blob: 94c339ebb3c5b299e0058efddd65bd8fd24fe3da [file] [log] [blame]
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001#!/bin/sh
2
Simon Butcher58eddef2016-05-19 23:43:11 +01003# ssl-opt.sh
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01004#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Bence Szépkútic7da1fe2020-05-26 01:54:15 +02006# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
19#
Simon Butcher58eddef2016-05-19 23:43:11 +010020# Purpose
21#
22# Executes tests to prove various TLS/SSL options and extensions.
23#
24# The goal is not to cover every ciphersuite/version, but instead to cover
25# specific options (max fragment length, truncated hmac, etc) or procedures
26# (session resumption from cache or ticket, renego, etc).
27#
28# The tests assume a build with default options, with exceptions expressed
29# with a dependency. The tests focus on functionality and do not consider
30# performance.
31#
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010032
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010033set -u
34
Jaeden Amero6e70eb22019-07-03 13:51:04 +010035# Limit the size of each log to 10 GiB, in case of failures with this script
36# where it may output seemingly unlimited length error logs.
37ulimit -f 20971520
38
Gilles Peskine560280b2019-09-16 15:17:38 +020039ORIGINAL_PWD=$PWD
40if ! cd "$(dirname "$0")"; then
41 exit 125
Angus Grattonc4dd0732018-04-11 16:28:39 +100042fi
43
Antonin Décimo36e89b52019-01-23 15:24:37 +010044# default values, can be overridden by the environment
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +010045: ${P_SRV:=../programs/ssl/ssl_server2}
46: ${P_CLI:=../programs/ssl/ssl_client2}
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020047: ${P_PXY:=../programs/test/udp_proxy}
Jerry Yubbfa1d82021-12-06 16:52:57 +080048: ${P_QUERY:=../programs/test/query_compile_time_config}
Manuel Pégourié-Gonnard89d40272022-12-19 11:42:12 +010049: ${OPENSSL:=openssl}
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020050: ${GNUTLS_CLI:=gnutls-cli}
51: ${GNUTLS_SERV:=gnutls-serv}
Gilles Peskined50177f2017-05-16 17:53:03 +020052: ${PERL:=perl}
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010053
Manuel Pégourié-Gonnard89d40272022-12-19 11:42:12 +010054# The OPENSSL variable used to be OPENSSL_CMD for historical reasons.
55# To help the migration, error out if the old variable is set,
56# but only if it has a different value than the new one.
57if [ "${OPENSSL_CMD+set}" = set ]; then
58 # the variable is set, we can now check its value
59 if [ "$OPENSSL_CMD" != "$OPENSSL" ]; then
60 echo "Please use OPENSSL instead of OPENSSL_CMD." >&2
61 exit 125
62 fi
63fi
64
Gilles Peskine560280b2019-09-16 15:17:38 +020065guess_config_name() {
66 if git diff --quiet ../include/mbedtls/config.h 2>/dev/null; then
67 echo "default"
68 else
69 echo "unknown"
70 fi
71}
72: ${MBEDTLS_TEST_OUTCOME_FILE=}
73: ${MBEDTLS_TEST_CONFIGURATION:="$(guess_config_name)"}
74: ${MBEDTLS_TEST_PLATFORM:="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
75
Manuel Pégourié-Gonnard89d40272022-12-19 11:42:12 +010076O_SRV="$OPENSSL s_server -www -cert data_files/server5.crt -key data_files/server5.key"
77O_CLI="echo 'GET / HTTP/1.0' | $OPENSSL s_client"
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020078G_SRV="$GNUTLS_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010079G_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_CLI --x509cafile data_files/test-ca_cat12.crt"
Gilles Peskined50177f2017-05-16 17:53:03 +020080TCP_CLIENT="$PERL scripts/tcp_client.pl"
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010081
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020082# alternative versions of OpenSSL and GnuTLS (no default path)
83
84if [ -n "${OPENSSL_LEGACY:-}" ]; then
85 O_LEGACY_SRV="$OPENSSL_LEGACY s_server -www -cert data_files/server5.crt -key data_files/server5.key"
86 O_LEGACY_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_LEGACY s_client"
87else
88 O_LEGACY_SRV=false
89 O_LEGACY_CLI=false
90fi
91
Paul Elliott633a74e2021-10-13 18:31:07 +010092if [ -n "${OPENSSL_NEXT:-}" ]; then
93 O_NEXT_SRV="$OPENSSL_NEXT s_server -www -cert data_files/server5.crt -key data_files/server5.key"
94 O_NEXT_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_NEXT s_client"
95else
96 O_NEXT_SRV=false
97 O_NEXT_CLI=false
98fi
99
Hanno Becker58e9dc32018-08-17 15:53:21 +0100100if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200101 G_NEXT_SRV="$GNUTLS_NEXT_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
102else
103 G_NEXT_SRV=false
104fi
105
Hanno Becker58e9dc32018-08-17 15:53:21 +0100106if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200107 G_NEXT_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_NEXT_CLI --x509cafile data_files/test-ca_cat12.crt"
108else
109 G_NEXT_CLI=false
110fi
111
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100112TESTS=0
113FAILS=0
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200114SKIPS=0
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100115
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +0000116CONFIG_H='../include/mbedtls/config.h'
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +0200117
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100118MEMCHECK=0
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100119FILTER='.*'
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200120EXCLUDE='^$'
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100121
Paul Bakkere20310a2016-05-10 11:18:17 +0100122SHOW_TEST_NUMBER=0
Paul Bakkerb7584a52016-05-10 10:50:43 +0100123RUN_TEST_NUMBER=''
124
Paul Bakkeracaac852016-05-10 11:47:13 +0100125PRESERVE_LOGS=0
126
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200127# Pick a "unique" server port in the range 10000-19999, and a proxy
128# port which is this plus 10000. Each port number may be independently
129# overridden by a command line option.
130SRV_PORT=$(($$ % 10000 + 10000))
131PXY_PORT=$((SRV_PORT + 10000))
132
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100133print_usage() {
134 echo "Usage: $0 [options]"
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100135 printf " -h|--help\tPrint this help.\n"
136 printf " -m|--memcheck\tCheck memory leaks and errors.\n"
Gilles Peskine9fa4ed62020-08-26 22:35:46 +0200137 printf " -f|--filter\tOnly matching tests are executed (substring or BRE)\n"
138 printf " -e|--exclude\tMatching tests are excluded (substring or BRE)\n"
Paul Bakkerb7584a52016-05-10 10:50:43 +0100139 printf " -n|--number\tExecute only numbered test (comma-separated, e.g. '245,256')\n"
Paul Bakkere20310a2016-05-10 11:18:17 +0100140 printf " -s|--show-numbers\tShow test numbers in front of test names\n"
Paul Bakkeracaac852016-05-10 11:47:13 +0100141 printf " -p|--preserve-logs\tPreserve logs of successful tests as well\n"
Gilles Peskine560280b2019-09-16 15:17:38 +0200142 printf " --outcome-file\tFile where test outcomes are written\n"
143 printf " \t(default: \$MBEDTLS_TEST_OUTCOME_FILE, none if empty)\n"
144 printf " --port \tTCP/UDP port (default: randomish 1xxxx)\n"
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200145 printf " --proxy-port\tTCP/UDP proxy port (default: randomish 2xxxx)\n"
Gilles Peskine560280b2019-09-16 15:17:38 +0200146 printf " --seed \tInteger seed value to use for this test run\n"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100147}
148
149get_options() {
150 while [ $# -gt 0 ]; do
151 case "$1" in
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100152 -f|--filter)
153 shift; FILTER=$1
154 ;;
155 -e|--exclude)
156 shift; EXCLUDE=$1
157 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100158 -m|--memcheck)
159 MEMCHECK=1
160 ;;
Paul Bakkerb7584a52016-05-10 10:50:43 +0100161 -n|--number)
162 shift; RUN_TEST_NUMBER=$1
163 ;;
Paul Bakkere20310a2016-05-10 11:18:17 +0100164 -s|--show-numbers)
165 SHOW_TEST_NUMBER=1
166 ;;
Paul Bakkeracaac852016-05-10 11:47:13 +0100167 -p|--preserve-logs)
168 PRESERVE_LOGS=1
169 ;;
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200170 --port)
171 shift; SRV_PORT=$1
172 ;;
173 --proxy-port)
174 shift; PXY_PORT=$1
175 ;;
Andres AGf04f54d2016-10-10 15:46:20 +0100176 --seed)
177 shift; SEED="$1"
178 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100179 -h|--help)
180 print_usage
181 exit 0
182 ;;
183 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200184 echo "Unknown argument: '$1'"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100185 print_usage
186 exit 1
187 ;;
188 esac
189 shift
190 done
191}
192
Gilles Peskine560280b2019-09-16 15:17:38 +0200193# Make the outcome file path relative to the original directory, not
194# to .../tests
195case "$MBEDTLS_TEST_OUTCOME_FILE" in
196 [!/]*)
197 MBEDTLS_TEST_OUTCOME_FILE="$ORIGINAL_PWD/$MBEDTLS_TEST_OUTCOME_FILE"
198 ;;
199esac
200
Gilles Peskine64457492020-08-26 21:53:33 +0200201# Read boolean configuration options from config.h for easy and quick
202# testing. Skip non-boolean options (with something other than spaces
203# and a comment after "#define SYMBOL"). The variable contains a
204# space-separated list of symbols.
Jerry Yucf080ce2021-12-10 18:45:51 +0800205CONFIGS_ENABLED=" $(echo `$P_QUERY -l` )"
Hanno Becker3b8b40c2018-08-28 10:25:41 +0100206# Skip next test; use this macro to skip tests which are legitimate
207# in theory and expected to be re-introduced at some point, but
208# aren't expected to succeed at the moment due to problems outside
209# our control (such as bugs in other TLS implementations).
210skip_next_test() {
211 SKIP_NEXT="YES"
212}
213
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100214# skip next test if the flag is not enabled in config.h
215requires_config_enabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200216 case $CONFIGS_ENABLED in
Jerry Yu969c01a2021-12-10 20:29:02 +0800217 *" $1"[\ =]*) :;;
Gilles Peskine64457492020-08-26 21:53:33 +0200218 *) SKIP_NEXT="YES";;
219 esac
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100220}
221
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200222# skip next test if the flag is enabled in config.h
223requires_config_disabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200224 case $CONFIGS_ENABLED in
Jerry Yu969c01a2021-12-10 20:29:02 +0800225 *" $1"[\ =]*) SKIP_NEXT="YES";;
Gilles Peskine64457492020-08-26 21:53:33 +0200226 esac
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200227}
228
Hanno Becker7c48dd12018-08-28 16:09:22 +0100229get_config_value_or_default() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100230 # This function uses the query_config command line option to query the
231 # required Mbed TLS compile time configuration from the ssl_server2
232 # program. The command will always return a success value if the
233 # configuration is defined and the value will be printed to stdout.
234 #
235 # Note that if the configuration is not defined or is defined to nothing,
236 # the output of this function will be an empty string.
237 ${P_SRV} "query_config=${1}"
Hanno Becker7c48dd12018-08-28 16:09:22 +0100238}
239
240requires_config_value_at_least() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100241 VAL="$( get_config_value_or_default "$1" )"
242 if [ -z "$VAL" ]; then
243 # Should never happen
244 echo "Mbed TLS configuration $1 is not defined"
245 exit 1
246 elif [ "$VAL" -lt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100247 SKIP_NEXT="YES"
248 fi
249}
250
251requires_config_value_at_most() {
Hanno Becker7c48dd12018-08-28 16:09:22 +0100252 VAL=$( get_config_value_or_default "$1" )
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100253 if [ -z "$VAL" ]; then
254 # Should never happen
255 echo "Mbed TLS configuration $1 is not defined"
256 exit 1
257 elif [ "$VAL" -gt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100258 SKIP_NEXT="YES"
259 fi
260}
261
Yuto Takano8a693ef2021-07-02 13:10:41 +0100262requires_config_value_equals() {
263 VAL=$( get_config_value_or_default "$1" )
264 if [ -z "$VAL" ]; then
265 # Should never happen
266 echo "Mbed TLS configuration $1 is not defined"
267 exit 1
268 elif [ "$VAL" -ne "$2" ]; then
269 SKIP_NEXT="YES"
270 fi
271}
272
Gilles Peskine4b137d12022-04-08 19:33:07 +0200273# Require Mbed TLS to support the given protocol version.
274#
275# Inputs:
276# * $1: protocol version in mbedtls syntax (argument to force_version=)
277requires_protocol_version() {
278 # Support for DTLS is detected separately in detect_dtls().
279 case "$1" in
280 ssl3) requires_config_enabled MBEDTLS_SSL_PROTO_SSL3;;
281 tls1) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1;;
282 tls1_1|dtls1) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1;;
283 tls12|dtls12) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2;;
284 *) echo "Unknown required protocol version: $1"; exit 1;;
285 esac
286}
287
Gilles Peskine64457492020-08-26 21:53:33 +0200288# Space-separated list of ciphersuites supported by this build of
289# Mbed TLS.
290P_CIPHERSUITES=" $($P_CLI --help 2>/dev/null |
291 grep TLS- |
292 tr -s ' \n' ' ')"
Hanno Becker9d76d562018-11-16 17:27:29 +0000293requires_ciphersuite_enabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200294 case $P_CIPHERSUITES in
295 *" $1 "*) :;;
296 *) SKIP_NEXT="YES";;
297 esac
Hanno Becker9d76d562018-11-16 17:27:29 +0000298}
299
Gilles Peskine511fdf42022-04-08 19:26:26 +0200300# detect_required_features CMD [RUN_TEST_OPTION...]
301# If CMD (call to a TLS client or server program) requires certain features,
302# arrange to only run the following test case if those features are enabled.
