1390	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1391	requires_config_enabled MBEDTLS_SSL_SRV_C
				1392	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1393	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1394	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1395	run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, good, key id mismatch, dhe." \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1396	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1397	"$O_NEXT_CLI -tls1_3 -msg \
				1398	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1399	0 \
				1400	-s "found psk key exchange modes extension" \
				1401	-s "found pre_shared_key extension" \
				1402	-s "Found PSK_EPHEMERAL KEX MODE" \
				1403	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1404	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1405	-S "key exchange mode: psk$" \
				1406	-S "key exchange mode: psk_ephemeral" \
				1407	-s "key exchange mode: ephemeral"
				1408
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1409	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1410	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1411	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1412	requires_config_enabled MBEDTLS_SSL_SRV_C
				1413	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1414	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1415	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1416	run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1417	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1418	"$O_NEXT_CLI -tls1_3 -msg \
				1419	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1420	1 \
				1421	-s "found psk key exchange modes extension" \
				1422	-s "found pre_shared_key extension" \
				1423	-s "Found PSK_EPHEMERAL KEX MODE" \
				1424	-S "Found PSK KEX MODE" \
				1425	-s "Invalid binder." \
				1426	-S "key exchange mode: psk$" \
				1427	-S "key exchange mode: psk_ephemeral" \
				1428	-S "key exchange mode: ephemeral"
				1429
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1430	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1431	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1432	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1433	requires_config_enabled MBEDTLS_SSL_SRV_C
				1434	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1435	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1436	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1437	run_test "TLS 1.3: O->m: all/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1438	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1439	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1440	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1441	0 \
				1442	-s "found psk key exchange modes extension" \
				1443	-s "found pre_shared_key extension" \
				1444	-s "Found PSK_EPHEMERAL KEX MODE" \
				1445	-s "Found PSK KEX MODE" \
				1446	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1447	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1448	-S "key exchange mode: psk$" \
				1449	-s "key exchange mode: psk_ephemeral" \
				1450	-S "key exchange mode: ephemeral"
				1451
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1452	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1453	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1454	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1455	requires_config_enabled MBEDTLS_SSL_SRV_C
				1456	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1457	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1458	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1459	run_test "TLS 1.3: O->m: all/ephemeral_all, good, key id mismatch, dhe." \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1460	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1461	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1462	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1463	0 \
				1464	-s "found psk key exchange modes extension" \
				1465	-s "found pre_shared_key extension" \
				1466	-s "Found PSK_EPHEMERAL KEX MODE" \
				1467	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1468	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1469	-S "key exchange mode: psk$" \
				1470	-S "key exchange mode: psk_ephemeral" \
				1471	-s "key exchange mode: ephemeral"
				1472
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1473	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1474	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1475	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1476	requires_config_enabled MBEDTLS_SSL_SRV_C
				1477	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1478	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1479	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1480	run_test "TLS 1.3: O->m: all/ephemeral_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1481	"$P_SRV tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1482	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1483	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1484	1 \
				1485	-s "found psk key exchange modes extension" \
				1486	-s "found pre_shared_key extension" \
				1487	-s "Found PSK_EPHEMERAL KEX MODE" \
				1488	-s "Found PSK KEX MODE" \
				1489	-s "Invalid binder." \
				1490	-S "key exchange mode: psk$" \
				1491	-S "key exchange mode: psk_ephemeral" \
				1492	-S "key exchange mode: ephemeral"
				1493
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1494	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1495	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1496	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1497	requires_config_enabled MBEDTLS_SSL_SRV_C
				1498	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1499	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1500	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1501	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1502	run_test "TLS 1.3: O->m: ephemeral_all/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1503	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1504	"$O_NEXT_CLI -tls1_3 -msg \
				1505	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1506	0 \
				1507	-s "found psk key exchange modes extension" \
				1508	-s "found pre_shared_key extension" \
				1509	-s "Found PSK_EPHEMERAL KEX MODE" \
				1510	-S "Found PSK KEX MODE" \
				1511	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1512	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1513	-S "key exchange mode: psk$" \
				1514	-s "key exchange mode: psk_ephemeral" \
				1515	-S "key exchange mode: ephemeral"
				1516
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1517	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1518	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1519	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1520	requires_config_enabled MBEDTLS_SSL_SRV_C
				1521	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1522	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1523	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1524	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1525	run_test "TLS 1.3: O->m: ephemeral_all/all, good, key id mismatch, dhe." \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1526	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1527	"$O_NEXT_CLI -tls1_3 -msg \
				1528	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1529	0 \
				1530	-s "found psk key exchange modes extension" \
				1531	-s "found pre_shared_key extension" \
				1532	-s "Found PSK_EPHEMERAL KEX MODE" \
				1533	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1534	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1535	-S "key exchange mode: psk$" \
				1536	-S "key exchange mode: psk_ephemeral" \
				1537	-s "key exchange mode: ephemeral"
				1538
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1539	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1540	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1541	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1542	requires_config_enabled MBEDTLS_SSL_SRV_C
				1543	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1544	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1545	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1546	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1547	run_test "TLS 1.3: O->m: ephemeral_all/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1548	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1549	"$O_NEXT_CLI -tls1_3 -msg \
				1550	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1551	1 \
				1552	-s "found psk key exchange modes extension" \
				1553	-s "found pre_shared_key extension" \
				1554	-s "Found PSK_EPHEMERAL KEX MODE" \
				1555	-S "Found PSK KEX MODE" \
				1556	-s "Invalid binder." \
				1557	-S "key exchange mode: psk$" \
				1558	-S "key exchange mode: psk_ephemeral" \
				1559	-S "key exchange mode: ephemeral"
				1560
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1561	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1562	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1563	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1564	requires_config_enabled MBEDTLS_SSL_SRV_C
				1565	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1566	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1567	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1568	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1569	run_test "TLS 1.3: O->m: all/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1570	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1571	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1572	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1573	0 \
				1574	-s "found psk key exchange modes extension" \
				1575	-s "found pre_shared_key extension" \
				1576	-s "Found PSK_EPHEMERAL KEX MODE" \
				1577	-s "Found PSK KEX MODE" \
				1578	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1579	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1580	-S "key exchange mode: psk$" \
				1581	-s "key exchange mode: psk_ephemeral" \
				1582	-S "key exchange mode: ephemeral"
				1583
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1584	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1585	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1586	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1587	requires_config_enabled MBEDTLS_SSL_SRV_C
				1588	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1589	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1590	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1591	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1592	run_test "TLS 1.3: O->m: all/all, good, key id mismatch, dhe." \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1593	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1594	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1595	-psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1596	0 \
				1597	-s "found psk key exchange modes extension" \
				1598	-s "found pre_shared_key extension" \
				1599	-s "Found PSK_EPHEMERAL KEX MODE" \
				1600	-s "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1601	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1602	-S "key exchange mode: psk$" \
				1603	-S "key exchange mode: psk_ephemeral" \
				1604	-s "key exchange mode: ephemeral"
				1605
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1606	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1607	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1608	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1609	requires_config_enabled MBEDTLS_SSL_SRV_C
				1610	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1611	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1612	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1613	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1614	run_test "TLS 1.3: O->m: all/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1615	"$P_SRV tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1616	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1617	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1618	1 \
				1619	-s "found psk key exchange modes extension" \
				1620	-s "found pre_shared_key extension" \
				1621	-s "Found PSK_EPHEMERAL KEX MODE" \
				1622	-s "Found PSK KEX MODE" \
				1623	-s "Invalid binder." \
				1624	-S "key exchange mode: psk$" \
				1625	-S "key exchange mode: psk_ephemeral" \
				1626	-S "key exchange mode: ephemeral"
				1627
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1628	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1629	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1630	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1631	requires_config_enabled MBEDTLS_SSL_SRV_C
				1632	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1633	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1634	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu	7101b87	2022-08-31 14:15:23 +0800	[diff] [blame]	1635	run_test "TLS 1.3: O->m: ephemeral_all/psk_or_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1636	"$P_SRV tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1637	"$O_NEXT_CLI -tls1_3 -msg \
				1638	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1639	0 \
				1640	-s "found psk key exchange modes extension" \
				1641	-s "found pre_shared_key extension" \
				1642	-s "Found PSK_EPHEMERAL KEX MODE" \
				1643	-S "Found PSK KEX MODE" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1644	-s "No suitable PSK key exchange mode" \