303detect_required_features() {
Gilles Peskine0d721652020-06-26 23:35:53 +0200304 case "$1" in
Gilles Peskine4b137d12022-04-08 19:33:07 +0200305 *\ force_version=*)
306 tmp="${1##*\ force_version=}"
307 tmp="${tmp%%[!-0-9A-Z_a-z]*}"
308 requires_protocol_version "$tmp";;
309 esac
310
311 case "$1" in
Gilles Peskine511fdf42022-04-08 19:26:26 +0200312 *\ force_ciphersuite=*)
313 tmp="${1##*\ force_ciphersuite=}"
314 tmp="${tmp%%[!-0-9A-Z_a-z]*}"
315 case "$*" in
316 *"-s SSL - The server has no ciphersuites in common"*)
317 # This test case expects a ciphersuite mismatch, so it
318 # doesn't actually require the ciphersuite to be enabled.
319 :;;
320 *) requires_ciphersuite_enabled "$tmp";;
321 esac;;
Gilles Peskine0d721652020-06-26 23:35:53 +0200322 esac
323
Gilles Peskine3c985f62022-04-08 19:29:27 +0200324 case " $1 " in
325 *[-_\ =]tickets=[^0]*)
326 requires_config_enabled MBEDTLS_SSL_TICKET_C;;
327 esac
328 case " $1 " in
329 *[-_\ =]alpn=*)
330 requires_config_enabled MBEDTLS_SSL_ALPN;;
331 esac
332
Gilles Peskinebba3b4c2022-04-09 00:08:47 +0200333 case " $1 " in
Gilles Peskine6e257b02022-04-13 14:19:57 +0200334 *\ badmac_limit=*)
335 requires_config_enabled MBEDTLS_SSL_DTLS_BADMAC_LIMIT;;
336 esac
337
338 case " $1 " in
Gilles Peskinebba3b4c2022-04-09 00:08:47 +0200339 *\ fallback=1\ *|*\ -fallback_scsv\ *)
340 requires_config_enabled MBEDTLS_SSL_FALLBACK_SCSV;;
341 esac
342
Gilles Peskine511fdf42022-04-08 19:26:26 +0200343 unset tmp
Gilles Peskine0d721652020-06-26 23:35:53 +0200344}
345
Gilles Peskine22cc6492022-03-14 18:21:24 +0100346requires_certificate_authentication () {
347 if [ "$PSK_ONLY" = "YES" ]; then
348 SKIP_NEXT="YES"
349 fi
350}
351
Gilles Peskine89d892f2022-02-25 19:52:52 +0100352adapt_cmd_for_psk () {
353 case "$2" in
354 *openssl*) s='-psk abc123 -nocert';;
355 *gnutls-*) s='--pskkey=abc123';;
356 *) s='psk=abc123';;
357 esac
358 eval $1='"$2 $s"'
359 unset s
360}
361
362# maybe_adapt_for_psk [RUN_TEST_OPTION...]
363# If running in a PSK-only build, maybe adapt the test to use a pre-shared key.
364#
365# If not running in a PSK-only build, do nothing.
366# If the test looks like it doesn't use a pre-shared key but can run with a
367# pre-shared key, pass a pre-shared key. If the test looks like it can't run
368# with a pre-shared key, skip it. If the test looks like it's already using
369# a pre-shared key, do nothing.
370#
Gilles Peskined5b1a302022-04-05 22:00:17 +0200371# This code does not consider builds with ECDHE-PSK or RSA-PSK.
Gilles Peskine89d892f2022-02-25 19:52:52 +0100372#
373# Inputs:
374# * $CLI_CMD, $SRV_CMD, $PXY_CMD: client/server/proxy commands.
375# * $PSK_ONLY: YES if running in a PSK-only build (no asymmetric key exchanges).
376# * "$@": options passed to run_test.
377#
378# Outputs:
379# * $CLI_CMD, $SRV_CMD: may be modified to add PSK-relevant arguments.
380# * $SKIP_NEXT: set to YES if the test can't run with PSK.
381maybe_adapt_for_psk() {
382 if [ "$PSK_ONLY" != "YES" ]; then
383 return
384 fi
385 if [ "$SKIP_NEXT" = "YES" ]; then
386 return
387 fi
388 case "$CLI_CMD $SRV_CMD" in
389 *[-_\ =]psk*|*[-_\ =]PSK*)
390 return;;
391 *force_ciphersuite*)
392 # The test case forces a non-PSK cipher suite. In some cases, a
393 # PSK cipher suite could be substituted, but we're not ready for
394 # that yet.
395 SKIP_NEXT="YES"
396 return;;
397 *\ auth_mode=*|*[-_\ =]crt[_=]*)
398 # The test case involves certificates. PSK won't do.
399 SKIP_NEXT="YES"
400 return;;
401 esac
402 adapt_cmd_for_psk CLI_CMD "$CLI_CMD"
403 adapt_cmd_for_psk SRV_CMD "$SRV_CMD"
404}
405
406case " $CONFIGS_ENABLED " in
407 *\ MBEDTLS_KEY_EXCHANGE_[^P]*) PSK_ONLY="NO";;
408 *\ MBEDTLS_KEY_EXCHANGE_P[^S]*) PSK_ONLY="NO";;
409 *\ MBEDTLS_KEY_EXCHANGE_PS[^K]*) PSK_ONLY="NO";;
410 *\ MBEDTLS_KEY_EXCHANGE_PSK[^_]*) PSK_ONLY="NO";;
411 *\ MBEDTLS_KEY_EXCHANGE_PSK_ENABLED\ *) PSK_ONLY="YES";;
412 *) PSK_ONLY="NO";;
413esac
414
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200415# skip next test if OpenSSL doesn't support FALLBACK_SCSV
416requires_openssl_with_fallback_scsv() {
417 if [ -z "${OPENSSL_HAS_FBSCSV:-}" ]; then
Manuel Pégourié-Gonnard89d40272022-12-19 11:42:12 +0100418 if $OPENSSL s_client -help 2>&1 | grep fallback_scsv >/dev/null
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200419 then
420 OPENSSL_HAS_FBSCSV="YES"
421 else
422 OPENSSL_HAS_FBSCSV="NO"
423 fi
424 fi
425 if [ "$OPENSSL_HAS_FBSCSV" = "NO" ]; then
426 SKIP_NEXT="YES"
427 fi
428}
429
Yuto Takanobec7cf72021-07-02 10:10:49 +0100430# skip next test if either IN_CONTENT_LEN or MAX_CONTENT_LEN are below a value
431requires_max_content_len() {
432 requires_config_value_at_least "MBEDTLS_SSL_IN_CONTENT_LEN" $1
433 requires_config_value_at_least "MBEDTLS_SSL_OUT_CONTENT_LEN" $1
434}
435
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200436# skip next test if GnuTLS isn't available
437requires_gnutls() {
438 if [ -z "${GNUTLS_AVAILABLE:-}" ]; then
Manuel Pégourié-Gonnard03db6b02015-06-26 15:45:30 +0200439 if ( which "$GNUTLS_CLI" && which "$GNUTLS_SERV" ) >/dev/null 2>&1; then
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200440 GNUTLS_AVAILABLE="YES"
441 else
442 GNUTLS_AVAILABLE="NO"
443 fi
444 fi
445 if [ "$GNUTLS_AVAILABLE" = "NO" ]; then
446 SKIP_NEXT="YES"
447 fi
448}
449
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200450# skip next test if GnuTLS-next isn't available
451requires_gnutls_next() {
452 if [ -z "${GNUTLS_NEXT_AVAILABLE:-}" ]; then
453 if ( which "${GNUTLS_NEXT_CLI:-}" && which "${GNUTLS_NEXT_SERV:-}" ) >/dev/null 2>&1; then
454 GNUTLS_NEXT_AVAILABLE="YES"
455 else
456 GNUTLS_NEXT_AVAILABLE="NO"
457 fi
458 fi
459 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
460 SKIP_NEXT="YES"
461 fi
462}
463
464# skip next test if OpenSSL-legacy isn't available
465requires_openssl_legacy() {
466 if [ -z "${OPENSSL_LEGACY_AVAILABLE:-}" ]; then
467 if which "${OPENSSL_LEGACY:-}" >/dev/null 2>&1; then
468 OPENSSL_LEGACY_AVAILABLE="YES"
469 else
470 OPENSSL_LEGACY_AVAILABLE="NO"
471 fi
472 fi
473 if [ "$OPENSSL_LEGACY_AVAILABLE" = "NO" ]; then
474 SKIP_NEXT="YES"
475 fi
476}
477
Paul Elliott633a74e2021-10-13 18:31:07 +0100478requires_openssl_next() {
479 if [ -z "${OPENSSL_NEXT_AVAILABLE:-}" ]; then
480 if which "${OPENSSL_NEXT:-}" >/dev/null 2>&1; then
481 OPENSSL_NEXT_AVAILABLE="YES"
482 else
483 OPENSSL_NEXT_AVAILABLE="NO"
484 fi
485 fi
486 if [ "$OPENSSL_NEXT_AVAILABLE" = "NO" ]; then
487 SKIP_NEXT="YES"
488 fi
489}
490
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200491# skip next test if IPv6 isn't available on this host
492requires_ipv6() {
493 if [ -z "${HAS_IPV6:-}" ]; then
494 $P_SRV server_addr='::1' > $SRV_OUT 2>&1 &
495 SRV_PID=$!
496 sleep 1
497 kill $SRV_PID >/dev/null 2>&1
498 if grep "NET - Binding of the socket failed" $SRV_OUT >/dev/null; then
499 HAS_IPV6="NO"
500 else
501 HAS_IPV6="YES"
502 fi
503 rm -r $SRV_OUT
504 fi
505
506 if [ "$HAS_IPV6" = "NO" ]; then
507 SKIP_NEXT="YES"
508 fi
509}
510
Andrzej Kurekb4593462018-10-11 08:43:30 -0400511# skip next test if it's i686 or uname is not available
512requires_not_i686() {
513 if [ -z "${IS_I686:-}" ]; then
514 IS_I686="YES"
515 if which "uname" >/dev/null 2>&1; then
516 if [ -z "$(uname -a | grep i686)" ]; then
517 IS_I686="NO"
518 fi
519 fi
520 fi
521 if [ "$IS_I686" = "YES" ]; then
522 SKIP_NEXT="YES"
523 fi
524}
525
Angus Grattonc4dd0732018-04-11 16:28:39 +1000526# Calculate the input & output maximum content lengths set in the config
Yuto Takanoab9e43332021-06-22 07:16:40 +0100527MAX_CONTENT_LEN=$( get_config_value_or_default "MBEDTLS_SSL_MAX_CONTENT_LEN" )
528MAX_IN_LEN=$( get_config_value_or_default "MBEDTLS_SSL_IN_CONTENT_LEN" )
529MAX_OUT_LEN=$( get_config_value_or_default "MBEDTLS_SSL_OUT_CONTENT_LEN" )
Angus Grattonc4dd0732018-04-11 16:28:39 +1000530
Yuto Takano18ddccc2021-06-21 19:43:33 +0100531# Calculate the maximum content length that fits both
Angus Grattonc4dd0732018-04-11 16:28:39 +1000532if [ "$MAX_IN_LEN" -lt "$MAX_CONTENT_LEN" ]; then
533 MAX_CONTENT_LEN="$MAX_IN_LEN"
534fi
535if [ "$MAX_OUT_LEN" -lt "$MAX_CONTENT_LEN" ]; then
536 MAX_CONTENT_LEN="$MAX_OUT_LEN"
537fi
538
539# skip the next test if the SSL output buffer is less than 16KB
540requires_full_size_output_buffer() {
541 if [ "$MAX_OUT_LEN" -ne 16384 ]; then
542 SKIP_NEXT="YES"
543 fi
544}
545
Manuel Pégourié-Gonnard76fe9e42014-09-24 15:17:31 +0200546# skip the next test if valgrind is in use
547not_with_valgrind() {
548 if [ "$MEMCHECK" -gt 0 ]; then
549 SKIP_NEXT="YES"
550 fi
551}
552
Paul Bakker362689d2016-05-13 10:33:25 +0100553# skip the next test if valgrind is NOT in use
554only_with_valgrind() {
555 if [ "$MEMCHECK" -eq 0 ]; then
556 SKIP_NEXT="YES"
557 fi
558}
559
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200560# multiply the client timeout delay by the given factor for the next test
Janos Follath74537a62016-09-02 13:45:28 +0100561client_needs_more_time() {
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200562 CLI_DELAY_FACTOR=$1
563}
564
Janos Follath74537a62016-09-02 13:45:28 +0100565# wait for the given seconds after the client finished in the next test
566server_needs_more_time() {
567 SRV_DELAY_SECONDS=$1
568}
569
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100570# print_name <name>
571print_name() {
Paul Bakkere20310a2016-05-10 11:18:17 +0100572 TESTS=$(( $TESTS + 1 ))
573 LINE=""
574
575 if [ "$SHOW_TEST_NUMBER" -gt 0 ]; then
576 LINE="$TESTS "
577 fi
578
579 LINE="$LINE$1"
Gilles Peskine231befa2020-08-26 20:05:11 +0200580 printf "%s " "$LINE"
Paul Bakkere20310a2016-05-10 11:18:17 +0100581 LEN=$(( 72 - `echo "$LINE" | wc -c` ))
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100582 for i in `seq 1 $LEN`; do printf '.'; done
583 printf ' '
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100584
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100585}
586
Gilles Peskine560280b2019-09-16 15:17:38 +0200587# record_outcome <outcome> [<failure-reason>]
588# The test name must be in $NAME.
589record_outcome() {
590 echo "$1"
591 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ]; then
592 printf '%s;%s;%s;%s;%s;%s\n' \
593 "$MBEDTLS_TEST_PLATFORM" "$MBEDTLS_TEST_CONFIGURATION" \
594 "ssl-opt" "$NAME" \
595 "$1" "${2-}" \
596 >>"$MBEDTLS_TEST_OUTCOME_FILE"
597 fi
598}
599
Gilles Peskineaa1d6ad2021-10-20 14:17:02 +0200600# True if the presence of the given pattern in a log definitely indicates
601# that the test has failed. False if the presence is inconclusive.
602#
603# Inputs:
604# * $1: pattern found in the logs
605# * $TIMES_LEFT: >0 if retrying is an option
606#
607# Outputs:
608# * $outcome: set to a retry reason if the pattern is inconclusive,
609# unchanged otherwise.
610# * Return value: 1 if the pattern is inconclusive,
611# 0 if the failure is definitive.
612log_pattern_presence_is_conclusive() {
613 # If we've run out of attempts, then don't retry no matter what.
614 if [ $TIMES_LEFT -eq 0 ]; then
615 return 0
616 fi
617 case $1 in
618 "resend")
619 # An undesired resend may have been caused by the OS dropping or
620 # delaying a packet at an inopportune time.
621 outcome="RETRY(resend)"
622 return 1;;
623 esac
624}
625
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100626# fail <message>
627fail() {
Gilles Peskine560280b2019-09-16 15:17:38 +0200628 record_outcome "FAIL" "$1"
Manuel Pégourié-Gonnard3eec6042014-02-27 15:37:24 +0100629 echo " ! $1"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100630
Manuel Pégourié-Gonnardc2b00922014-08-31 16:46:04 +0200631 mv $SRV_OUT o-srv-${TESTS}.log
632 mv $CLI_OUT o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200633 if [ -n "$PXY_CMD" ]; then
634 mv $PXY_OUT o-pxy-${TESTS}.log
635 fi
636 echo " ! outputs saved to o-XXX-${TESTS}.log"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100637
Manuel Pégourié-Gonnard3f3302f2020-06-08 11:49:05 +0200638 if [ "${LOG_FAILURE_ON_STDOUT:-0}" != 0 ]; then
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200639 echo " ! server output:"
640 cat o-srv-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200641 echo " ! ========================================================"
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200642 echo " ! client output:"
643 cat o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200644 if [ -n "$PXY_CMD" ]; then
645 echo " ! ========================================================"
646 echo " ! proxy output:"
647 cat o-pxy-${TESTS}.log
648 fi
649 echo ""
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200650 fi
651
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +0200652 FAILS=$(( $FAILS + 1 ))
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100653}
654
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100655# is_polar <cmd_line>
656is_polar() {
Gilles Peskine64457492020-08-26 21:53:33 +0200657 case "$1" in
658 *ssl_client2*) true;;
659 *ssl_server2*) true;;
660 *) false;;
661 esac
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100662}
663
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +0200664# openssl s_server doesn't have -www with DTLS
665check_osrv_dtls() {
Gilles Peskine64457492020-08-26 21:53:33 +0200666 case "$SRV_CMD" in
667 *s_server*-dtls*)
668 NEEDS_INPUT=1
669 SRV_CMD="$( echo $SRV_CMD | sed s/-www// )";;
670 *) NEEDS_INPUT=0;;
671 esac
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +0200672}
673
674# provide input to commands that need it
675provide_input() {
676 if [ $NEEDS_INPUT -eq 0 ]; then
677 return
678 fi
679
680 while true; do
681 echo "HTTP/1.0 200 OK"
682 sleep 1
683 done
684}
685
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100686# has_mem_err <log_file_name>
687has_mem_err() {
688 if ( grep -F 'All heap blocks were freed -- no leaks are possible' "$1" &&
689 grep -F 'ERROR SUMMARY: 0 errors from 0 contexts' "$1" ) > /dev/null
690 then
691 return 1 # false: does not have errors
692 else
693 return 0 # true: has errors
694 fi
695}
696
Unknownd364f4c2019-09-02 10:42:57 -0400697# Wait for process $2 named $3 to be listening on port $1. Print error to $4.
Gilles Peskine418b5362017-12-14 18:58:42 +0100698if type lsof >/dev/null 2>/dev/null; then
Unknownd364f4c2019-09-02 10:42:57 -0400699 wait_app_start() {
Paul Elliottce777382021-10-20 15:59:33 +0100700 newline='
701'
Gilles Peskine418b5362017-12-14 18:58:42 +0100702 START_TIME=$(date +%s)
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200703 if [ "$DTLS" -eq 1 ]; then
Gilles Peskine418b5362017-12-14 18:58:42 +0100704 proto=UDP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200705 else
Gilles Peskine418b5362017-12-14 18:58:42 +0100706 proto=TCP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200707 fi
Gilles Peskine418b5362017-12-14 18:58:42 +0100708 # Make a tight loop, server normally takes less than 1s to start.
Paul Elliott6cd97ce2021-10-19 17:56:39 +0100709 while true; do
Gilles Peskine36019d52022-04-15 22:53:18 +0200710 SERVER_PIDS=$(lsof -a -n -b -i "$proto:$1" -t)
Paul Elliottce777382021-10-20 15:59:33 +0100711 # When we use a proxy, it will be listening on the same port we
712 # are checking for as well as the server and lsof will list both.
Paul Elliottce777382021-10-20 15:59:33 +0100713 case ${newline}${SERVER_PIDS}${newline} in
Gilles Peskine36019d52022-04-15 22:53:18 +0200714 *${newline}${2}${newline}*) break;;
Paul Elliottce777382021-10-20 15:59:33 +0100715 esac
Gilles Peskine418b5362017-12-14 18:58:42 +0100716 if [ $(( $(date +%s) - $START_TIME )) -gt $DOG_DELAY ]; then
Unknownd364f4c2019-09-02 10:42:57 -0400717 echo "$3 START TIMEOUT"
718 echo "$3 START TIMEOUT" >> $4
Gilles Peskine418b5362017-12-14 18:58:42 +0100719 break
720 fi
721 # Linux and *BSD support decimal arguments to sleep. On other
722 # OSes this may be a tight loop.
723 sleep 0.1 2>/dev/null || true
724 done
725 }
726else
Unknownd364f4c2019-09-02 10:42:57 -0400727 echo "Warning: lsof not available, wait_app_start = sleep"
728 wait_app_start() {
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200729 sleep "$START_DELAY"
Gilles Peskine418b5362017-12-14 18:58:42 +0100730 }
731fi
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200732
Unknownd364f4c2019-09-02 10:42:57 -0400733# Wait for server process $2 to be listening on port $1.
734wait_server_start() {
735 wait_app_start $1 $2 "SERVER" $SRV_OUT
736}
737
738# Wait for proxy process $2 to be listening on port $1.
739wait_proxy_start() {
740 wait_app_start $1 $2 "PROXY" $PXY_OUT
741}
742
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100743# Given the client or server debug output, parse the unix timestamp that is
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +0100744# included in the first 4 bytes of the random bytes and check that it's within
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100745# acceptable bounds
746check_server_hello_time() {
747 # Extract the time from the debug (lvl 3) output of the client
Andres Amaya Garcia67d8da52017-09-15 15:49:24 +0100748 SERVER_HELLO_TIME="$(sed -n 's/.*server hello, current time: //p' < "$1")"
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100749 # Get the Unix timestamp for now
750 CUR_TIME=$(date +'%s')
751 THRESHOLD_IN_SECS=300
752
753 # Check if the ServerHello time was printed
754 if [ -z "$SERVER_HELLO_TIME" ]; then
755 return 1
756 fi
757
758 # Check the time in ServerHello is within acceptable bounds
759 if [ $SERVER_HELLO_TIME -lt $(( $CUR_TIME - $THRESHOLD_IN_SECS )) ]; then
760 # The time in ServerHello is at least 5 minutes before now
761 return 1
762 elif [ $SERVER_HELLO_TIME -gt $(( $CUR_TIME + $THRESHOLD_IN_SECS )) ]; then
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +0100763 # The time in ServerHello is at least 5 minutes later than now
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100764 return 1
765 else
766 return 0
767 fi
768}
769
Piotr Nowicki0937ed22019-11-26 16:32:40 +0100770# Get handshake memory usage from server or client output and put it into the variable specified by the first argument
771handshake_memory_get() {
772 OUTPUT_VARIABLE="$1"
773 OUTPUT_FILE="$2"
774
775 # Get memory usage from a pattern like "Heap memory usage after handshake: 23112 bytes. Peak memory usage was 33112"
776 MEM_USAGE=$(sed -n 's/.*Heap memory usage after handshake: //p' < "$OUTPUT_FILE" | grep -o "[0-9]*" | head -1)
777
778 # Check if memory usage was read
779 if [ -z "$MEM_USAGE" ]; then
780 echo "Error: Can not read the value of handshake memory usage"
781 return 1
782 else
783 eval "$OUTPUT_VARIABLE=$MEM_USAGE"
784 return 0
785 fi
786}
787
788# Get handshake memory usage from server or client output and check if this value
789# is not higher than the maximum given by the first argument
790handshake_memory_check() {
791 MAX_MEMORY="$1"
792 OUTPUT_FILE="$2"
793
794 # Get memory usage
795 if ! handshake_memory_get "MEMORY_USAGE" "$OUTPUT_FILE"; then
796 return 1
797 fi
798
799 # Check if memory usage is below max value
800 if [ "$MEMORY_USAGE" -gt "$MAX_MEMORY" ]; then
801 echo "\nFailed: Handshake memory usage was $MEMORY_USAGE bytes," \
802 "but should be below $MAX_MEMORY bytes"
803 return 1
804 else
805 return 0
806 fi
807}
808
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200809# wait for client to terminate and set CLI_EXIT
810# must be called right after starting the client
811wait_client_done() {
812 CLI_PID=$!
813
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200814 CLI_DELAY=$(( $DOG_DELAY * $CLI_DELAY_FACTOR ))
815 CLI_DELAY_FACTOR=1
816
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200817 ( sleep $CLI_DELAY; echo "===CLIENT_TIMEOUT===" >> $CLI_OUT; kill $CLI_PID ) &
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200818 DOG_PID=$!
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200819
820 wait $CLI_PID
821 CLI_EXIT=$?
822
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200823 kill $DOG_PID >/dev/null 2>&1
824 wait $DOG_PID
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200825
826 echo "EXIT: $CLI_EXIT" >> $CLI_OUT
Janos Follath74537a62016-09-02 13:45:28 +0100827
828 sleep $SRV_DELAY_SECONDS
829 SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200830}
831
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200832# check if the given command uses dtls and sets global variable DTLS
833detect_dtls() {
Gilles Peskine64457492020-08-26 21:53:33 +0200834 case "$1" in
Paul Elliott405fccc2021-10-12 16:02:55 +0100835 *dtls=1*|*-dtls*|*-u*) DTLS=1;;
Gilles Peskine64457492020-08-26 21:53:33 +0200836 *) DTLS=0;;
837 esac
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200838}
839
Dave Rodgman0279c2f2021-02-10 12:45:41 +0000840# check if the given command uses gnutls and sets global variable CMD_IS_GNUTLS
841is_gnutls() {
842 case "$1" in
843 *gnutls-cli*)
844 CMD_IS_GNUTLS=1
845 ;;
846 *gnutls-serv*)
847 CMD_IS_GNUTLS=1
848 ;;
849 *)
850 CMD_IS_GNUTLS=0
851 ;;
852 esac
853}
854
Gilles Peskine64c683f2022-03-14 17:55:04 +0100855# Determine what calc_verify trace is to be expected, if any.
856#
857# calc_verify is only called for two things: to calculate the
858# extended master secret, and to process client authentication.
859#
860# Warning: the current implementation assumes that extended_ms is not
861# disabled on the client or on the server.
862#
863# Inputs:
Gilles Peskinef2e1f472022-04-06 22:23:45 +0200864# * $1: the value of the server auth_mode parameter.
865# 'required' if client authentication is expected,
866# 'none' or absent if not.
Gilles Peskine64c683f2022-03-14 17:55:04 +0100867# * $CONFIGS_ENABLED
868#
869# Outputs:
870# * $maybe_calc_verify: set to a trace expected in the debug logs
871set_maybe_calc_verify() {
872 maybe_calc_verify=
873 case $CONFIGS_ENABLED in
874 *\ MBEDTLS_SSL_EXTENDED_MASTER_SECRET\ *) :;;
875 *)
876 case ${1-} in
Gilles Peskinef2e1f472022-04-06 22:23:45 +0200877 ''|none) return;;
878 required) :;;
Gilles Peskine64c683f2022-03-14 17:55:04 +0100879 *) echo "Bad parameter 1 to set_maybe_calc_verify: $1"; exit 1;;
880 esac
881 esac
882 case $CONFIGS_ENABLED in
883 *\ MBEDTLS_USE_PSA_CRYPTO\ *) maybe_calc_verify="PSA calc verify";;
884 *) maybe_calc_verify="<= calc verify";;
885 esac
886}
887
Johan Pascal9bc50b02020-09-24 12:01:13 +0200888# Compare file content
889# Usage: find_in_both pattern file1 file2
890# extract from file1 the first line matching the pattern
891# check in file2 that the same line can be found
892find_in_both() {
893 srv_pattern=$(grep -m 1 "$1" "$2");
894 if [ -z "$srv_pattern" ]; then
895 return 1;
896 fi
897
898 if grep "$srv_pattern" $3 >/dev/null; then :
Johan Pascal10403152020-10-09 20:43:51 +0200899 return 0;
Johan Pascal9bc50b02020-09-24 12:01:13 +0200900 else
901 return 1;
902 fi
903}
904
Gilles Peskinef9022b02021-10-19 16:25:10 +0200905# Analyze the commands that will be used in a test.
906#
907# Analyze and possibly instrument $PXY_CMD, $CLI_CMD, $SRV_CMD to pass
908# extra arguments or go through wrappers.
Gilles Peskined5b1a302022-04-05 22:00:17 +0200909#
910# Inputs:
911# * $@: supplemental options to run_test() (after the mandatory arguments).
912# * $CLI_CMD, $PXY_CMD, $SRV_CMD: the client, proxy and server commands.
913# * $DTLS: 1 if DTLS, otherwise 0.
914#
915# Outputs:
916# * $CLI_CMD, $PXY_CMD, $SRV_CMD: may be tweaked.