				1645	-S "Pre shared key found" \
				1646	-s "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1647	-S "key exchange mode: psk$" \
				1648	-S "key exchange mode: psk_ephemeral" \
				1649	-s "key exchange mode: ephemeral"
				1650
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1651	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1652	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1653	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1654	requires_config_enabled MBEDTLS_SSL_SRV_C
				1655	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1656	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1657	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1658	run_test "TLS 1.3: O->m: all/psk_or_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1659	"$P_SRV tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1660	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1661	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1662	0 \
				1663	-s "found psk key exchange modes extension" \
				1664	-s "found pre_shared_key extension" \
				1665	-s "Found PSK_EPHEMERAL KEX MODE" \
				1666	-s "Found PSK KEX MODE" \
				1667	-s "Pre shared key found" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1668	-S "No usable PSK or ticket" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1669	-S "key exchange mode: psk$" \
				1670	-S "key exchange mode: psk_ephemeral" \
				1671	-s "key exchange mode: ephemeral"
				1672
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1673	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1674	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1675	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1676	requires_config_enabled MBEDTLS_SSL_SRV_C
				1677	requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1678	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1679	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu	63d40e6	2022-08-29 20:38:39 +0800	[diff] [blame]	1680	run_test "TLS 1.3: O->m: all/psk_or_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1681	"$P_SRV tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yu	e7b4b58	2022-08-25 17:53:13 +0800	[diff] [blame]	1682	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
				1683	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
				1684	1 \
				1685	-s "found psk key exchange modes extension" \
				1686	-s "found pre_shared_key extension" \
				1687	-s "Found PSK_EPHEMERAL KEX MODE" \
				1688	-s "Found PSK KEX MODE" \
				1689	-s "Invalid binder." \
				1690	-S "key exchange mode: psk$" \
				1691	-S "key exchange mode: psk_ephemeral" \
				1692	-S "key exchange mode: ephemeral"
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1693
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1694	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1695	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1696	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1697	requires_config_enabled MBEDTLS_SSL_SRV_C
				1698	requires_config_enabled MBEDTLS_DEBUG_C
				1699	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
				1700	requires_config_enabled PSA_WANT_ALG_ECDH
				1701	requires_config_enabled PSA_WANT_ECC_SECP_R1_256
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1702	run_test "TLS 1.3: O->m: psk_ephemeral group(secp256r1) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1703	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1704	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups P-256 \
				1705	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1706	0 \
				1707	-s "write selected_group: secp256r1" \
				1708	-S "key exchange mode: psk$" \
				1709	-s "key exchange mode: psk_ephemeral" \
				1710	-S "key exchange mode: ephemeral"
				1711
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1712	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1713	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1714	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1715	requires_config_enabled MBEDTLS_SSL_SRV_C
				1716	requires_config_enabled MBEDTLS_DEBUG_C
				1717	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
				1718	requires_config_enabled PSA_WANT_ALG_ECDH
				1719	requires_config_enabled PSA_WANT_ECC_SECP_R1_384
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1720	run_test "TLS 1.3: O->m: psk_ephemeral group(secp384r1) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1721	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1722	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups secp384r1 \
				1723	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1724	0 \
				1725	-s "write selected_group: secp384r1" \
				1726	-S "key exchange mode: psk$" \
				1727	-s "key exchange mode: psk_ephemeral" \
				1728	-S "key exchange mode: ephemeral"
				1729
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1730	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1731	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1732	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1733	requires_config_enabled MBEDTLS_SSL_SRV_C
				1734	requires_config_enabled MBEDTLS_DEBUG_C
				1735	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
				1736	requires_config_enabled PSA_WANT_ALG_ECDH
				1737	requires_config_enabled PSA_WANT_ECC_SECP_R1_521
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1738	run_test "TLS 1.3: O->m: psk_ephemeral group(secp521r1) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1739	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1740	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups secp521r1 \
				1741	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1742	0 \
				1743	-s "write selected_group: secp521r1" \
				1744	-S "key exchange mode: psk$" \
				1745	-s "key exchange mode: psk_ephemeral" \
				1746	-S "key exchange mode: ephemeral"
				1747
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1748	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1749	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1750	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1751	requires_config_enabled MBEDTLS_SSL_SRV_C
				1752	requires_config_enabled MBEDTLS_DEBUG_C
				1753	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
				1754	requires_config_enabled PSA_WANT_ALG_ECDH
				1755	requires_config_enabled PSA_WANT_ECC_MONTGOMERY_255
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1756	run_test "TLS 1.3: O->m: psk_ephemeral group(x25519) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1757	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1758	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups X25519 \
				1759	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1760	0 \
				1761	-s "write selected_group: x25519" \
				1762	-S "key exchange mode: psk$" \
				1763	-s "key exchange mode: psk_ephemeral" \
				1764	-S "key exchange mode: ephemeral"
				1765
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1766	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1767	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1768	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1769	requires_config_enabled MBEDTLS_SSL_SRV_C
				1770	requires_config_enabled MBEDTLS_DEBUG_C
				1771	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
				1772	requires_config_enabled PSA_WANT_ALG_ECDH
				1773	requires_config_enabled PSA_WANT_ECC_MONTGOMERY_448
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1774	run_test "TLS 1.3: O->m: psk_ephemeral group(x448) check, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1775	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
Jerry Yu	58af233	2022-09-06 11:19:31 +0800	[diff] [blame]	1776	"$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups X448 \
				1777	-psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
				1778	0 \
				1779	-s "write selected_group: x448" \
				1780	-S "key exchange mode: psk$" \
				1781	-s "key exchange mode: psk_ephemeral" \
				1782	-S "key exchange mode: ephemeral"
Jerry Yu	2db49df	2022-09-21 11:03:28 +0800	[diff] [blame]	1783
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	1784	requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1785	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1786	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1787	requires_config_enabled MBEDTLS_SSL_SRV_C
				1788	requires_config_enabled MBEDTLS_DEBUG_C
				1789	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
				1790	requires_config_enabled PSA_WANT_ALG_ECDH
				1791	requires_config_enabled PSA_WANT_ECC_SECP_R1_384
Jerry Yu	2db49df	2022-09-21 11:03:28 +0800	[diff] [blame]	1792	run_test "TLS 1.3 O->m: psk_ephemeral group(secp256r1->secp384r1) check, good" \
Przemek Stekiel	45255e4	2023-06-29 13:56:36 +0200	[diff] [blame]	1793	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef groups=secp384r1" \
Jerry Yu	9370612	2022-09-21 22:44:24 +0800	[diff] [blame]	1794	"$O_NEXT_CLI_NO_CERT -tls1_3 -msg -allow_no_dhe_kex -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70 -groups P-256:P-384" \
Jerry Yu	2db49df	2022-09-21 11:03:28 +0800	[diff] [blame]	1795	0 \
				1796	-s "write selected_group: secp384r1" \
				1797	-s "HRR selected_group: secp384r1" \
				1798	-S "key exchange mode: psk$" \
				1799	-s "key exchange mode: psk_ephemeral" \
				1800	-S "key exchange mode: ephemeral"
				1801
Jerry Yu	2db49df	2022-09-21 11:03:28 +0800	[diff] [blame]	1802	requires_gnutls_tls1_3
				1803	requires_gnutls_next_no_ticket
				1804	requires_gnutls_next_disable_tls13_compat
Gilles Peskine	7b02c1f	2024-09-13 14:15:46 +0200	[diff] [blame^]	1805	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1806	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				1807	requires_config_enabled MBEDTLS_SSL_SRV_C
				1808	requires_config_enabled MBEDTLS_DEBUG_C
				1809	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
				1810	requires_config_enabled PSA_WANT_ALG_ECDH
				1811	requires_config_enabled PSA_WANT_ECC_SECP_R1_384
Jerry Yu	2db49df	2022-09-21 11:03:28 +0800	[diff] [blame]	1812	run_test "TLS 1.3 G->m: psk_ephemeral group(secp256r1->secp384r1) check, good" \
Przemek Stekiel	45255e4	2023-06-29 13:56:36 +0200	[diff] [blame]	1813	"$P_SRV tls13_kex_modes=psk_ephemeral debug_level=5 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef groups=secp384r1" \
Jerry Yu	9370612	2022-09-21 22:44:24 +0800	[diff] [blame]	1814	"$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1 --pskusername Client_identity --pskkey 6162636465666768696a6b6c6d6e6f70 localhost" \
Jerry Yu	2db49df	2022-09-21 11:03:28 +0800	[diff] [blame]	1815	0 \
				1816	-s "write selected_group: secp384r1" \
				1817	-s "HRR selected_group: secp384r1" \
				1818	-S "key exchange mode: psk$" \
				1819	-s "key exchange mode: psk_ephemeral" \
				1820	-S "key exchange mode: ephemeral"
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	1821
				1822
				1823	# Add psk test cases for mbedtls client code
				1824
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1825	# MbedTls->MbedTLS kinds of tls13_kex_modes
				1826	# PSK mode in client
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	1827	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1828	requires_config_enabled MBEDTLS_SSL_SRV_C
				1829	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1830	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	1831	run_test "TLS 1.3: m->m: psk/psk, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1832	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1833	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	1834	0 \
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	1835	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1836	-c "client hello, adding psk_key_exchange_modes extension" \
				1837	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	1838	-c "Selected key exchange mode: psk$" \
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	1839	-c "HTTP/1.0 200 OK"
				1840
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1841	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1842	requires_config_enabled MBEDTLS_SSL_SRV_C
				1843	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1844	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	1845	run_test "TLS 1.3: m->m: psk/psk, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1846	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1847	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1848	1 \
				1849	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1850	-c "client hello, adding psk_key_exchange_modes extension" \
				1851	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1852	-s "No usable PSK or ticket"
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1853
				1854	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1855	requires_config_enabled MBEDTLS_SSL_SRV_C
				1856	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1857	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	1858	run_test "TLS 1.3: m->m: psk/psk, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1859	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1860	"$P_CLI nbio=2 debug_level=5 psk_identity=0a0b0c psk=040506 tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1861	1 \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1862	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1863	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1864	-c "client hello, adding PSK binder list" \
				1865	-s "Invalid binder."