Gilles Peskinef9022b02021-10-19 16:25:10 +0200917analyze_test_commands() {
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +0200918 # if the test uses DTLS but no custom proxy, add a simple proxy
919 # as it provides timing info that's useful to debug failures
Manuel Pégourié-Gonnard70fce982020-06-25 09:54:46 +0200920 if [ -z "$PXY_CMD" ] && [ "$DTLS" -eq 1 ]; then
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +0200921 PXY_CMD="$P_PXY"
Manuel Pégourié-Gonnard8779e9a2020-07-16 10:19:32 +0200922 case " $SRV_CMD " in
923 *' server_addr=::1 '*)
924 PXY_CMD="$PXY_CMD server_addr=::1 listen_addr=::1";;
925 esac
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +0200926 fi
927
Dave Rodgman0279c2f2021-02-10 12:45:41 +0000928 # update CMD_IS_GNUTLS variable
929 is_gnutls "$SRV_CMD"
930
931 # if the server uses gnutls but doesn't set priority, explicitly
932 # set the default priority
933 if [ "$CMD_IS_GNUTLS" -eq 1 ]; then
934 case "$SRV_CMD" in
935 *--priority*) :;;
936 *) SRV_CMD="$SRV_CMD --priority=NORMAL";;
937 esac
938 fi
939
940 # update CMD_IS_GNUTLS variable
941 is_gnutls "$CLI_CMD"
942
943 # if the client uses gnutls but doesn't set priority, explicitly
944 # set the default priority
945 if [ "$CMD_IS_GNUTLS" -eq 1 ]; then
946 case "$CLI_CMD" in
947 *--priority*) :;;
948 *) CLI_CMD="$CLI_CMD --priority=NORMAL";;
949 esac
950 fi
951
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200952 # fix client port
953 if [ -n "$PXY_CMD" ]; then
954 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$PXY_PORT/g )
955 else
956 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$SRV_PORT/g )
957 fi
958
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100959 # prepend valgrind to our commands if active
960 if [ "$MEMCHECK" -gt 0 ]; then
961 if is_polar "$SRV_CMD"; then
962 SRV_CMD="valgrind --leak-check=full $SRV_CMD"
963 fi
964 if is_polar "$CLI_CMD"; then
965 CLI_CMD="valgrind --leak-check=full $CLI_CMD"
966 fi
967 fi
Gilles Peskinef9022b02021-10-19 16:25:10 +0200968}
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100969
Gilles Peskinef9022b02021-10-19 16:25:10 +0200970# Check for failure conditions after a test case.
971#
972# Inputs from run_test:
973# * positional parameters: test options (see run_test documentation)
974# * $CLI_EXIT: client return code
975# * $CLI_EXPECT: expected client return code
976# * $SRV_RET: server return code
977# * $CLI_OUT, $SRV_OUT, $PXY_OUT: files containing client/server/proxy logs
Gilles Peskinea28fd412021-10-19 17:23:25 +0200978# * $TIMES_LEFT: if nonzero, a RETRY outcome is allowed
Gilles Peskinef9022b02021-10-19 16:25:10 +0200979#
980# Outputs:
Gilles Peskine2d3c9f82021-10-19 18:00:10 +0200981# * $outcome: one of PASS/RETRY*/FAIL
Gilles Peskinef9022b02021-10-19 16:25:10 +0200982check_test_failure() {
Gilles Peskinea28fd412021-10-19 17:23:25 +0200983 outcome=FAIL
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200984
Gilles Peskinea28fd412021-10-19 17:23:25 +0200985 if [ $TIMES_LEFT -gt 0 ] &&
986 grep '===CLIENT_TIMEOUT===' $CLI_OUT >/dev/null
987 then
Gilles Peskine2d3c9f82021-10-19 18:00:10 +0200988 outcome="RETRY(client-timeout)"
Gilles Peskinea28fd412021-10-19 17:23:25 +0200989 return
990 fi
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200991
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100992 # check if the client and server went at least to the handshake stage
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200993 # (useful to avoid tests with only negative assertions and non-zero
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100994 # expected client exit to incorrectly succeed in case of catastrophic
995 # failure)
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100996 if is_polar "$SRV_CMD"; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200997 if grep "Performing the SSL/TLS handshake" $SRV_OUT >/dev/null; then :;
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100998 else
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100999 fail "server or client failed to reach handshake stage"
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001000 return
1001 fi
1002 fi
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01001003 if is_polar "$CLI_CMD"; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001004 if grep "Performing the SSL/TLS handshake" $CLI_OUT >/dev/null; then :;
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001005 else
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001006 fail "server or client failed to reach handshake stage"
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001007 return
1008 fi
1009 fi
1010
Gilles Peskineaaf866e2021-02-09 21:01:33 +01001011 # Check server exit code (only for Mbed TLS: GnuTLS and OpenSSL don't
1012 # exit with status 0 when interrupted by a signal, and we don't really
1013 # care anyway), in case e.g. the server reports a memory leak.
1014 if [ $SRV_RET != 0 ] && is_polar "$SRV_CMD"; then
Gilles Peskine7f919de2021-02-02 23:29:03 +01001015 fail "Server exited with status $SRV_RET"
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +01001016 return
1017 fi
1018
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001019 # check client exit code
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01001020 if [ \( "$CLI_EXPECT" = 0 -a "$CLI_EXIT" != 0 \) -o \
1021 \( "$CLI_EXPECT" != 0 -a "$CLI_EXIT" = 0 \) ]
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001022 then
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001023 fail "bad client exit code (expected $CLI_EXPECT, got $CLI_EXIT)"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001024 return
1025 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001026
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001027 # check other assertions
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001028 # lines beginning with == are added by valgrind, ignore them
Paul Bakker1f650922016-05-13 10:16:46 +01001029 # lines with 'Serious error when reading debug info', are valgrind issues as well
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001030 while [ $# -gt 0 ]
1031 do
1032 case $1 in
1033 "-s")
Paul Bakker1f650922016-05-13 10:16:46 +01001034 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +01001035 fail "pattern '$2' MUST be present in the Server output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001036 return
1037 fi
1038 ;;
1039
1040 "-c")
Paul Bakker1f650922016-05-13 10:16:46 +01001041 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +01001042 fail "pattern '$2' MUST be present in the Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001043 return
1044 fi
1045 ;;
1046
1047 "-S")
Paul Bakker1f650922016-05-13 10:16:46 +01001048 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Gilles Peskineaa1d6ad2021-10-20 14:17:02 +02001049 if log_pattern_presence_is_conclusive "$2"; then
Gilles Peskine2d3c9f82021-10-19 18:00:10 +02001050 fail "pattern '$2' MUST NOT be present in the Server output"
1051 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001052 return
1053 fi
1054 ;;
1055
1056 "-C")
Paul Bakker1f650922016-05-13 10:16:46 +01001057 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Gilles Peskineaa1d6ad2021-10-20 14:17:02 +02001058 if log_pattern_presence_is_conclusive "$2"; then
Gilles Peskine2d3c9f82021-10-19 18:00:10 +02001059 fail "pattern '$2' MUST NOT be present in the Client output"
1060 fi
Simon Butcher8e004102016-10-14 00:48:33 +01001061 return
1062 fi
1063 ;;
1064
1065 # The filtering in the following two options (-u and -U) do the following
1066 # - ignore valgrind output
Antonin Décimo36e89b52019-01-23 15:24:37 +01001067 # - filter out everything but lines right after the pattern occurrences
Simon Butcher8e004102016-10-14 00:48:33 +01001068 # - keep one of each non-unique line
1069 # - count how many lines remain
1070 # A line with '--' will remain in the result from previous outputs, so the number of lines in the result will be 1
1071 # if there were no duplicates.
1072 "-U")
1073 if [ $(grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
1074 fail "lines following pattern '$2' must be unique in Server output"
1075 return
1076 fi
1077 ;;
1078
1079 "-u")
1080 if [ $(grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
1081 fail "lines following pattern '$2' must be unique in Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001082 return
1083 fi
1084 ;;
Andres Amaya Garcia93993de2017-09-06 15:38:07 +01001085 "-F")
1086 if ! $2 "$SRV_OUT"; then
1087 fail "function call to '$2' failed on Server output"
1088 return
1089 fi
1090 ;;
1091 "-f")
1092 if ! $2 "$CLI_OUT"; then
1093 fail "function call to '$2' failed on Client output"
1094 return
1095 fi
1096 ;;
Johan Pascal9bc50b02020-09-24 12:01:13 +02001097 "-g")
1098 if ! eval "$2 '$SRV_OUT' '$CLI_OUT'"; then
1099 fail "function call to '$2' failed on Server and Client output"
1100 return
1101 fi
1102 ;;
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001103
1104 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +02001105 echo "Unknown test: $1" >&2
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001106 exit 1
1107 esac
1108 shift 2
1109 done
1110
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001111 # check valgrind's results
1112 if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001113 if is_polar "$SRV_CMD" && has_mem_err $SRV_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001114 fail "Server has memory errors"
1115 return
1116 fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001117 if is_polar "$CLI_CMD" && has_mem_err $CLI_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001118 fail "Client has memory errors"
1119 return
1120 fi
1121 fi
1122
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001123 # if we're here, everything is ok
Gilles Peskinea28fd412021-10-19 17:23:25 +02001124 outcome=PASS
Gilles Peskinef9022b02021-10-19 16:25:10 +02001125}
1126
Gilles Peskine5d8e7022021-10-19 16:35:35 +02001127# Run the current test case: start the server and if applicable the proxy, run
1128# the client, wait for all processes to finish or time out.
1129#
1130# Inputs:
1131# * $NAME: test case name
1132# * $CLI_CMD, $SRV_CMD, $PXY_CMD: commands to run
1133# * $CLI_OUT, $SRV_OUT, $PXY_OUT: files to contain client/server/proxy logs
1134#
1135# Outputs:
1136# * $CLI_EXIT: client return code
1137# * $SRV_RET: server return code
1138do_run_test_once() {
1139 # run the commands
1140 if [ -n "$PXY_CMD" ]; then
1141 printf "# %s\n%s\n" "$NAME" "$PXY_CMD" > $PXY_OUT
1142 $PXY_CMD >> $PXY_OUT 2>&1 &
1143 PXY_PID=$!
1144 wait_proxy_start "$PXY_PORT" "$PXY_PID"
1145 fi
1146
1147 check_osrv_dtls
1148 printf '# %s\n%s\n' "$NAME" "$SRV_CMD" > $SRV_OUT
1149 provide_input | $SRV_CMD >> $SRV_OUT 2>&1 &
1150 SRV_PID=$!
1151 wait_server_start "$SRV_PORT" "$SRV_PID"
1152
1153 printf '# %s\n%s\n' "$NAME" "$CLI_CMD" > $CLI_OUT
Andrzej Kurekd27cdcc2022-05-27 06:44:19 -04001154 # The client must be a subprocess of the script in order for killing it to
1155 # work properly, that's why the ampersand is placed inside the eval command,
1156 # not at the end of the line: the latter approach will spawn eval as a
1157 # subprocess, and the $CLI_CMD as a grandchild.
1158 eval "$CLI_CMD &" >> $CLI_OUT 2>&1
Gilles Peskine5d8e7022021-10-19 16:35:35 +02001159 wait_client_done
1160
1161 sleep 0.05
1162
1163 # terminate the server (and the proxy)
1164 kill $SRV_PID
1165 wait $SRV_PID
1166 SRV_RET=$?
1167
1168 if [ -n "$PXY_CMD" ]; then
1169 kill $PXY_PID >/dev/null 2>&1
1170 wait $PXY_PID
1171 fi
1172}
1173
Gilles Peskinef9022b02021-10-19 16:25:10 +02001174# Usage: run_test name [-p proxy_cmd] srv_cmd cli_cmd cli_exit [option [...]]
1175# Options: -s pattern pattern that must be present in server output
1176# -c pattern pattern that must be present in client output
1177# -u pattern lines after pattern must be unique in client output
1178# -f call shell function on client output
1179# -S pattern pattern that must be absent in server output
1180# -C pattern pattern that must be absent in client output
1181# -U pattern lines after pattern must be unique in server output
1182# -F call shell function on server output
1183# -g call shell function on server and client output
1184run_test() {
1185 NAME="$1"
1186 shift 1
1187
1188 if is_excluded "$NAME"; then
1189 SKIP_NEXT="NO"
1190 # There was no request to run the test, so don't record its outcome.
1191 return
1192 fi
1193
1194 print_name "$NAME"
1195
1196 # Do we only run numbered tests?
1197 if [ -n "$RUN_TEST_NUMBER" ]; then
1198 case ",$RUN_TEST_NUMBER," in
1199 *",$TESTS,"*) :;;
1200 *) SKIP_NEXT="YES";;
1201 esac
1202 fi
1203
1204 # does this test use a proxy?
1205 if [ "X$1" = "X-p" ]; then
1206 PXY_CMD="$2"
1207 shift 2
1208 else
1209 PXY_CMD=""
1210 fi
1211
1212 # get commands and client output
1213 SRV_CMD="$1"
1214 CLI_CMD="$2"
1215 CLI_EXPECT="$3"
1216 shift 3
1217
1218 # Check if test uses files
1219 case "$SRV_CMD $CLI_CMD" in
1220 *data_files/*)
1221 requires_config_enabled MBEDTLS_FS_IO;;
1222 esac
1223
Gilles Peskinee5f49582022-02-25 19:46:30 +01001224 # Check if the test uses DTLS.
1225 detect_dtls "$SRV_CMD"
1226 if [ "$DTLS" -eq 1 ]; then
1227 requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
1228 fi
1229
Gilles Peskine511fdf42022-04-08 19:26:26 +02001230 # If the client or server requires certain features that can be detected
1231 # from their command-line arguments, check that they're enabled.
1232 detect_required_features "$SRV_CMD" "$@"
1233 detect_required_features "$CLI_CMD" "$@"
Gilles Peskinef9022b02021-10-19 16:25:10 +02001234
Gilles Peskine89d892f2022-02-25 19:52:52 +01001235 # If we're in a PSK-only build and the test can be adapted to PSK, do that.
1236 maybe_adapt_for_psk "$@"
1237
Gilles Peskinef9022b02021-10-19 16:25:10 +02001238 # should we skip?