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1866
				1867	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1868	requires_config_enabled MBEDTLS_SSL_SRV_C
				1869	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1870	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1871	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	1872	run_test "TLS 1.3: m->m: psk/psk_ephemeral, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1873	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1874	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1875	1 \
				1876	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1877	-c "client hello, adding psk_key_exchange_modes extension" \
				1878	-c "client hello, adding PSK binder list" \
				1879	-s "ClientHello message misses mandatory extensions."
				1880
				1881	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1882	requires_config_enabled MBEDTLS_SSL_SRV_C
				1883	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1884	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1885	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	1886	run_test "TLS 1.3: m->m: psk/ephemeral, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1887	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1888	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1889	1 \
				1890	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1891	-c "client hello, adding psk_key_exchange_modes extension" \
				1892	-c "client hello, adding PSK binder list" \
				1893	-s "ClientHello message misses mandatory extensions."
				1894
				1895	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1896	requires_config_enabled MBEDTLS_SSL_SRV_C
				1897	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1898	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1899	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1900	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	1901	run_test "TLS 1.3: m->m: psk/ephemeral_all, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1902	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1903	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1904	1 \
				1905	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1906	-c "client hello, adding psk_key_exchange_modes extension" \
				1907	-c "client hello, adding PSK binder list" \
				1908	-s "ClientHello message misses mandatory extensions."
				1909
				1910	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1911	requires_config_enabled MBEDTLS_SSL_SRV_C
				1912	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1913	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1914	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	1915	run_test "TLS 1.3: m->m: psk/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1916	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1917	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1918	0 \
				1919	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1920	-c "client hello, adding psk_key_exchange_modes extension" \
				1921	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	1922	-c "Selected key exchange mode: psk$" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1923	-c "HTTP/1.0 200 OK"
				1924
				1925	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1926	requires_config_enabled MBEDTLS_SSL_SRV_C
				1927	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1928	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1929	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	1930	run_test "TLS 1.3: m->m: psk/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1931	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1932	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1933	1 \
				1934	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1935	-c "client hello, adding psk_key_exchange_modes extension" \
				1936	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1937	-s "No usable PSK or ticket" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1938	-s "ClientHello message misses mandatory extensions."
				1939
				1940	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1941	requires_config_enabled MBEDTLS_SSL_SRV_C
				1942	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1943	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1944	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	1945	run_test "TLS 1.3: m->m: psk/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1946	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1947	"$P_CLI nbio=2 debug_level=5 psk_identity=0a0b0c psk=040506 tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1948	1 \
Xiaokang Qian	8939930	2022-09-21 07:16:22 +0000	[diff] [blame]	1949	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1950	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	8939930	2022-09-21 07:16:22 +0000	[diff] [blame]	1951	-c "client hello, adding PSK binder list" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1952	-s "Invalid binder."
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1953
				1954	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1955	requires_config_enabled MBEDTLS_SSL_SRV_C
				1956	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1957	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1958	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1959	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	1960	run_test "TLS 1.3: m->m: psk/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1961	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1962	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1963	0 \
				1964	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1965	-c "client hello, adding psk_key_exchange_modes extension" \
				1966	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	1967	-c "Selected key exchange mode: psk$" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1968	-c "HTTP/1.0 200 OK"
				1969
				1970	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1971	requires_config_enabled MBEDTLS_SSL_SRV_C
				1972	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1973	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1974	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1975	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	1976	run_test "TLS 1.3: m->m: psk/all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1977	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1978	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1979	1 \
				1980	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				1981	-c "client hello, adding psk_key_exchange_modes extension" \
				1982	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	1983	-s "No usable PSK or ticket" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1984	-s "ClientHello message misses mandatory extensions."
				1985
				1986	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				1987	requires_config_enabled MBEDTLS_SSL_SRV_C
				1988	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	1989	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				1990	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				1991	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	1992	run_test "TLS 1.3: m->m: psk/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	1993	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	1994	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c psk=040506 tls13_kex_modes=psk" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1995	1 \
Xiaokang Qian	8939930	2022-09-21 07:16:22 +0000	[diff] [blame]	1996	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	1997	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	8939930	2022-09-21 07:16:22 +0000	[diff] [blame]	1998	-c "client hello, adding PSK binder list" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	1999	-s "Invalid binder."
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2000
				2001	# psk_ephemeral mode in client
				2002	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2003	requires_config_enabled MBEDTLS_SSL_SRV_C
				2004	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2005	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2006	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2007	run_test "TLS 1.3: m->m: psk_ephemeral/psk, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2008	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2009	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2010	1 \
				2011	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2012	-c "client hello, adding psk_key_exchange_modes extension" \
				2013	-c "client hello, adding PSK binder list" \
				2014	-s "ClientHello message misses mandatory extensions."
				2015
				2016	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2017	requires_config_enabled MBEDTLS_SSL_SRV_C
				2018	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2019	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2020	run_test "TLS 1.3: m->m: psk_ephemeral/psk_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2021	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2022	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2023	0 \
				2024	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2025	-c "client hello, adding psk_key_exchange_modes extension" \
				2026	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2027	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2028	-c "HTTP/1.0 200 OK"
				2029
				2030	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2031	requires_config_enabled MBEDTLS_SSL_SRV_C
				2032	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2033	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2034	run_test "TLS 1.3: m->m: psk_ephemeral/psk_ephemeral, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2035	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2036	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2037	1 \
				2038	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2039	-c "client hello, adding psk_key_exchange_modes extension" \
				2040	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2041	-s "No usable PSK or ticket" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2042	-s "ClientHello message misses mandatory extensions."
				2043
				2044	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2045	requires_config_enabled MBEDTLS_SSL_SRV_C
				2046	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2047	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2048	run_test "TLS 1.3: m->m: psk_ephemeral/psk_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2049	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2050	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c psk=040506 tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2051	1 \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2052	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2053	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2054	-c "client hello, adding PSK binder list" \
				2055	-s "Invalid binder."