1239 if [ "X$SKIP_NEXT" = "XYES" ]; then
1240 SKIP_NEXT="NO"
1241 record_outcome "SKIP"
1242 SKIPS=$(( $SKIPS + 1 ))
1243 return
1244 fi
1245
1246 analyze_test_commands "$@"
1247
Andrzej Kurek363553b2022-04-01 08:52:06 -04001248 # One regular run and two retries
1249 TIMES_LEFT=3
Gilles Peskinef9022b02021-10-19 16:25:10 +02001250 while [ $TIMES_LEFT -gt 0 ]; do
1251 TIMES_LEFT=$(( $TIMES_LEFT - 1 ))
1252
Gilles Peskine5d8e7022021-10-19 16:35:35 +02001253 do_run_test_once
Gilles Peskinef9022b02021-10-19 16:25:10 +02001254
Gilles Peskinea28fd412021-10-19 17:23:25 +02001255 check_test_failure "$@"
1256 case $outcome in
1257 PASS) break;;
Gilles Peskine2d3c9f82021-10-19 18:00:10 +02001258 RETRY*) printf "$outcome ";;
Gilles Peskinea28fd412021-10-19 17:23:25 +02001259 FAIL) return;;
1260 esac
Gilles Peskinef9022b02021-10-19 16:25:10 +02001261 done
1262
Gilles Peskinea28fd412021-10-19 17:23:25 +02001263 # If we get this far, the test case passed.
Gilles Peskine560280b2019-09-16 15:17:38 +02001264 record_outcome "PASS"
Paul Bakkeracaac852016-05-10 11:47:13 +01001265 if [ "$PRESERVE_LOGS" -gt 0 ]; then
1266 mv $SRV_OUT o-srv-${TESTS}.log
1267 mv $CLI_OUT o-cli-${TESTS}.log
Hanno Becker7be2e5b2018-08-20 12:21:35 +01001268 if [ -n "$PXY_CMD" ]; then
1269 mv $PXY_OUT o-pxy-${TESTS}.log
1270 fi
Paul Bakkeracaac852016-05-10 11:47:13 +01001271 fi
1272
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001273 rm -f $SRV_OUT $CLI_OUT $PXY_OUT
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001274}
1275
Hanno Becker9b5853c2018-11-16 17:28:40 +00001276run_test_psa() {
1277 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine64c683f2022-03-14 17:55:04 +01001278 set_maybe_calc_verify none
Hanno Beckere9420c22018-11-20 11:37:34 +00001279 run_test "PSA-supported ciphersuite: $1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00001280 "$P_SRV debug_level=3 force_version=tls12" \
1281 "$P_CLI debug_level=3 force_version=tls12 force_ciphersuite=$1" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001282 0 \
1283 -c "Successfully setup PSA-based decryption cipher context" \
1284 -c "Successfully setup PSA-based encryption cipher context" \
Gilles Peskine64c683f2022-03-14 17:55:04 +01001285 -c "$maybe_calc_verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -05001286 -c "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001287 -s "Successfully setup PSA-based decryption cipher context" \
1288 -s "Successfully setup PSA-based encryption cipher context" \
Gilles Peskine64c683f2022-03-14 17:55:04 +01001289 -s "$maybe_calc_verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -05001290 -s "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001291 -C "Failed to setup PSA-based cipher context"\
1292 -S "Failed to setup PSA-based cipher context"\
1293 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +00001294 -c "Perform PSA-based ECDH computation."\
Andrzej Kureke85414e2019-01-15 05:23:59 -05001295 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001296 -S "error" \
1297 -C "error"
Gilles Peskine64c683f2022-03-14 17:55:04 +01001298 unset maybe_calc_verify
Hanno Becker9b5853c2018-11-16 17:28:40 +00001299}
1300
Hanno Becker354e2482019-01-08 11:40:25 +00001301run_test_psa_force_curve() {
1302 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine64c683f2022-03-14 17:55:04 +01001303 set_maybe_calc_verify none
Hanno Becker354e2482019-01-08 11:40:25 +00001304 run_test "PSA - ECDH with $1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00001305 "$P_SRV debug_level=4 force_version=tls12" \
1306 "$P_CLI debug_level=4 force_version=tls12 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 curves=$1" \
Hanno Becker354e2482019-01-08 11:40:25 +00001307 0 \
Hanno Becker28f78442019-02-18 16:47:50 +00001308 -c "Successfully setup PSA-based decryption cipher context" \
1309 -c "Successfully setup PSA-based encryption cipher context" \
Gilles Peskine64c683f2022-03-14 17:55:04 +01001310 -c "$maybe_calc_verify" \
Hanno Becker28f78442019-02-18 16:47:50 +00001311 -c "calc PSA finished" \
1312 -s "Successfully setup PSA-based decryption cipher context" \
1313 -s "Successfully setup PSA-based encryption cipher context" \
Gilles Peskine64c683f2022-03-14 17:55:04 +01001314 -s "$maybe_calc_verify" \
Hanno Becker28f78442019-02-18 16:47:50 +00001315 -s "calc PSA finished" \
1316 -C "Failed to setup PSA-based cipher context"\
1317 -S "Failed to setup PSA-based cipher context"\
Hanno Becker354e2482019-01-08 11:40:25 +00001318 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +00001319 -c "Perform PSA-based ECDH computation."\
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001320 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001321 -S "error" \
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001322 -C "error"
Gilles Peskine64c683f2022-03-14 17:55:04 +01001323 unset maybe_calc_verify
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001324}
1325
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001326# Test that the server's memory usage after a handshake is reduced when a client specifies
1327# a maximum fragment length.
1328# first argument ($1) is MFL for SSL client
1329# second argument ($2) is memory usage for SSL client with default MFL (16k)
1330run_test_memory_after_hanshake_with_mfl()
1331{
1332 # The test passes if the difference is around 2*(16k-MFL)
Gilles Peskine5b428d72020-08-26 21:52:23 +02001333 MEMORY_USAGE_LIMIT="$(( $2 - ( 2 * ( 16384 - $1 )) ))"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001334
1335 # Leave some margin for robustness
1336 MEMORY_USAGE_LIMIT="$(( ( MEMORY_USAGE_LIMIT * 110 ) / 100 ))"
1337
1338 run_test "Handshake memory usage (MFL $1)" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00001339 "$P_SRV debug_level=3 auth_mode=required force_version=tls12" \
1340 "$P_CLI debug_level=3 force_version=tls12 \
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001341 crt_file=data_files/server5.crt key_file=data_files/server5.key \
1342 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM max_frag_len=$1" \
1343 0 \
1344 -F "handshake_memory_check $MEMORY_USAGE_LIMIT"
1345}
1346
1347
1348# Test that the server's memory usage after a handshake is reduced when a client specifies
1349# different values of Maximum Fragment Length: default (16k), 4k, 2k, 1k and 512 bytes
1350run_tests_memory_after_hanshake()
1351{
1352 # all tests in this sequence requires the same configuration (see requires_config_enabled())
1353 SKIP_THIS_TESTS="$SKIP_NEXT"
1354
1355 # first test with default MFU is to get reference memory usage
1356 MEMORY_USAGE_MFL_16K=0
1357 run_test "Handshake memory usage initial (MFL 16384 - default)" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00001358 "$P_SRV debug_level=3 auth_mode=required force_version=tls12" \
1359 "$P_CLI debug_level=3 force_version=tls12 \
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001360 crt_file=data_files/server5.crt key_file=data_files/server5.key \
1361 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM" \
1362 0 \
1363 -F "handshake_memory_get MEMORY_USAGE_MFL_16K"
1364
1365 SKIP_NEXT="$SKIP_THIS_TESTS"
1366 run_test_memory_after_hanshake_with_mfl 4096 "$MEMORY_USAGE_MFL_16K"
1367
1368 SKIP_NEXT="$SKIP_THIS_TESTS"
1369 run_test_memory_after_hanshake_with_mfl 2048 "$MEMORY_USAGE_MFL_16K"
1370
1371 SKIP_NEXT="$SKIP_THIS_TESTS"
1372 run_test_memory_after_hanshake_with_mfl 1024 "$MEMORY_USAGE_MFL_16K"
1373
1374 SKIP_NEXT="$SKIP_THIS_TESTS"
1375 run_test_memory_after_hanshake_with_mfl 512 "$MEMORY_USAGE_MFL_16K"
1376}
1377
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001378cleanup() {
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001379 rm -f $CLI_OUT $SRV_OUT $PXY_OUT $SESSION
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001380 rm -f context_srv.txt
1381 rm -f context_cli.txt
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001382 test -n "${SRV_PID:-}" && kill $SRV_PID >/dev/null 2>&1
1383 test -n "${PXY_PID:-}" && kill $PXY_PID >/dev/null 2>&1
1384 test -n "${CLI_PID:-}" && kill $CLI_PID >/dev/null 2>&1
1385 test -n "${DOG_PID:-}" && kill $DOG_PID >/dev/null 2>&1
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001386 exit 1
1387}
1388
Manuel Pégourié-Gonnard9dea8bd2014-02-26 18:21:02 +01001389#
1390# MAIN
1391#
1392
Manuel Pégourié-Gonnard913030c2014-03-28 10:12:38 +01001393get_options "$@"
1394
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001395# Optimize filters: if $FILTER and $EXCLUDE can be expressed as shell
1396# patterns rather than regular expressions, use a case statement instead
1397# of calling grep. To keep the optimizer simple, it is incomplete and only
1398# detects simple cases: plain substring, everything, nothing.
1399#
1400# As an exception, the character '.' is treated as an ordinary character
1401# if it is the only special character in the string. This is because it's
1402# rare to need "any one character", but needing a literal '.' is common
1403# (e.g. '-f "DTLS 1.2"').
1404need_grep=
1405case "$FILTER" in
1406 '^$') simple_filter=;;
1407 '.*') simple_filter='*';;
Gilles Peskineb09e0012020-09-29 23:48:39 +02001408 *[][$+*?\\^{\|}]*) # Regexp special characters (other than .), we need grep
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001409 need_grep=1;;
1410 *) # No regexp or shell-pattern special character
1411 simple_filter="*$FILTER*";;
1412esac
1413case "$EXCLUDE" in
1414 '^$') simple_exclude=;;
1415 '.*') simple_exclude='*';;
Gilles Peskineb09e0012020-09-29 23:48:39 +02001416 *[][$+*?\\^{\|}]*) # Regexp special characters (other than .), we need grep
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001417 need_grep=1;;
1418 *) # No regexp or shell-pattern special character
1419 simple_exclude="*$EXCLUDE*";;
1420esac
1421if [ -n "$need_grep" ]; then
1422 is_excluded () {
1423 ! echo "$1" | grep "$FILTER" | grep -q -v "$EXCLUDE"
1424 }
1425else
1426 is_excluded () {
1427 case "$1" in
1428 $simple_exclude) true;;
1429 $simple_filter) false;;
1430 *) true;;
1431 esac
1432 }
1433fi
1434
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001435# sanity checks, avoid an avalanche of errors
Hanno Becker4ac73e72017-10-23 15:27:37 +01001436P_SRV_BIN="${P_SRV%%[ ]*}"
1437P_CLI_BIN="${P_CLI%%[ ]*}"
1438P_PXY_BIN="${P_PXY%%[ ]*}"
Hanno Becker17c04932017-10-10 14:44:53 +01001439if [ ! -x "$P_SRV_BIN" ]; then
1440 echo "Command '$P_SRV_BIN' is not an executable file"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001441 exit 1
1442fi
Hanno Becker17c04932017-10-10 14:44:53 +01001443if [ ! -x "$P_CLI_BIN" ]; then
1444 echo "Command '$P_CLI_BIN' is not an executable file"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001445 exit 1
1446fi
Hanno Becker17c04932017-10-10 14:44:53 +01001447if [ ! -x "$P_PXY_BIN" ]; then
1448 echo "Command '$P_PXY_BIN' is not an executable file"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001449 exit 1
1450fi
Simon Butcher3c0d7b82016-05-23 11:13:17 +01001451if [ "$MEMCHECK" -gt 0 ]; then
1452 if which valgrind >/dev/null 2>&1; then :; else
1453 echo "Memcheck not possible. Valgrind not found"
1454 exit 1
1455 fi
1456fi
Manuel Pégourié-Gonnard89d40272022-12-19 11:42:12 +01001457if which $OPENSSL >/dev/null 2>&1; then :; else
1458 echo "Command '$OPENSSL' not found"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001459 exit 1
1460fi
1461
Manuel Pégourié-Gonnard32f8f4d2014-05-29 11:31:20 +02001462# used by watchdog
1463MAIN_PID="$$"
1464
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001465# We use somewhat arbitrary delays for tests:
1466# - how long do we wait for the server to start (when lsof not available)?
1467# - how long do we allow for the client to finish?
1468# (not to check performance, just to avoid waiting indefinitely)
1469# Things are slower with valgrind, so give extra time here.
1470#
1471# Note: without lsof, there is a trade-off between the running time of this
1472# script and the risk of spurious errors because we didn't wait long enough.
1473# The watchdog delay on the other hand doesn't affect normal running time of
1474# the script, only the case where a client or server gets stuck.
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001475if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001476 START_DELAY=6
1477 DOG_DELAY=60
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001478else
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001479 START_DELAY=2
1480 DOG_DELAY=20
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001481fi
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001482
1483# some particular tests need more time:
1484# - for the client, we multiply the usual watchdog limit by a factor
1485# - for the server, we sleep for a number of seconds after the client exits
1486# see client_need_more_time() and server_needs_more_time()
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +02001487CLI_DELAY_FACTOR=1
Janos Follath74537a62016-09-02 13:45:28 +01001488SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001489
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001490# fix commands to use this port, force IPv4 while at it
Manuel Pégourié-Gonnard0af1ba32015-01-21 11:44:33 +00001491# +SRV_PORT will be replaced by either $SRV_PORT or $PXY_PORT later
Paul Elliottccba1292021-10-12 16:10:37 +01001492# Note: Using 'localhost' rather than 127.0.0.1 here is unwise, as on many
1493# machines that will resolve to ::1, and we don't want ipv6 here.