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2056
				2057	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2058	requires_config_enabled MBEDTLS_SSL_SRV_C
				2059	requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian	210727f	2022-09-23 07:25:40 +0000	[diff] [blame]	2060	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2061	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2062	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2063	run_test "TLS 1.3: m->m: psk_ephemeral/ephemeral, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2064	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2065	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2066	1 \
				2067	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2068	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	ac8195f	2022-09-26 04:01:06 +0000	[diff] [blame]	2069	-c "client hello, adding PSK binder list"
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2070
				2071	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2072	requires_config_enabled MBEDTLS_SSL_SRV_C
				2073	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2074	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2075	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2076	run_test "TLS 1.3: m->m: psk_ephemeral/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2077	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2078	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2079	0 \
				2080	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2081	-c "client hello, adding psk_key_exchange_modes extension" \
				2082	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2083	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2084	-c "HTTP/1.0 200 OK"
				2085
				2086	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Xiaokang Qian	210727f	2022-09-23 07:25:40 +0000	[diff] [blame]	2087	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2088	requires_config_enabled MBEDTLS_SSL_SRV_C
				2089	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2090	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2091	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2092	run_test "TLS 1.3: m->m: psk_ephemeral/ephemeral_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2093	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2094	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2095	1 \
				2096	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2097	-c "client hello, adding psk_key_exchange_modes extension" \
				2098	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2099	-s "No usable PSK or ticket"
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2100
				2101	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2102	requires_config_enabled MBEDTLS_SSL_SRV_C
				2103	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2104	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2105	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2106	run_test "TLS 1.3: m->m: psk_ephemeral/ephemeral_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2107	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2108	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c psk=040506 tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2109	1 \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2110	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2111	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2112	-c "client hello, adding PSK binder list" \
				2113	-s "Invalid binder."
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2114
				2115	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2116	requires_config_enabled MBEDTLS_SSL_SRV_C
				2117	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2118	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2119	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2120	run_test "TLS 1.3: m->m: psk_ephemeral/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2121	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2122	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2123	0 \
				2124	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2125	-c "client hello, adding psk_key_exchange_modes extension" \
				2126	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2127	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2128	-c "HTTP/1.0 200 OK"
				2129
				2130	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2131	requires_config_enabled MBEDTLS_SSL_SRV_C
				2132	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2133	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2134	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2135	run_test "TLS 1.3: m->m: psk_ephemeral/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2136	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2137	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2138	1 \
				2139	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2140	-c "client hello, adding psk_key_exchange_modes extension" \
				2141	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2142	-s "No usable PSK or ticket" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2143	-s "ClientHello message misses mandatory extensions."
				2144
				2145	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2146	requires_config_enabled MBEDTLS_SSL_SRV_C
				2147	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2148	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2149	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2150	run_test "TLS 1.3: m->m: psk_ephemeral/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2151	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2152	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2153	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2154	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2155	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2156	-c "client hello, adding PSK binder list" \
				2157	-s "Invalid binder."
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2158
				2159	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2160	requires_config_enabled MBEDTLS_SSL_SRV_C
				2161	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2162	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2163	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2164	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2165	run_test "TLS 1.3: m->m: psk_ephemeral/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2166	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2167	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2168	0 \
				2169	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2170	-c "client hello, adding psk_key_exchange_modes extension" \
				2171	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2172	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2173	-c "HTTP/1.0 200 OK"
				2174
				2175	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2176	requires_config_enabled MBEDTLS_SSL_SRV_C
				2177	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2178	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2179	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2180	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2181	run_test "TLS 1.3: m->m: psk_ephemeral/all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2182	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2183	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2184	1 \
				2185	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2186	-c "client hello, adding psk_key_exchange_modes extension" \
				2187	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2188	-s "No usable PSK or ticket" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2189
				2190	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2191	requires_config_enabled MBEDTLS_SSL_SRV_C
				2192	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2193	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2194	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2195	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2196	run_test "TLS 1.3: m->m: psk_ephemeral/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2197	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2198	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2199	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2200	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2201	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2202	-c "client hello, adding PSK binder list" \
				2203	-s "Invalid binder."
Xiaokang Qian	f9b694b	2022-08-25 08:48:51 +0000	[diff] [blame]	2204
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2205	# ephemeral mode in client
				2206	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2207	requires_config_enabled MBEDTLS_SSL_SRV_C
				2208	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2209	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2210	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2211	run_test "TLS 1.3: m->m: ephemeral/psk, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2212	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2213	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2214	1 \
				2215	-s "ClientHello message misses mandatory extensions."
				2216
				2217	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2218	requires_config_enabled MBEDTLS_SSL_SRV_C
				2219	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2220	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2221	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2222	run_test "TLS 1.3: m->m: ephemeral/psk_ephemeral, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2223	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2224	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2225	1 \
				2226	-s "ClientHello message misses mandatory extensions."
				2227
				2228	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2229	requires_config_enabled MBEDTLS_SSL_SRV_C
				2230	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2231	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2232	run_test "TLS 1.3: m->m: ephemeral/ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2233	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2234	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2235	0 \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2236	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2237	-c "HTTP/1.0 200 OK"
				2238
				2239	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2240	requires_config_enabled MBEDTLS_SSL_SRV_C
				2241	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2242	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2243	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2244	run_test "TLS 1.3: m->m: ephemeral/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2245	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2246	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2247	0 \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2248	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2249	-c "HTTP/1.0 200 OK"
				2250
				2251	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2252	requires_config_enabled MBEDTLS_SSL_SRV_C
				2253	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2254	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2255	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2256	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2257	run_test "TLS 1.3: m->m: ephemeral/psk_all, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2258	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2259	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2260	1 \
				2261	-s "ClientHello message misses mandatory extensions."
				2262
				2263	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2264	requires_config_enabled MBEDTLS_SSL_SRV_C
				2265	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2266	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2267	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2268	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2269	run_test "TLS 1.3: m->m: ephemeral/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2270	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2271	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2272	0 \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2273	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2274	-c "HTTP/1.0 200 OK"
				2275
				2276	# ephemeral_all mode in client
				2277	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2278	requires_config_enabled MBEDTLS_SSL_SRV_C
				2279	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2280	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2281	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2282	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2283	run_test "TLS 1.3: m->m: ephemeral_all/psk, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2284	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2285	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2286	1 \
				2287	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2288	-c "client hello, adding psk_key_exchange_modes extension" \
				2289	-c "client hello, adding PSK binder list" \
				2290	-s "ClientHello message misses mandatory extensions."
				2291
				2292	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2293	requires_config_enabled MBEDTLS_SSL_SRV_C
				2294	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2295	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2296	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2297	run_test "TLS 1.3: m->m: ephemeral_all/psk_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2298	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2299	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2300	0 \
				2301	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2302	-c "client hello, adding psk_key_exchange_modes extension" \
				2303	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2304	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2305	-c "HTTP/1.0 200 OK"
				2306
				2307	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2308	requires_config_enabled MBEDTLS_SSL_SRV_C
				2309	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2310	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2311	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2312	run_test "TLS 1.3: m->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2313	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2314	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	210727f	2022-09-23 07:25:40 +0000	[diff] [blame]	2315	1 \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2316	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2317	-c "client hello, adding psk_key_exchange_modes extension" \
				2318	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2319	-s "No usable PSK or ticket"
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2320
				2321	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2322	requires_config_enabled MBEDTLS_SSL_SRV_C
				2323	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2324	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2325	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2326	run_test "TLS 1.3: m->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2327	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2328	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
				2329	1 \
				2330	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2331	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2332	-c "client hello, adding PSK binder list" \
				2333	-s "Invalid binder."
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2334
				2335	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2336	requires_config_enabled MBEDTLS_SSL_SRV_C
				2337	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2338	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2339	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2340	run_test "TLS 1.3: m->m: ephemeral_all/ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2341	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2342	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2343	0 \
				2344	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2345	-c "client hello, adding psk_key_exchange_modes extension" \
				2346	-c "client hello, adding PSK binder list" \
				2347	-s "key exchange mode: ephemeral" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2348	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2349	-c "HTTP/1.0 200 OK"
				2350
				2351	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2352	requires_config_enabled MBEDTLS_SSL_SRV_C
				2353	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2354	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2355	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2356	run_test "TLS 1.3: m->m: ephemeral_all/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2357	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2358	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2359	0 \
				2360	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2361	-c "client hello, adding psk_key_exchange_modes extension" \
				2362	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2363	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2364	-c "HTTP/1.0 200 OK"
				2365
				2366	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2367	requires_config_enabled MBEDTLS_SSL_SRV_C
				2368	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2369	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2370	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2371	run_test "TLS 1.3: m->m: ephemeral_all/ephemeral_all,good,key id mismatch,fallback" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2372	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2373	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2374	0 \
				2375	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2376	-c "client hello, adding psk_key_exchange_modes extension" \
				2377	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2378	-s "No usable PSK or ticket" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2379	-s "key exchange mode: ephemeral"
				2380
				2381	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2382	requires_config_enabled MBEDTLS_SSL_SRV_C
				2383	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2384	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2385	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	a70bd91	2022-09-28 07:50:13 +0000	[diff] [blame]	2386	run_test "TLS 1.3: m->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2387	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2388	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
				2389	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2390	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2391	-c "client hello, adding psk_key_exchange_modes extension" \
				2392	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2393	-s "Invalid binder."
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2394
				2395	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2396	requires_config_enabled MBEDTLS_SSL_SRV_C
				2397	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2398	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2399	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2400	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2401	run_test "TLS 1.3: m->m: ephemeral_all/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2402	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2403	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2404	0 \
				2405	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2406	-c "client hello, adding psk_key_exchange_modes extension" \
				2407	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2408	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2409	-c "HTTP/1.0 200 OK"
				2410
				2411	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2412	requires_config_enabled MBEDTLS_SSL_SRV_C
				2413	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2414	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2415	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2416	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2417	run_test "TLS 1.3: m->m: ephemeral_all/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2418	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2419	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2420	1 \
				2421	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2422	-c "client hello, adding psk_key_exchange_modes extension" \
				2423	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2424	-s "No usable PSK or ticket" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2425	-s "ClientHello message misses mandatory extensions."
				2426
				2427	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2428	requires_config_enabled MBEDTLS_SSL_SRV_C
				2429	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2430	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2431	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2432	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2433	run_test "TLS 1.3: m->m: ephemeral_all/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2434	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2435	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2436	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2437	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2438	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2439	-c "client hello, adding PSK binder list" \
				2440	-s "Invalid binder."
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2441
				2442	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2443	requires_config_enabled MBEDTLS_SSL_SRV_C
				2444	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2445	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2446	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2447	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2448	run_test "TLS 1.3: m->m: ephemeral_all/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2449	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2450	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2451	0 \
				2452	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2453	-c "client hello, adding psk_key_exchange_modes extension" \
				2454	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2455	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2456	-c "HTTP/1.0 200 OK"
				2457
				2458	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2459	requires_config_enabled MBEDTLS_SSL_SRV_C
				2460	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2461	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2462	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2463	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2464	run_test "TLS 1.3: m->m: ephemeral_all/all, good, key id mismatch, fallback" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2465	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2466	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2467	0 \
				2468	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2469	-c "client hello, adding psk_key_exchange_modes extension" \
				2470	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2471	-s "No usable PSK or ticket" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2472	-s "key exchange mode: ephemeral"
				2473
				2474	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2475	requires_config_enabled MBEDTLS_SSL_SRV_C
				2476	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2477	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2478	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2479	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2480	run_test "TLS 1.3: m->m: ephemeral_all/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2481	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2482	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
				2483	1 \
				2484	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2485	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2486	-c "client hello, adding PSK binder list" \
				2487	-s "Invalid binder."
Xiaokang Qian	ca48ddd	2022-08-29 08:25:17 +0000	[diff] [blame]	2488
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2489	# psk_all mode in client
				2490	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2491	requires_config_enabled MBEDTLS_SSL_SRV_C
				2492	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2493	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2494	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2495	run_test "TLS 1.3: m->m: psk_all/psk, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2496	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2497	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2498	0 \
				2499	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2500	-c "client hello, adding psk_key_exchange_modes extension" \
				2501	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2502	-c "Selected key exchange mode: psk$" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2503	-c "HTTP/1.0 200 OK"
				2504
				2505	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2506	requires_config_enabled MBEDTLS_SSL_SRV_C
				2507	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2508	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2509	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2510	run_test "TLS 1.3: m->m: psk_all/psk, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2511	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2512	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2513	1 \
				2514	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2515	-c "client hello, adding psk_key_exchange_modes extension" \
				2516	-c "client hello, adding PSK binder list" \
				2517	-s "ClientHello message misses mandatory extensions."
				2518
				2519	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2520	requires_config_enabled MBEDTLS_SSL_SRV_C
				2521	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2522	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2523	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2524	run_test "TLS 1.3: m->m: psk_all/psk, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2525	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2526	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2527	1 \
				2528	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2529	-c "client hello, adding psk_key_exchange_modes extension" \
				2530	-c "client hello, adding PSK binder list" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2531	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2532
				2533	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2534	requires_config_enabled MBEDTLS_SSL_SRV_C
				2535	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2536	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2537	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2538	run_test "TLS 1.3: m->m: psk_all/psk_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2539	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2540	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2541	0 \
				2542	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2543	-c "client hello, adding psk_key_exchange_modes extension" \
				2544	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2545	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2546	-c "HTTP/1.0 200 OK"
				2547
				2548	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2549	requires_config_enabled MBEDTLS_SSL_SRV_C
				2550	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2551	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2552	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2553	run_test "TLS 1.3: m->m: psk_all/psk_ephemeral, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2554	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2555	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2556	1 \
				2557	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2558	-c "client hello, adding psk_key_exchange_modes extension" \
				2559	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2560	-s "No usable PSK or ticket" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2561	-s "ClientHello message misses mandatory extensions."
				2562
				2563	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2564	requires_config_enabled MBEDTLS_SSL_SRV_C
				2565	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2566	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2567	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2568	run_test "TLS 1.3: m->m: psk_all/psk_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2569	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	954d576	2022-09-26 08:40:10 +0000	[diff] [blame]	2570	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2571	1 \
Xiaokang Qian	954d576	2022-09-26 08:40:10 +0000	[diff] [blame]	2572	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2573	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	954d576	2022-09-26 08:40:10 +0000	[diff] [blame]	2574	-c "client hello, adding PSK binder list" \
				2575	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2576
				2577	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2578	requires_config_enabled MBEDTLS_SSL_SRV_C
				2579	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2580	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2581	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2582	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2583	run_test "TLS 1.3: m->m: psk_all/ephemeral, fail - no common kex mode" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2584	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2585	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2586	1 \
				2587	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2588	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	ac8195f	2022-09-26 04:01:06 +0000	[diff] [blame]	2589	-c "client hello, adding PSK binder list"
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2590
				2591	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2592	requires_config_enabled MBEDTLS_SSL_SRV_C
				2593	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2594	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2595	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2596	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2597	run_test "TLS 1.3: m->m: psk_all/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2598	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2599	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2600	0 \
				2601	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2602	-c "client hello, adding psk_key_exchange_modes extension" \
				2603	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2604	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2605	-c "HTTP/1.0 200 OK"
				2606
				2607	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2608	requires_config_enabled MBEDTLS_SSL_SRV_C
				2609	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2610	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2611	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2612	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2613	run_test "TLS 1.3: m->m: psk_all/ephemeral_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2614	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2615	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2616	1 \
				2617	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2618	-c "client hello, adding psk_key_exchange_modes extension" \
				2619	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2620	-s "No usable PSK or ticket"
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2621
				2622	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2623	requires_config_enabled MBEDTLS_SSL_SRV_C
				2624	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2625	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2626	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2627	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	a70bd91	2022-09-28 07:50:13 +0000	[diff] [blame]	2628	run_test "TLS 1.3: m->m: psk_all/ephemeral_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2629	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2630	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2631	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2632	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2633	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2634	-c "client hello, adding PSK binder list" \
				2635	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2636
				2637	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2638	requires_config_enabled MBEDTLS_SSL_SRV_C
				2639	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2640	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2641	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2642	run_test "TLS 1.3: m->m: psk_all/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2643	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2644	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2645	0 \
				2646	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2647	-c "client hello, adding psk_key_exchange_modes extension" \
				2648	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2649	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2650	-c "HTTP/1.0 200 OK"
				2651
				2652	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2653	requires_config_enabled MBEDTLS_SSL_SRV_C
				2654	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2655	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2656	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2657	run_test "TLS 1.3: m->m: psk_all/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2658	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2659	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2660	1 \
				2661	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2662	-c "client hello, adding psk_key_exchange_modes extension" \
				2663	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2664	-s "No usable PSK or ticket" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2665	-s "ClientHello message misses mandatory extensions."