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001494P_SRV="$P_SRV server_addr=127.0.0.1 server_port=$SRV_PORT"
1495P_CLI="$P_CLI server_addr=127.0.0.1 server_port=+SRV_PORT"
Andres AGf04f54d2016-10-10 15:46:20 +01001496P_PXY="$P_PXY server_addr=127.0.0.1 server_port=$SRV_PORT listen_addr=127.0.0.1 listen_port=$PXY_PORT ${SEED:+"seed=$SEED"}"
Gilles Peskine3aec89b2021-04-01 14:00:11 +02001497O_SRV="$O_SRV -accept $SRV_PORT"
Paul Elliottccba1292021-10-12 16:10:37 +01001498O_CLI="$O_CLI -connect 127.0.0.1:+SRV_PORT"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001499G_SRV="$G_SRV -p $SRV_PORT"
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02001500G_CLI="$G_CLI -p +SRV_PORT"
Manuel Pégourié-Gonnard8066b812014-05-28 22:59:30 +02001501
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001502if [ -n "${OPENSSL_LEGACY:-}" ]; then
1503 O_LEGACY_SRV="$O_LEGACY_SRV -accept $SRV_PORT -dhparam data_files/dhparams.pem"
Paul Elliottccba1292021-10-12 16:10:37 +01001504 O_LEGACY_CLI="$O_LEGACY_CLI -connect 127.0.0.1:+SRV_PORT"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001505fi
1506
Gilles Peskine4eea1962022-11-24 22:21:15 +01001507# Newer versions of OpenSSL have a syntax to enable all "ciphers", even
1508# low-security ones. This covers not just cipher suites but also protocol
1509# versions. It is necessary, for example, to use (D)TLS 1.0/1.1 on
1510# OpenSSL 1.1.1f from Ubuntu 20.04. The syntax was only introduced in
1511# OpenSSL 1.1.0 (21e0c1d23afff48601eb93135defddae51f7e2e3) and I can't find
1512# a way to discover it from -help, so check the openssl version.
Manuel Pégourié-Gonnard89d40272022-12-19 11:42:12 +01001513case $($OPENSSL version) in
Gilles Peskine4eea1962022-11-24 22:21:15 +01001514 "OpenSSL 0"*|"OpenSSL 1.0"*) :;;
1515 *)
1516 O_CLI="$O_CLI -cipher ALL@SECLEVEL=0"
1517 O_SRV="$O_SRV -cipher ALL@SECLEVEL=0"
1518 ;;
1519esac
1520
Paul Elliott633a74e2021-10-13 18:31:07 +01001521if [ -n "${OPENSSL_NEXT:-}" ]; then
1522 O_NEXT_SRV="$O_NEXT_SRV -accept $SRV_PORT"
Paul Elliottccba1292021-10-12 16:10:37 +01001523 O_NEXT_CLI="$O_NEXT_CLI -connect 127.0.0.1:+SRV_PORT"
Paul Elliott633a74e2021-10-13 18:31:07 +01001524fi
1525
Hanno Becker58e9dc32018-08-17 15:53:21 +01001526if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001527 G_NEXT_SRV="$G_NEXT_SRV -p $SRV_PORT"
1528fi
1529
Hanno Becker58e9dc32018-08-17 15:53:21 +01001530if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02001531 G_NEXT_CLI="$G_NEXT_CLI -p +SRV_PORT"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001532fi
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01001533
Gilles Peskine62469d92017-05-10 10:13:59 +02001534# Allow SHA-1, because many of our test certificates use it
1535P_SRV="$P_SRV allow_sha1=1"
1536P_CLI="$P_CLI allow_sha1=1"
1537
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001538# Also pick a unique name for intermediate files
1539SRV_OUT="srv_out.$$"
1540CLI_OUT="cli_out.$$"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001541PXY_OUT="pxy_out.$$"
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001542SESSION="session.$$"
1543
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +02001544SKIP_NEXT="NO"
1545
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01001546trap cleanup INT TERM HUP
1547
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001548# Basic test
1549
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001550# Checks that:
1551# - things work with all ciphersuites active (used with config-full in all.sh)
Gilles Peskinede4cb352022-04-05 22:00:32 +02001552# - the expected parameters are selected
Gilles Peskinedf4ad902022-04-08 15:14:38 +02001553requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskinedff48c12022-02-25 19:50:38 +01001554requires_ciphersuite_enabled TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
Gilles Peskinede4cb352022-04-05 22:00:32 +02001555requires_config_enabled MBEDTLS_SHA512_C # "signature_algorithm ext: 6"
1556requires_config_enabled MBEDTLS_ECP_DP_SECP521R1_ENABLED
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001557run_test "Default" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001558 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001559 "$P_CLI" \
1560 0 \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001561 -s "Protocol is TLSv1.2" \
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001562 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001563 -s "client hello v3, signature_algorithm ext: 6" \
1564 -s "ECDHE curve: secp521r1" \
1565 -S "error" \
1566 -C "error"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001567
Gilles Peskinedf4ad902022-04-08 15:14:38 +02001568requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskinedff48c12022-02-25 19:50:38 +01001569requires_ciphersuite_enabled TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +00001570run_test "Default, DTLS" \
1571 "$P_SRV dtls=1" \
1572 "$P_CLI dtls=1" \
1573 0 \
1574 -s "Protocol is DTLSv1.2" \
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001575 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256"
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +00001576
Hanno Becker721f7c12020-08-17 12:17:32 +01001577run_test "TLS client auth: required" \
1578 "$P_SRV auth_mode=required" \
1579 "$P_CLI" \
1580 0 \
1581 -s "Verifying peer X.509 certificate... ok"
1582
Hanno Becker2f54a3c2020-08-17 12:14:06 +01001583requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1584requires_config_enabled MBEDTLS_ECDSA_C
1585requires_config_enabled MBEDTLS_SHA256_C
1586run_test "TLS: password protected client key" \
1587 "$P_SRV auth_mode=required" \
1588 "$P_CLI crt_file=data_files/server5.crt key_file=data_files/server5.key.enc key_pwd=PolarSSLTest" \
1589 0
1590
1591requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1592requires_config_enabled MBEDTLS_ECDSA_C
1593requires_config_enabled MBEDTLS_SHA256_C
1594run_test "TLS: password protected server key" \
1595 "$P_SRV crt_file=data_files/server5.crt key_file=data_files/server5.key.enc key_pwd=PolarSSLTest" \
1596 "$P_CLI" \
1597 0
1598
1599requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1600requires_config_enabled MBEDTLS_ECDSA_C
1601requires_config_enabled MBEDTLS_RSA_C
1602requires_config_enabled MBEDTLS_SHA256_C
1603run_test "TLS: password protected server key, two certificates" \
1604 "$P_SRV \
1605 key_file=data_files/server5.key.enc key_pwd=PolarSSLTest crt_file=data_files/server5.crt \
1606 key_file2=data_files/server2.key.enc key_pwd2=PolarSSLTest crt_file2=data_files/server2.crt" \
1607 "$P_CLI" \
1608 0
1609
Manuel Pégourié-Gonnard342d2ca2020-01-02 11:58:00 +01001610requires_config_enabled MBEDTLS_ZLIB_SUPPORT
1611run_test "Default (compression enabled)" \
1612 "$P_SRV debug_level=3" \
1613 "$P_CLI debug_level=3" \
1614 0 \
1615 -s "Allocating compression buffer" \
1616 -c "Allocating compression buffer" \
1617 -s "Record expansion is unknown (compression)" \
1618 -c "Record expansion is unknown (compression)" \
1619 -S "error" \
1620 -C "error"
1621
Hanno Becker746aaf32019-03-28 15:25:23 +00001622requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
1623run_test "CA callback on client" \
1624 "$P_SRV debug_level=3" \
1625 "$P_CLI ca_callback=1 debug_level=3 " \
1626 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01001627 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00001628 -S "error" \
1629 -C "error"
1630
1631requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
1632requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1633requires_config_enabled MBEDTLS_ECDSA_C
1634requires_config_enabled MBEDTLS_SHA256_C
1635run_test "CA callback on server" \
1636 "$P_SRV auth_mode=required" \
1637 "$P_CLI ca_callback=1 debug_level=3 crt_file=data_files/server5.crt \
1638 key_file=data_files/server5.key" \
1639 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01001640 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00001641 -s "Verifying peer X.509 certificate... ok" \
1642 -S "error" \
1643 -C "error"
1644
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001645# Test using an opaque private key for client authentication
1646requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1647requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1648requires_config_enabled MBEDTLS_ECDSA_C
1649requires_config_enabled MBEDTLS_SHA256_C
1650run_test "Opaque key for client authentication" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001651 "$P_SRV auth_mode=required crt_file=data_files/server5.crt \
1652 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001653 "$P_CLI key_opaque=1 crt_file=data_files/server5.crt \
1654 key_file=data_files/server5.key" \
1655 0 \
1656 -c "key type: Opaque" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001657 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001658 -s "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001659 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001660 -S "error" \
1661 -C "error"
1662
Przemyslaw Stekielab09c9e2021-10-04 11:13:22 +02001663# Test using an opaque private key for server authentication
1664requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1665requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1666requires_config_enabled MBEDTLS_ECDSA_C
1667requires_config_enabled MBEDTLS_SHA256_C
1668run_test "Opaque key for server authentication" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001669 "$P_SRV auth_mode=required key_opaque=1 crt_file=data_files/server5.crt \
1670 key_file=data_files/server5.key" \
Przemyslaw Stekielab09c9e2021-10-04 11:13:22 +02001671 "$P_CLI crt_file=data_files/server5.crt \
1672 key_file=data_files/server5.key" \
1673 0 \
1674 -c "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001675 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
1676 -s "key types: Opaque - invalid PK" \
1677 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Przemyslaw Stekielab09c9e2021-10-04 11:13:22 +02001678 -S "error" \
1679 -C "error"
1680
Przemyslaw Stekiel5b6c4c92021-10-06 11:31:49 +02001681# Test using an opaque private key for client/server authentication
1682requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1683requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1684requires_config_enabled MBEDTLS_ECDSA_C
1685requires_config_enabled MBEDTLS_SHA256_C
1686run_test "Opaque key for client/server authentication" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001687 "$P_SRV auth_mode=required key_opaque=1 crt_file=data_files/server5.crt \
1688 key_file=data_files/server5.key" \
Przemyslaw Stekiel5b6c4c92021-10-06 11:31:49 +02001689 "$P_CLI key_opaque=1 crt_file=data_files/server5.crt \
1690 key_file=data_files/server5.key" \
1691 0 \
1692 -c "key type: Opaque" \
1693 -c "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001694 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
1695 -s "key types: Opaque - invalid PK" \
Przemyslaw Stekiel5b6c4c92021-10-06 11:31:49 +02001696 -s "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001697 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Przemyslaw Stekiel5b6c4c92021-10-06 11:31:49 +02001698 -S "error" \
1699 -C "error"
1700
Manuel Pégourié-Gonnard938be422022-06-14 10:43:36 +02001701# Opaque keys not supported for static ECDH
1702requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1703requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1704run_test "Opaque key: server: ECDH-ECDSA not supported" \
1705 "$P_SRV debug_level=1 key_opaque=1
1706 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
1707 "$P_CLI force_ciphersuite=TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256" \
1708 1 \
1709 -s "server key not ECDH capable" \
1710 -s "ssl_get_ecdh_params_from_cert() returned" \
1711 -s "error" \
1712 -c "error"
1713
1714# Opaque keys not supported for static ECDH
1715requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1716requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1717run_test "Opaque key: server: ECDH-RSA not supported" \
1718 "$P_SRV debug_level=1 key_opaque=1
1719 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
1720 "$P_CLI force_ciphersuite=TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256" \
1721 1 \
1722 -s "server key not ECDH capable" \
1723 -s "ssl_get_ecdh_params_from_cert() returned" \
1724 -s "error" \
1725 -c "error"
1726
Manuel Pégourié-Gonnarda49a00c2022-06-14 10:45:19 +02001727# Opaque PSKs not supported for mixed PSK
1728
1729requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1730run_test "Opaque psk: client: ECDHE-PSK not supported" \
1731 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo" \
1732 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1733 force_version=tls12 \
1734 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA" \
1735 1 \
1736 -c "opaque PSK not supported with ECDHE-PSK" \
1737 -s "error" \
1738 -c "error"
1739
1740requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1741run_test "Opaque psk: client: DHE-PSK not supported" \
1742 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo" \
1743 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1744 force_version=tls12 \
1745 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA" \
1746 1 \
1747 -c "opaque PSK not supported with DHE-PSK" \
1748 -s "error" \
1749 -c "error"
1750
1751requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1752run_test "Opaque psk: client: RSA-PSK not supported" \
1753 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo" \
1754 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1755 force_version=tls12 \
1756 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA" \
1757 1 \
1758 -c "opaque PSK not supported with RSA-PSK" \
1759 -s "error" \
1760 -c "error"
1761
Manuel Pégourié-Gonnardd80d8a42022-06-14 10:53:15 +02001762requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1763run_test "Opaque psk: server: ECDHE-PSK not supported" \
1764 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1765 force_version=tls12 \
1766 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA" \
1767 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo" \
1768 1 \
1769 -s "opaque PSK not supported with ECDHE-PSK" \
1770 -s "error" \
1771 -c "error"
1772
1773requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1774run_test "Opaque psk: server: DHE-PSK not supported" \
1775 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1776 force_version=tls12 \
1777 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA" \
1778 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo" \
1779 1 \
1780 -s "opaque PSK not supported with DHE-PSK" \
1781 -s "error" \
1782 -c "error"
1783
1784requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1785run_test "Opaque psk: server: RSA-PSK not supported" \
1786 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1787 force_version=tls12 \
1788 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA" \
1789 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo" \
1790 1 \
1791 -s "opaque PSK not supported with RSA-PSK" \
1792 -s "error" \
1793 -c "error"
1794
Hanno Becker9b5853c2018-11-16 17:28:40 +00001795# Test ciphersuites which we expect to be fully supported by PSA Crypto
1796# and check that we don't fall back to Mbed TLS' internal crypto primitives.
1797run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM
1798run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
1799run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM
1800run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
1801run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
1802run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
1803run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA
1804run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
1805run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
1806
Hanno Becker354e2482019-01-08 11:40:25 +00001807requires_config_enabled MBEDTLS_ECP_DP_SECP521R1_ENABLED
1808run_test_psa_force_curve "secp521r1"
1809requires_config_enabled MBEDTLS_ECP_DP_BP512R1_ENABLED
1810run_test_psa_force_curve "brainpoolP512r1"
1811requires_config_enabled MBEDTLS_ECP_DP_SECP384R1_ENABLED
1812run_test_psa_force_curve "secp384r1"
1813requires_config_enabled MBEDTLS_ECP_DP_BP384R1_ENABLED
1814run_test_psa_force_curve "brainpoolP384r1"
1815requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
1816run_test_psa_force_curve "secp256r1"
1817requires_config_enabled MBEDTLS_ECP_DP_SECP256K1_ENABLED
1818run_test_psa_force_curve "secp256k1"
1819requires_config_enabled MBEDTLS_ECP_DP_BP256R1_ENABLED
1820run_test_psa_force_curve "brainpoolP256r1"
1821requires_config_enabled MBEDTLS_ECP_DP_SECP224R1_ENABLED
1822run_test_psa_force_curve "secp224r1"
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01001823## SECP224K1 is buggy via the PSA API
Dave Rodgman52af7692022-03-31 14:27:24 +01001824## (https://github.com/Mbed-TLS/mbedtls/issues/3541),
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01001825## so it is disabled in PSA even when it's enabled in Mbed TLS.
1826## The proper dependency would be on PSA_WANT_ECC_SECP_K1_224 but
1827## dependencies on PSA symbols in ssl-opt.sh are not implemented yet.
1828#requires_config_enabled MBEDTLS_ECP_DP_SECP224K1_ENABLED
1829#run_test_psa_force_curve "secp224k1"
Hanno Becker354e2482019-01-08 11:40:25 +00001830requires_config_enabled MBEDTLS_ECP_DP_SECP192R1_ENABLED
1831run_test_psa_force_curve "secp192r1"
1832requires_config_enabled MBEDTLS_ECP_DP_SECP192K1_ENABLED
1833run_test_psa_force_curve "secp192k1"
1834
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001835# Test current time in ServerHello
1836requires_config_enabled MBEDTLS_HAVE_TIME
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001837run_test "ServerHello contains gmt_unix_time" \
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001838 "$P_SRV debug_level=3" \
1839 "$P_CLI debug_level=3" \
1840 0 \
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001841 -f "check_server_hello_time" \
1842 -F "check_server_hello_time"
1843
Simon Butcher8e004102016-10-14 00:48:33 +01001844# Test for uniqueness of IVs in AEAD ciphersuites
1845run_test "Unique IV in GCM" \
1846 "$P_SRV exchanges=20 debug_level=4" \
1847 "$P_CLI exchanges=20 debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
1848 0 \
1849 -u "IV used" \
1850 -U "IV used"
1851
Janos Follathee11be62019-04-04 12:03:30 +01001852# Tests for certificate verification callback
1853run_test "Configuration-specific CRT verification callback" \
1854 "$P_SRV debug_level=3" \
1855 "$P_CLI context_crt_cb=0 debug_level=3" \
1856 0 \
Janos Follathee11be62019-04-04 12:03:30 +01001857 -S "error" \
1858 -c "Verify requested for " \
1859 -c "Use configuration-specific verification callback" \
1860 -C "Use context-specific verification callback" \
1861 -C "error"
1862
Hanno Beckerefb440a2019-04-03 13:04:33 +01001863run_test "Context-specific CRT verification callback" \
1864 "$P_SRV debug_level=3" \
1865 "$P_CLI context_crt_cb=1 debug_level=3" \
1866 0 \
Hanno Beckerefb440a2019-04-03 13:04:33 +01001867 -S "error" \
Janos Follathee11be62019-04-04 12:03:30 +01001868 -c "Verify requested for " \
1869 -c "Use context-specific verification callback" \
1870 -C "Use configuration-specific verification callback" \
Hanno Beckerefb440a2019-04-03 13:04:33 +01001871 -C "error"
1872
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001873# Tests for rc4 option
1874
Gilles Peskine719a6522022-04-15 20:03:33 +02001875# Manual dependencies on the ciphersuite support are necessary
1876# because the automatic requirements from force_ciphersuite=... detection
1877# make an exception for these test cases since they expect a handshake
1878# failure.
1879requires_config_enabled MBEDTLS_ARC4_C
1880requires_config_enabled MBEDTLS_SHA1_C
1881requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Simon Butchera410af52016-05-19 22:12:18 +01001882requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001883run_test "RC4: server disabled, client enabled" \
1884 "$P_SRV" \
1885 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1886 1 \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001887 -s "SSL - The server has no ciphersuites in common"
1888
Gilles Peskine719a6522022-04-15 20:03:33 +02001889requires_config_enabled MBEDTLS_ARC4_C
1890requires_config_enabled MBEDTLS_SHA1_C
1891requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Simon Butchera410af52016-05-19 22:12:18 +01001892requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001893run_test "RC4: server half, client enabled" \
1894 "$P_SRV arc4=1" \
1895 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1896 1 \
1897 -s "SSL - The server has no ciphersuites in common"
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001898
Gilles Peskine719a6522022-04-15 20:03:33 +02001899requires_config_enabled MBEDTLS_ARC4_C
1900requires_config_enabled MBEDTLS_SHA1_C
1901requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
1902requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001903run_test "RC4: server enabled, client disabled" \
1904 "$P_SRV force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1905 "$P_CLI" \
1906 1 \
1907 -s "SSL - The server has no ciphersuites in common"
1908
Gilles Peskine719a6522022-04-15 20:03:33 +02001909# Run even if the ciphersuite is disabled by default, but only if the
1910# requisite cryptographic mechanisms are present.
1911# Having "force_ciphersuite=..." in the client or server arguments would
1912# prevent that due to the automatic detection, so hide behind some
1913# shell expansion to fool the automatic detection.
1914with_rc4_ciphersuite() {
1915 exec "$@" force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA
1916}
1917requires_config_enabled MBEDTLS_ARC4_C
1918requires_config_enabled MBEDTLS_SHA1_C
1919requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001920run_test "RC4: both enabled" \
Gilles Peskine719a6522022-04-15 20:03:33 +02001921 "with_rc4_ciphersuite $P_SRV" \
1922 "with_rc4_ciphersuite $P_CLI" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001923 0 \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001924 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001925 -S "SSL - The server has no ciphersuites in common"
1926
Hanno Beckerd26bb202018-08-17 09:54:10 +01001927# Test empty CA list in CertificateRequest in TLS 1.1 and earlier
1928
1929requires_gnutls
Hanno Beckerd26bb202018-08-17 09:54:10 +01001930run_test "CertificateRequest with empty CA list, TLS 1.1 (GnuTLS server)" \
1931 "$G_SRV"\
1932 "$P_CLI force_version=tls1_1" \
1933 0
1934
1935requires_gnutls
Hanno Beckerd26bb202018-08-17 09:54:10 +01001936run_test "CertificateRequest with empty CA list, TLS 1.0 (GnuTLS server)" \
1937 "$G_SRV"\
1938 "$P_CLI force_version=tls1" \
1939 0
1940
Gilles Peskinebc70a182017-05-09 15:59:24 +02001941# Tests for SHA-1 support
1942
1943run_test "SHA-1 forbidden by default in server certificate" \
1944 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1945 "$P_CLI debug_level=2 allow_sha1=0" \
1946 1 \
1947 -c "The certificate is signed with an unacceptable hash"
1948
1949run_test "SHA-1 explicitly allowed in server certificate" \
1950 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1951 "$P_CLI allow_sha1=1" \
1952 0
1953
1954run_test "SHA-256 allowed by default in server certificate" \
1955 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2-sha256.crt" \
1956 "$P_CLI allow_sha1=0" \
1957 0
1958
1959run_test "SHA-1 forbidden by default in client certificate" \
1960 "$P_SRV auth_mode=required allow_sha1=0" \
1961 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1962 1 \
1963 -s "The certificate is signed with an unacceptable hash"
1964
1965run_test "SHA-1 explicitly allowed in client certificate" \
1966 "$P_SRV auth_mode=required allow_sha1=1" \
1967 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1968 0
1969
1970run_test "SHA-256 allowed by default in client certificate" \
1971 "$P_SRV auth_mode=required allow_sha1=0" \
1972 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha256.crt" \
1973 0
1974
Hanno Becker7ae8a762018-08-14 15:43:35 +01001975# Tests for datagram packing
1976run_test "DTLS: multiple records in same datagram, client and server" \
1977 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
1978 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
1979 0 \
1980 -c "next record in same datagram" \
1981 -s "next record in same datagram"
1982
1983run_test "DTLS: multiple records in same datagram, client only" \
1984 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
1985 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
1986 0 \
1987 -s "next record in same datagram" \
1988 -C "next record in same datagram"
1989
1990run_test "DTLS: multiple records in same datagram, server only" \
1991 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
1992 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
1993 0 \
1994 -S "next record in same datagram" \
1995 -c "next record in same datagram"
1996
1997run_test "DTLS: multiple records in same datagram, neither client nor server" \
1998 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
1999 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
2000 0 \
2001 -S "next record in same datagram" \
2002 -C "next record in same datagram"
2003
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002004# Tests for Truncated HMAC extension
2005
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002006run_test "Truncated HMAC: client default, server default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002007 "$P_SRV debug_level=4" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002008 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002009 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00002010 -s "dumping 'expected mac' (20 bytes)" \
2011 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002012
Hanno Becker32c55012017-11-10 08:42:54 +00002013requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002014run_test "Truncated HMAC: client disabled, server default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002015 "$P_SRV debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002016 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01002017 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00002018 -s "dumping 'expected mac' (20 bytes)" \
2019 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002020
Hanno Becker32c55012017-11-10 08:42:54 +00002021requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002022run_test "Truncated HMAC: client enabled, server default" \
2023 "$P_SRV debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002024 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002025 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00002026 -s "dumping 'expected mac' (20 bytes)" \
2027 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002028
Hanno Becker32c55012017-11-10 08:42:54 +00002029requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002030run_test "Truncated HMAC: client enabled, server disabled" \
2031 "$P_SRV debug_level=4 trunc_hmac=0" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002032 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002033 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00002034 -s "dumping 'expected mac' (20 bytes)" \
2035 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002036
Hanno Becker32c55012017-11-10 08:42:54 +00002037requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Hanno Becker34d0c3f2017-11-17 15:46:24 +00002038run_test "Truncated HMAC: client disabled, server enabled" \
2039 "$P_SRV debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002040 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker34d0c3f2017-11-17 15:46:24 +00002041 0 \
2042 -s "dumping 'expected mac' (20 bytes)" \
2043 -S "dumping 'expected mac' (10 bytes)"
2044
2045requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002046run_test "Truncated HMAC: client enabled, server enabled" \
2047 "$P_SRV debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002048 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002049 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00002050 -S "dumping 'expected mac' (20 bytes)" \
2051 -s "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002052
Hanno Becker4c4f4102017-11-10 09:16:05 +00002053run_test "Truncated HMAC, DTLS: client default, server default" \
2054 "$P_SRV dtls=1 debug_level=4" \
2055 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
2056 0 \
2057 -s "dumping 'expected mac' (20 bytes)" \
2058 -S "dumping 'expected mac' (10 bytes)"
2059
2060requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2061run_test "Truncated HMAC, DTLS: client disabled, server default" \
2062 "$P_SRV dtls=1 debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002063 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00002064 0 \
2065 -s "dumping 'expected mac' (20 bytes)" \
2066 -S "dumping 'expected mac' (10 bytes)"
2067
2068requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2069run_test "Truncated HMAC, DTLS: client enabled, server default" \
2070 "$P_SRV dtls=1 debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002071 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00002072 0 \
2073 -s "dumping 'expected mac' (20 bytes)" \
2074 -S "dumping 'expected mac' (10 bytes)"
2075
2076requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2077run_test "Truncated HMAC, DTLS: client enabled, server disabled" \
2078 "$P_SRV dtls=1 debug_level=4 trunc_hmac=0" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002079 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00002080 0 \
2081 -s "dumping 'expected mac' (20 bytes)" \
2082 -S "dumping 'expected mac' (10 bytes)"
2083
2084requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2085run_test "Truncated HMAC, DTLS: client disabled, server enabled" \
2086 "$P_SRV dtls=1 debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002087 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00002088 0 \
2089 -s "dumping 'expected mac' (20 bytes)" \
2090 -S "dumping 'expected mac' (10 bytes)"
2091
2092requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2093run_test "Truncated HMAC, DTLS: client enabled, server enabled" \
2094 "$P_SRV dtls=1 debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002095 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01002096 0 \
2097 -S "dumping 'expected mac' (20 bytes)" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002098 -s "dumping 'expected mac' (10 bytes)"
2099
Jarno Lamsa2937d812019-06-04 11:33:23 +03002100# Tests for Context serialization
2101
2102requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002103run_test "Context serialization, client serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002104 "$P_SRV dtls=1 serialize=0 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002105 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2106 0 \
2107 -c "Deserializing connection..." \
2108 -S "Deserializing connection..."
2109
2110requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2111run_test "Context serialization, client serializes, ChaChaPoly" \
2112 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2113 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2114 0 \
2115 -c "Deserializing connection..." \
2116 -S "Deserializing connection..."
2117
2118requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2119run_test "Context serialization, client serializes, GCM" \
2120 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2121 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002122 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002123 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002124 -S "Deserializing connection..."
2125
2126requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002127requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2128run_test "Context serialization, client serializes, with CID" \
2129 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
2130 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
2131 0 \
2132 -c "Deserializing connection..." \
2133 -S "Deserializing connection..."
2134
2135requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002136run_test "Context serialization, server serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002137 "$P_SRV dtls=1 serialize=1 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002138 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2139 0 \
2140 -C "Deserializing connection..." \
2141 -s "Deserializing connection..."
2142
2143requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2144run_test "Context serialization, server serializes, ChaChaPoly" \
2145 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2146 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2147 0 \
2148 -C "Deserializing connection..." \
2149 -s "Deserializing connection..."
2150
2151requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2152run_test "Context serialization, server serializes, GCM" \
2153 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2154 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002155 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002156 -C "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002157 -s "Deserializing connection..."