				2666
				2667	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2668	requires_config_enabled MBEDTLS_SSL_SRV_C
				2669	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2670	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2671	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2672	run_test "TLS 1.3: m->m: psk_all/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2673	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2674	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2675	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2676	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2677	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2678	-c "client hello, adding PSK binder list" \
				2679	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2680
				2681	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2682	requires_config_enabled MBEDTLS_SSL_SRV_C
				2683	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2684	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2685	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2686	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2687	run_test "TLS 1.3: m->m: psk_all/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2688	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2689	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2690	0 \
				2691	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2692	-c "client hello, adding psk_key_exchange_modes extension" \
				2693	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2694	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2695	-c "HTTP/1.0 200 OK"
				2696
				2697	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2698	requires_config_enabled MBEDTLS_SSL_SRV_C
				2699	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2700	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2701	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2702	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2703	run_test "TLS 1.3: m->m: psk_all/all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2704	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2705	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2706	1 \
				2707	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2708	-c "client hello, adding psk_key_exchange_modes extension" \
				2709	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2710	-s "No usable PSK or ticket"
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2711
				2712	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2713	requires_config_enabled MBEDTLS_SSL_SRV_C
				2714	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2715	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2716	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2717	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2718	run_test "TLS 1.3: m->m: psk_all/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2719	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2720	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2721	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2722	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2723	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2724	-c "client hello, adding PSK binder list" \
				2725	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2726
				2727	# all mode in client
				2728	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2729	requires_config_enabled MBEDTLS_SSL_SRV_C
				2730	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2731	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2732	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2733	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2734	run_test "TLS 1.3: m->m: all/psk, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2735	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2736	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2737	0 \
				2738	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2739	-c "client hello, adding psk_key_exchange_modes extension" \
				2740	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2741	-c "Selected key exchange mode: psk$" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2742	-c "HTTP/1.0 200 OK"
				2743
				2744	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2745	requires_config_enabled MBEDTLS_SSL_SRV_C
				2746	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2747	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2748	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2749	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2750	run_test "TLS 1.3: m->m: all/psk, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2751	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2752	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2753	1 \
				2754	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2755	-c "client hello, adding psk_key_exchange_modes extension" \
				2756	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2757	-s "No usable PSK or ticket" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2758	-s "ClientHello message misses mandatory extensions."
				2759
				2760	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2761	requires_config_enabled MBEDTLS_SSL_SRV_C
				2762	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2763	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2764	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2765	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2766	run_test "TLS 1.3: m->m: all/psk, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2767	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2768	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2769	1 \
				2770	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2771	-c "client hello, adding psk_key_exchange_modes extension" \
				2772	-c "client hello, adding PSK binder list" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2773	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2774
				2775	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2776	requires_config_enabled MBEDTLS_SSL_SRV_C
				2777	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2778	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2779	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2780	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2781	run_test "TLS 1.3: m->m: all/psk_ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2782	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2783	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2784	0 \
				2785	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2786	-c "client hello, adding psk_key_exchange_modes extension" \
				2787	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2788	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2789	-c "HTTP/1.0 200 OK"
				2790
				2791	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2792	requires_config_enabled MBEDTLS_SSL_SRV_C
				2793	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2794	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2795	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2796	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2797	run_test "TLS 1.3: m->m: all/psk_ephemeral, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2798	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2799	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2800	1 \
				2801	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2802	-c "client hello, adding psk_key_exchange_modes extension" \
				2803	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2804	-s "No usable PSK or ticket" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2805	-s "ClientHello message misses mandatory extensions."
				2806
				2807	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2808	requires_config_enabled MBEDTLS_SSL_SRV_C
				2809	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2810	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2811	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2812	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2813	run_test "TLS 1.3: m->m: all/psk_ephemeral, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2814	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2815	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2816	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2817	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2818	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2819	-c "client hello, adding PSK binder list" \
				2820	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2821
				2822	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2823	requires_config_enabled MBEDTLS_SSL_SRV_C
				2824	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2825	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2826	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2827	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2828	run_test "TLS 1.3: m->m: all/ephemeral, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2829	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2830	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2831	0 \
				2832	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2833	-c "client hello, adding psk_key_exchange_modes extension" \
				2834	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2835	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2836	-c "HTTP/1.0 200 OK"
				2837
				2838	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2839	requires_config_enabled MBEDTLS_SSL_SRV_C
				2840	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2841	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2842	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2843	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2844	run_test "TLS 1.3: m->m: all/ephemeral_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2845	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2846	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2847	0 \
				2848	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2849	-c "client hello, adding psk_key_exchange_modes extension" \
				2850	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2851	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2852	-c "HTTP/1.0 200 OK"
				2853
				2854	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2855	requires_config_enabled MBEDTLS_SSL_SRV_C
				2856	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2857	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2858	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2859	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2860	run_test "TLS 1.3: m->m: all/ephemeral_all, good, key id mismatch, fallback" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2861	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2862	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2863	0 \
				2864	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2865	-c "client hello, adding psk_key_exchange_modes extension" \
				2866	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2867	-s "No usable PSK or ticket" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2868	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2869	-c "HTTP/1.0 200 OK"
				2870
				2871	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2872	requires_config_enabled MBEDTLS_SSL_SRV_C
				2873	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2874	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2875	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2876	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2877	run_test "TLS 1.3: m->m: all/ephemeral_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2878	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2879	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=all" \
				2880	1 \
				2881	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2882	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2883	-c "client hello, adding PSK binder list" \
				2884	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2885
				2886	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2887	requires_config_enabled MBEDTLS_SSL_SRV_C
				2888	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2889	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2890	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2891	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2892	run_test "TLS 1.3: m->m: all/psk_all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2893	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2894	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2895	0 \
				2896	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2897	-c "client hello, adding psk_key_exchange_modes extension" \
				2898	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2899	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2900	-c "HTTP/1.0 200 OK"
				2901
				2902	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2903	requires_config_enabled MBEDTLS_SSL_SRV_C
				2904	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2905	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2906	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2907	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2908	run_test "TLS 1.3: m->m: all/psk_all, fail, key id mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2909	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2910	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2911	1 \
				2912	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2913	-c "client hello, adding psk_key_exchange_modes extension" \
				2914	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2915	-s "No usable PSK or ticket" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2916	-s "ClientHello message misses mandatory extensions."
				2917
				2918	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2919	requires_config_enabled MBEDTLS_SSL_SRV_C
				2920	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2921	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2922	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2923	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2924	run_test "TLS 1.3: m->m: all/psk_all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2925	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2926	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2927	1 \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2928	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2929	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2930	-c "client hello, adding PSK binder list" \
				2931	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2932
				2933	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2934	requires_config_enabled MBEDTLS_SSL_SRV_C
				2935	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2936	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2937	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2938	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2939	run_test "TLS 1.3: m->m: all/all, good" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2940	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2941	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2942	0 \
				2943	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2944	-c "client hello, adding psk_key_exchange_modes extension" \
				2945	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2946	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2947	-c "HTTP/1.0 200 OK"
				2948
				2949	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2950	requires_config_enabled MBEDTLS_SSL_SRV_C
				2951	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2952	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2953	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2954	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2955	run_test "TLS 1.3: m->m: all/all, good, key id mismatch, fallback" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2956	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	cffb18c	2022-09-13 01:58:07 +0000	[diff] [blame]	2957	"$P_CLI nbio=2 debug_level=5 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2958	0 \
				2959	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2960	-c "client hello, adding psk_key_exchange_modes extension" \
				2961	-c "client hello, adding PSK binder list" \
Ronald Cron	cf28456	2024-02-16 18:54:10 +0100	[diff] [blame]	2962	-s "No usable PSK or ticket" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2963	-s "key exchange mode: ephemeral"
				2964
				2965	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2966	requires_config_enabled MBEDTLS_SSL_SRV_C
				2967	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2968	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				2969	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				2970	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	9c17204	2022-09-27 11:41:50 +0000	[diff] [blame]	2971	run_test "TLS 1.3: m->m: all/all, fail, key material mismatch" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2972	"$P_SRV nbio=2 debug_level=5 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2973	"$P_CLI nbio=2 debug_level=5 psk=040506 psk_identity=0a0b0c tls13_kex_modes=all" \
				2974	1 \
				2975	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2976	-c "client hello, adding psk_key_exchange_modes extension" \
Xiaokang Qian	dea2cbe	2022-09-22 11:07:28 +0000	[diff] [blame]	2977	-c "client hello, adding PSK binder list" \
				2978	-s "Invalid binder."
Xiaokang Qian	8e76e1d	2022-08-29 10:11:14 +0000	[diff] [blame]	2979
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	2980	#OPENSSL-SERVER psk mode
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	2981	requires_openssl_tls1_3
				2982	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				2983	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				2984	requires_config_enabled MBEDTLS_DEBUG_C
				2985	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	2986	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	2987	run_test "TLS 1.3: m->O: psk/all, good" \
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	2988	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	2989	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	2990	0 \
				2991	-c "=> write client hello" \
				2992	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				2993	-c "client hello, adding psk_key_exchange_modes extension" \
				2994	-c "client hello, adding PSK binder list" \
				2995	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	2996	-c "Selected key exchange mode: psk$" \
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	2997	-c "HTTP/1.0 200 ok"
				2998
				2999	requires_openssl_tls1_3
				3000	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3001	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3002	requires_config_enabled MBEDTLS_DEBUG_C
				3003	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3004	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3005	run_test "TLS 1.3: m->O: psk/ephemeral_all, fail - no common kex mode" \
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	3006	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Ronald Cron	2ea36af	2022-10-17 09:37:16 +0200	[diff] [blame]	3007	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	e0cc584	2022-08-25 06:17:36 +0000	[diff] [blame]	3008	1 \
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	3009	-c "=> write client hello" \
				3010	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3011	-c "client hello, adding psk_key_exchange_modes extension" \
				3012	-c "client hello, adding PSK binder list" \
				3013	-c "<= write client hello" \
Xiaokang Qian	e0cc584	2022-08-25 06:17:36 +0000	[diff] [blame]	3014	-c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qian	cf6442e	2022-08-23 06:47:40 +0000	[diff] [blame]	3015
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3016	#OPENSSL-SERVER psk_all mode
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3017	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3018	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3019	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3020	requires_config_enabled MBEDTLS_DEBUG_C
				3021	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3022	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				3023	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3024	run_test "TLS 1.3: m->O: psk_all/all, good" \
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3025	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3026	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3027	0 \
				3028	-c "=> write client hello" \
				3029	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3030	-c "client hello, adding psk_key_exchange_modes extension" \
				3031	-c "client hello, adding PSK binder list" \
				3032	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3033	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3034	-c "HTTP/1.0 200 ok"
				3035
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3036	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3037	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3038	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3039	requires_config_enabled MBEDTLS_DEBUG_C
				3040	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3041	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				3042	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3043	run_test "TLS 1.3: m->O: psk_all/ephemeral_all, good" \
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3044	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Ronald Cron	2ea36af	2022-10-17 09:37:16 +0200	[diff] [blame]	3045	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3046	0 \
				3047	-c "=> write client hello" \
				3048	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3049	-c "client hello, adding psk_key_exchange_modes extension" \
				3050	-c "client hello, adding PSK binder list" \
				3051	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3052	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	7389423	2022-08-23 08:06:34 +0000	[diff] [blame]	3053	-c "HTTP/1.0 200 ok"
				3054
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3055	#OPENSSL-SERVER psk_ephemeral mode
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3056	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3057	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3058	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3059	requires_config_enabled MBEDTLS_DEBUG_C
				3060	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3061	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3062	run_test "TLS 1.3: m->O: psk_ephemeral/all, good" \
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3063	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3064	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3065	0 \
				3066	-c "=> write client hello" \
				3067	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3068	-c "client hello, adding psk_key_exchange_modes extension" \
				3069	-c "client hello, adding PSK binder list" \
				3070	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3071	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3072	-c "HTTP/1.0 200 ok"
				3073
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3074	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3075	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3076	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3077	requires_config_enabled MBEDTLS_DEBUG_C
				3078	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3079	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3080	run_test "TLS 1.3: m->O: psk_ephemeral/ephemeral_all, good" \
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3081	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Ronald Cron	2ea36af	2022-10-17 09:37:16 +0200	[diff] [blame]	3082	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3083	0 \
				3084	-c "=> write client hello" \
				3085	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3086	-c "client hello, adding psk_key_exchange_modes extension" \
				3087	-c "client hello, adding PSK binder list" \
				3088	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3089	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	ff5705b	2022-08-24 03:18:31 +0000	[diff] [blame]	3090	-c "HTTP/1.0 200 ok"
				3091
Xiaokang Qian	01173c2	2022-08-24 06:29:05 +0000	[diff] [blame]	3092	#OPENSSL-SERVER ephemeral mode
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3093	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	01173c2	2022-08-24 06:29:05 +0000	[diff] [blame]	3094	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3095	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3096	requires_config_enabled MBEDTLS_DEBUG_C
				3097	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3098	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3099	run_test "TLS 1.3: m->O: ephemeral/all, good" \
Xiaokang Qian	01173c2	2022-08-24 06:29:05 +0000	[diff] [blame]	3100	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3101	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	01173c2	2022-08-24 06:29:05 +0000	[diff] [blame]	3102	0 \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3103	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	01173c2	2022-08-24 06:29:05 +0000	[diff] [blame]	3104	-c "HTTP/1.0 200 ok"
				3105
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3106	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	01173c2	2022-08-24 06:29:05 +0000	[diff] [blame]	3107	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3108	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3109	requires_config_enabled MBEDTLS_DEBUG_C
				3110	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3111	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3112	run_test "TLS 1.3: m->O: ephemeral/ephemeral_all, good" \
Xiaokang Qian	01173c2	2022-08-24 06:29:05 +0000	[diff] [blame]	3113	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
				3114	"$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
				3115	0 \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3116	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	01173c2	2022-08-24 06:29:05 +0000	[diff] [blame]	3117	-c "HTTP/1.0 200 ok"
				3118
Xiaokang Qian	a39d0d5	2022-08-24 06:48:07 +0000	[diff] [blame]	3119	#OPENSSL-SERVER ephemeral_all mode
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3120	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	a39d0d5	2022-08-24 06:48:07 +0000	[diff] [blame]	3121	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3122	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3123	requires_config_enabled MBEDTLS_DEBUG_C
				3124	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3125	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3126	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3127	run_test "TLS 1.3: m->O: ephemeral_all/all, good" \
Xiaokang Qian	a39d0d5	2022-08-24 06:48:07 +0000	[diff] [blame]	3128	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3129	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	a39d0d5	2022-08-24 06:48:07 +0000	[diff] [blame]	3130	0 \
				3131	-c "=> write client hello" \
				3132	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3133	-c "client hello, adding psk_key_exchange_modes extension" \
				3134	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3135	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	a39d0d5	2022-08-24 06:48:07 +0000	[diff] [blame]	3136	-c "<= write client hello" \
				3137	-c "HTTP/1.0 200 ok"
				3138
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3139	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	a39d0d5	2022-08-24 06:48:07 +0000	[diff] [blame]	3140	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3141	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3142	requires_config_enabled MBEDTLS_DEBUG_C
				3143	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3144	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3145	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3146	run_test "TLS 1.3: m->O: ephemeral_all/ephemeral_all, good" \
Xiaokang Qian	a39d0d5	2022-08-24 06:48:07 +0000	[diff] [blame]	3147	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
				3148	"$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
				3149	0 \
				3150	-c "=> write client hello" \
				3151	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3152	-c "client hello, adding psk_key_exchange_modes extension" \
				3153	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3154	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	a39d0d5	2022-08-24 06:48:07 +0000	[diff] [blame]	3155	-c "<= write client hello" \
				3156	-c "HTTP/1.0 200 ok"
				3157
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3158	#OPENSSL-SERVER all mode
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3159	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3160	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3161	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3162	requires_config_enabled MBEDTLS_DEBUG_C
				3163	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3164	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				3165	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3166	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3167	run_test "TLS 1.3: m->O: all/all, good" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3168	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3169	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3170	0 \
				3171	-c "=> write client hello" \
				3172	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3173	-c "client hello, adding psk_key_exchange_modes extension" \
				3174	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3175	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3176	-c "<= write client hello" \
				3177	-c "HTTP/1.0 200 ok"
				3178
Przemek Stekiel	8bfe897	2023-06-26 12:59:45 +0200	[diff] [blame]	3179	requires_openssl_tls1_3_with_compatible_ephemeral
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3180	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3181	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3182	requires_config_enabled MBEDTLS_DEBUG_C
				3183	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3184	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				3185	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3186	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3187	run_test "TLS 1.3: m->O: all/ephemeral_all, good" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3188	"$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
				3189	"$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
				3190	0 \
				3191	-c "=> write client hello" \
				3192	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3193	-c "client hello, adding psk_key_exchange_modes extension" \
				3194	-c "client hello, adding PSK binder list" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3195	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3196	-c "<= write client hello" \
				3197	-c "HTTP/1.0 200 ok"
				3198
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3199	#GNUTLS-SERVER psk mode
				3200	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3201	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3202	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3203	requires_config_enabled MBEDTLS_DEBUG_C
				3204	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3205	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3206	run_test "TLS 1.3: m->G: psk/all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3207	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3208	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3209	0 \
				3210	-c "=> write client hello" \
				3211	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3212	-c "client hello, adding psk_key_exchange_modes extension" \
				3213	-c "client hello, adding PSK binder list" \
				3214	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3215	-s "Parsing extension 'Pre Shared Key/41'" \
				3216	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3217	-c "Selected key exchange mode: psk$" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3218	-c "HTTP/1.0 200 OK"
				3219
				3220	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3221	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3222	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3223	requires_config_enabled MBEDTLS_DEBUG_C
				3224	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3225	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3226	run_test "TLS 1.3: m->G: psk/ephemeral_all, fail - no common kex mode" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3227	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3228	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3229	1 \
				3230	-c "=> write client hello" \
				3231	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3232	-c "client hello, adding psk_key_exchange_modes extension" \
				3233	-c "client hello, adding PSK binder list" \
				3234	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3235	-s "Parsing extension 'Pre Shared Key/41'" \
				3236	-c "<= write client hello" \
				3237	-c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
				3238
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3239	#GNUTLS-SERVER psk_all mode
				3240	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3241	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3242	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3243	requires_config_enabled MBEDTLS_DEBUG_C
				3244	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3245	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				3246	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3247	run_test "TLS 1.3: m->G: psk_all/all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3248	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3249	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3250	0 \
				3251	-c "=> write client hello" \
				3252	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3253	-c "client hello, adding psk_key_exchange_modes extension" \
				3254	-c "client hello, adding PSK binder list" \
				3255	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3256	-s "Parsing extension 'Pre Shared Key/41'" \
				3257	-c "<= write client hello" \
Ronald Cron	a709a0f	2022-09-27 16:46:11 +0200	[diff] [blame]	3258	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3259	-c "HTTP/1.0 200 OK"
				3260
				3261	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3262	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3263	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3264	requires_config_enabled MBEDTLS_DEBUG_C
				3265	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3266	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				3267	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Ronald Cron	a709a0f	2022-09-27 16:46:11 +0200	[diff] [blame]	3268	run_test "TLS 1.3: m->G: psk_all/ephemeral_all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3269	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3270	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Ronald Cron	a709a0f	2022-09-27 16:46:11 +0200	[diff] [blame]	3271	0 \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3272	-c "=> write client hello" \
				3273	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3274	-c "client hello, adding psk_key_exchange_modes extension" \
				3275	-c "client hello, adding PSK binder list" \
				3276	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3277	-s "Parsing extension 'Pre Shared Key/41'" \
				3278	-c "<= write client hello" \
Ronald Cron	a709a0f	2022-09-27 16:46:11 +0200	[diff] [blame]	3279	-c "Selected key exchange mode: psk_ephemeral" \
				3280	-c "HTTP/1.0 200 OK"
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3281
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3282	#GNUTLS-SERVER psk_ephemeral mode
				3283	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3284	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3285	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3286	requires_config_enabled MBEDTLS_DEBUG_C
				3287	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3288	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3289	run_test "TLS 1.3: m->G: psk_ephemeral/all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3290	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3291	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3292	0 \
				3293	-c "=> write client hello" \
				3294	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3295	-c "client hello, adding psk_key_exchange_modes extension" \
				3296	-c "client hello, adding PSK binder list" \
				3297	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3298	-s "Parsing extension 'Pre Shared Key/41'" \
				3299	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3300	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3301	-c "HTTP/1.0 200 OK"
				3302
				3303	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3304	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3305	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3306	requires_config_enabled MBEDTLS_DEBUG_C
				3307	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3308	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3309	run_test "TLS 1.3: m->G: psk_ephemeral/ephemeral_all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3310	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3311	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3312	0 \
				3313	-c "=> write client hello" \
				3314	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3315	-c "client hello, adding psk_key_exchange_modes extension" \
				3316	-c "client hello, adding PSK binder list" \
				3317	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3318	-s "Parsing extension 'Pre Shared Key/41'" \
				3319	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3320	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3321	-c "HTTP/1.0 200 OK"
				3322
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3323	#GNUTLS-SERVER ephemeral mode
				3324	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3325	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3326	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3327	requires_config_enabled MBEDTLS_DEBUG_C
				3328	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3329	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3330	run_test "TLS 1.3: m->G: ephemeral/all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3331	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3332	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3333	0 \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3334	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3335	-c "HTTP/1.0 200 OK"
				3336
				3337	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3338	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3339	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3340	requires_config_enabled MBEDTLS_DEBUG_C
				3341	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3342	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3343	run_test "TLS 1.3: m->G: ephemeral/ephemeral_all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3344	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3345	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3346	0 \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3347	-c "Selected key exchange mode: ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3348	-c "HTTP/1.0 200 OK"
				3349
				3350	#GNUTLS-SERVER ephemeral_all mode
				3351	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3352	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3353	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3354	requires_config_enabled MBEDTLS_DEBUG_C
				3355	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3356	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3357	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3358	run_test "TLS 1.3: m->G: ephemeral_all/all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3359	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3360	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3361	0 \
				3362	-c "=> write client hello" \
				3363	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3364	-c "client hello, adding psk_key_exchange_modes extension" \
				3365	-c "client hello, adding PSK binder list" \
				3366	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3367	-s "Parsing extension 'Pre Shared Key/41'" \
				3368	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3369	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3370	-c "HTTP/1.0 200 OK"
				3371
				3372	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3373	requires_gnutls_tls1_3
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3374	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3375	requires_config_enabled MBEDTLS_DEBUG_C
				3376	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3377	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3378	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3379	run_test "TLS 1.3: m->G: ephemeral_all/ephemeral_all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3380	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3381	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3382	0 \
				3383	-c "=> write client hello" \
				3384	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3385	-c "client hello, adding psk_key_exchange_modes extension" \
				3386	-c "client hello, adding PSK binder list" \
				3387	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3388	-s "Parsing extension 'Pre Shared Key/41'" \
				3389	-c "<= write client hello" \
Xiaokang Qian	ca343ae	2022-09-28 02:07:54 +0000	[diff] [blame]	3390	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	2aaf1c1	2022-08-30 09:18:59 +0000	[diff] [blame]	3391	-c "HTTP/1.0 200 OK"
				3392
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3393	#GNUTLS-SERVER all mode
				3394	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3395	requires_gnutls_tls1_3
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3396	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3397	requires_config_enabled MBEDTLS_DEBUG_C
				3398	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3399	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				3400	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3401	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3402	run_test "TLS 1.3: m->G: all/all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3403	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3404	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3405	0 \
				3406	-c "=> write client hello" \
				3407	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3408	-c "client hello, adding psk_key_exchange_modes extension" \
				3409	-c "client hello, adding PSK binder list" \
				3410	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3411	-s "Parsing extension 'Pre Shared Key/41'" \
				3412	-c "<= write client hello" \
Ronald Cron	a709a0f	2022-09-27 16:46:11 +0200	[diff] [blame]	3413	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3414	-c "HTTP/1.0 200 OK"
				3415
				3416	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
				3417	requires_gnutls_tls1_3
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3418	requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
				3419	requires_config_enabled MBEDTLS_DEBUG_C
				3420	requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron	5962584	2022-10-17 10:36:34 +0200	[diff] [blame]	3421	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
				3422	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
				3423	requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian	8f7d7c7	2022-09-07 10:10:16 +0000	[diff] [blame]	3424	run_test "TLS 1.3: m->G: all/ephemeral_all, good" \
David Horstmann	dcf18dd	2024-06-11 17:44:00 +0100	[diff] [blame]	3425	"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskpasswd=../framework/data_files/simplepass.psk" \
Ronald Cron	50ae84e	2023-03-14 08:59:56 +0100	[diff] [blame]	3426	"$P_CLI debug_level=4 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3427	0 \
				3428	-c "=> write client hello" \
				3429	-c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
				3430	-c "client hello, adding psk_key_exchange_modes extension" \
				3431	-c "client hello, adding PSK binder list" \
				3432	-s "Parsing extension 'PSK Key Exchange Modes/45'" \
				3433	-s "Parsing extension 'Pre Shared Key/41'" \
				3434	-c "<= write client hello" \
Ronald Cron	a709a0f	2022-09-27 16:46:11 +0200	[diff] [blame]	3435	-c "Selected key exchange mode: psk_ephemeral" \
Xiaokang Qian	df6a389	2022-08-24 06:55:18 +0000	[diff] [blame]	3436	-c "HTTP/1.0 200 OK"