2158
2159requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002160requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2161run_test "Context serialization, server serializes, with CID" \
2162 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
2163 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
2164 0 \
2165 -C "Deserializing connection..." \
2166 -s "Deserializing connection..."
2167
2168requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002169run_test "Context serialization, both serialize, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002170 "$P_SRV dtls=1 serialize=1 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002171 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2172 0 \
2173 -c "Deserializing connection..." \
2174 -s "Deserializing connection..."
2175
2176requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2177run_test "Context serialization, both serialize, ChaChaPoly" \
2178 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2179 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2180 0 \
2181 -c "Deserializing connection..." \
2182 -s "Deserializing connection..."
2183
2184requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2185run_test "Context serialization, both serialize, GCM" \
2186 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2187 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002188 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002189 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002190 -s "Deserializing connection..."
2191
Jarno Lamsac2376f02019-06-06 10:44:14 +03002192requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002193requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2194run_test "Context serialization, both serialize, with CID" \
2195 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
2196 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
2197 0 \
2198 -c "Deserializing connection..." \
2199 -s "Deserializing connection..."
2200
2201requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002202run_test "Context serialization, re-init, client serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002203 "$P_SRV dtls=1 serialize=0 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002204 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2205 0 \
2206 -c "Deserializing connection..." \
2207 -S "Deserializing connection..."
2208
2209requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2210run_test "Context serialization, re-init, client serializes, ChaChaPoly" \
2211 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2212 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2213 0 \
2214 -c "Deserializing connection..." \
2215 -S "Deserializing connection..."
2216
2217requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2218run_test "Context serialization, re-init, client serializes, GCM" \
2219 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2220 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002221 0 \
2222 -c "Deserializing connection..." \
2223 -S "Deserializing connection..."
2224
Jarno Lamsac2376f02019-06-06 10:44:14 +03002225requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002226requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2227run_test "Context serialization, re-init, client serializes, with CID" \
2228 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
2229 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
2230 0 \
2231 -c "Deserializing connection..." \
2232 -S "Deserializing connection..."
2233
2234requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002235run_test "Context serialization, re-init, server serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002236 "$P_SRV dtls=1 serialize=2 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002237 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2238 0 \
2239 -C "Deserializing connection..." \
2240 -s "Deserializing connection..."
2241
2242requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2243run_test "Context serialization, re-init, server serializes, ChaChaPoly" \
2244 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2245 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2246 0 \
2247 -C "Deserializing connection..." \
2248 -s "Deserializing connection..."
2249
2250requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2251run_test "Context serialization, re-init, server serializes, GCM" \
2252 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2253 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002254 0 \
2255 -C "Deserializing connection..." \
2256 -s "Deserializing connection..."
2257
Jarno Lamsac2376f02019-06-06 10:44:14 +03002258requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002259requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2260run_test "Context serialization, re-init, server serializes, with CID" \
2261 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
2262 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
2263 0 \
2264 -C "Deserializing connection..." \
2265 -s "Deserializing connection..."
2266
2267requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002268run_test "Context serialization, re-init, both serialize, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002269 "$P_SRV dtls=1 serialize=2 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002270 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2271 0 \
2272 -c "Deserializing connection..." \
2273 -s "Deserializing connection..."
2274
2275requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2276run_test "Context serialization, re-init, both serialize, ChaChaPoly" \
2277 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2278 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2279 0 \
2280 -c "Deserializing connection..." \
2281 -s "Deserializing connection..."
2282
2283requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2284run_test "Context serialization, re-init, both serialize, GCM" \
2285 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2286 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002287 0 \
2288 -c "Deserializing connection..." \
2289 -s "Deserializing connection..."
2290
Hanno Becker1b18fd32019-08-30 11:18:59 +01002291requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2292requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2293run_test "Context serialization, re-init, both serialize, with CID" \
2294 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
2295 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
2296 0 \
2297 -c "Deserializing connection..." \
2298 -s "Deserializing connection..."
2299
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002300requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2301run_test "Saving the serialized context to a file" \
2302 "$P_SRV dtls=1 serialize=1 context_file=context_srv.txt" \
2303 "$P_CLI dtls=1 serialize=1 context_file=context_cli.txt" \
2304 0 \
2305 -s "Save serialized context to a file... ok" \
2306 -c "Save serialized context to a file... ok"
2307rm -f context_srv.txt
2308rm -f context_cli.txt
2309
Hanno Becker7cf463e2019-04-09 18:08:47 +01002310# Tests for DTLS Connection ID extension
2311
Hanno Becker7cf463e2019-04-09 18:08:47 +01002312# So far, the CID API isn't implemented, so we can't
2313# grep for output witnessing its use. This needs to be
2314# changed once the CID extension is implemented.
2315
Hanno Beckera0e20d02019-05-15 14:03:01 +01002316requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002317run_test "Connection ID: Cli enabled, Srv disabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002318 "$P_SRV debug_level=3 dtls=1 cid=0" \
2319 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2320 0 \
2321 -s "Disable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002322 -s "found CID extension" \
2323 -s "Client sent CID extension, but CID disabled" \
Hanno Becker6b78c832019-04-25 17:01:43 +01002324 -c "Enable use of CID extension." \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002325 -c "client hello, adding CID extension" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002326 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002327 -C "found CID extension" \
2328 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002329 -C "Copy CIDs into SSL transform" \
2330 -c "Use of Connection ID was rejected by the server"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002331
Hanno Beckera0e20d02019-05-15 14:03:01 +01002332requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002333run_test "Connection ID: Cli disabled, Srv enabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002334 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2335 "$P_CLI debug_level=3 dtls=1 cid=0" \
2336 0 \
2337 -c "Disable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002338 -C "client hello, adding CID extension" \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002339 -S "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002340 -s "Enable use of CID extension." \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002341 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002342 -C "found CID extension" \
2343 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002344 -C "Copy CIDs into SSL transform" \
Hanno Beckerb3e9dd52019-05-08 13:19:53 +01002345 -s "Use of Connection ID was not offered by client"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002346
Hanno Beckera0e20d02019-05-15 14:03:01 +01002347requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002348run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002349 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
2350 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef" \
2351 0 \
2352 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002353 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002354 -c "client hello, adding CID extension" \
2355 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002356 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002357 -s "server hello, adding CID extension" \
2358 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002359 -c "Use of CID extension negotiated" \
2360 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002361 -c "Copy CIDs into SSL transform" \
2362 -c "Peer CID (length 2 Bytes): de ad" \
2363 -s "Peer CID (length 2 Bytes): be ef" \
2364 -s "Use of Connection ID has been negotiated" \
2365 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002366
Hanno Beckera0e20d02019-05-15 14:03:01 +01002367requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002368run_test "Connection ID, 3D: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002369 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002370 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead" \
2371 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef" \
2372 0 \
2373 -c "Enable use of CID extension." \
2374 -s "Enable use of CID extension." \
2375 -c "client hello, adding CID extension" \
2376 -s "found CID extension" \
2377 -s "Use of CID extension negotiated" \
2378 -s "server hello, adding CID extension" \
2379 -c "found CID extension" \
2380 -c "Use of CID extension negotiated" \
2381 -s "Copy CIDs into SSL transform" \
2382 -c "Copy CIDs into SSL transform" \
2383 -c "Peer CID (length 2 Bytes): de ad" \
2384 -s "Peer CID (length 2 Bytes): be ef" \
2385 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002386 -c "Use of Connection ID has been negotiated" \
2387 -c "ignoring unexpected CID" \
2388 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002389
Hanno Beckera0e20d02019-05-15 14:03:01 +01002390requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002391run_test "Connection ID, MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
2392 -p "$P_PXY mtu=800" \
2393 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
2394 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
2395 0 \
2396 -c "Enable use of CID extension." \
2397 -s "Enable use of CID extension." \
2398 -c "client hello, adding CID extension" \
2399 -s "found CID extension" \
2400 -s "Use of CID extension negotiated" \
2401 -s "server hello, adding CID extension" \
2402 -c "found CID extension" \
2403 -c "Use of CID extension negotiated" \
2404 -s "Copy CIDs into SSL transform" \
2405 -c "Copy CIDs into SSL transform" \
2406 -c "Peer CID (length 2 Bytes): de ad" \
2407 -s "Peer CID (length 2 Bytes): be ef" \
2408 -s "Use of Connection ID has been negotiated" \
2409 -c "Use of Connection ID has been negotiated"
2410
Hanno Beckera0e20d02019-05-15 14:03:01 +01002411requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002412run_test "Connection ID, 3D+MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002413 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002414 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
2415 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
2416 0 \
2417 -c "Enable use of CID extension." \
2418 -s "Enable use of CID extension." \
2419 -c "client hello, adding CID extension" \
2420 -s "found CID extension" \
2421 -s "Use of CID extension negotiated" \
2422 -s "server hello, adding CID extension" \
2423 -c "found CID extension" \
2424 -c "Use of CID extension negotiated" \
2425 -s "Copy CIDs into SSL transform" \
2426 -c "Copy CIDs into SSL transform" \
2427 -c "Peer CID (length 2 Bytes): de ad" \
2428 -s "Peer CID (length 2 Bytes): be ef" \
2429 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002430 -c "Use of Connection ID has been negotiated" \
2431 -c "ignoring unexpected CID" \
2432 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002433
Hanno Beckera0e20d02019-05-15 14:03:01 +01002434requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002435run_test "Connection ID: Cli+Srv enabled, Cli CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002436 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2437 "$P_CLI debug_level=3 dtls=1 cid=1" \
2438 0 \
2439 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002440 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002441 -c "client hello, adding CID extension" \
2442 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002443 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002444 -s "server hello, adding CID extension" \
2445 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002446 -c "Use of CID extension negotiated" \
2447 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002448 -c "Copy CIDs into SSL transform" \
2449 -c "Peer CID (length 4 Bytes): de ad be ef" \
2450 -s "Peer CID (length 0 Bytes):" \
2451 -s "Use of Connection ID has been negotiated" \
2452 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002453
Hanno Beckera0e20d02019-05-15 14:03:01 +01002454requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002455run_test "Connection ID: Cli+Srv enabled, Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002456 "$P_SRV debug_level=3 dtls=1 cid=1" \
2457 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2458 0 \
2459 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002460 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002461 -c "client hello, adding CID extension" \
2462 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002463 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002464 -s "server hello, adding CID extension" \
2465 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002466 -c "Use of CID extension negotiated" \
2467 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002468 -c "Copy CIDs into SSL transform" \
2469 -s "Peer CID (length 4 Bytes): de ad be ef" \
2470 -c "Peer CID (length 0 Bytes):" \
2471 -s "Use of Connection ID has been negotiated" \
2472 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002473
Hanno Beckera0e20d02019-05-15 14:03:01 +01002474requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002475run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002476 "$P_SRV debug_level=3 dtls=1 cid=1" \
2477 "$P_CLI debug_level=3 dtls=1 cid=1" \
2478 0 \
2479 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002480 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002481 -c "client hello, adding CID extension" \
2482 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002483 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002484 -s "server hello, adding CID extension" \
2485 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002486 -c "Use of CID extension negotiated" \
2487 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002488 -c "Copy CIDs into SSL transform" \
2489 -S "Use of Connection ID has been negotiated" \
2490 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002491
Hanno Beckera0e20d02019-05-15 14:03:01 +01002492requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002493run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002494 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
2495 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2496 0 \
2497 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002498 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002499 -c "client hello, adding CID extension" \
2500 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002501 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002502 -s "server hello, adding CID extension" \
2503 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002504 -c "Use of CID extension negotiated" \
2505 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002506 -c "Copy CIDs into SSL transform" \
2507 -c "Peer CID (length 2 Bytes): de ad" \
2508 -s "Peer CID (length 2 Bytes): be ef" \
2509 -s "Use of Connection ID has been negotiated" \
2510 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002511
Hanno Beckera0e20d02019-05-15 14:03:01 +01002512requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002513run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002514 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2515 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2516 0 \
2517 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002518 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002519 -c "client hello, adding CID extension" \
2520 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002521 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002522 -s "server hello, adding CID extension" \
2523 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002524 -c "Use of CID extension negotiated" \
2525 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002526 -c "Copy CIDs into SSL transform" \
2527 -c "Peer CID (length 4 Bytes): de ad be ef" \
2528 -s "Peer CID (length 0 Bytes):" \
2529 -s "Use of Connection ID has been negotiated" \
2530 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002531
Hanno Beckera0e20d02019-05-15 14:03:01 +01002532requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002533run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002534 "$P_SRV debug_level=3 dtls=1 cid=1" \
2535 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2536 0 \
2537 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002538 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002539 -c "client hello, adding CID extension" \
2540 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002541 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002542 -s "server hello, adding CID extension" \
2543 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002544 -c "Use of CID extension negotiated" \
2545 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002546 -c "Copy CIDs into SSL transform" \
2547 -s "Peer CID (length 4 Bytes): de ad be ef" \
2548 -c "Peer CID (length 0 Bytes):" \
2549 -s "Use of Connection ID has been negotiated" \
2550 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002551
Hanno Beckera0e20d02019-05-15 14:03:01 +01002552requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002553run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002554 "$P_SRV debug_level=3 dtls=1 cid=1" \
2555 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2556 0 \
2557 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002558 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002559 -c "client hello, adding CID extension" \
2560 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002561 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002562 -s "server hello, adding CID extension" \
2563 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002564 -c "Use of CID extension negotiated" \
2565 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002566 -c "Copy CIDs into SSL transform" \
2567 -S "Use of Connection ID has been negotiated" \
2568 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002569
Hanno Beckera0e20d02019-05-15 14:03:01 +01002570requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002571run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002572 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
2573 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
2574 0 \
2575 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002576 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002577 -c "client hello, adding CID extension" \
2578 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002579 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002580 -s "server hello, adding CID extension" \
2581 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002582 -c "Use of CID extension negotiated" \
2583 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002584 -c "Copy CIDs into SSL transform" \
2585 -c "Peer CID (length 2 Bytes): de ad" \
2586 -s "Peer CID (length 2 Bytes): be ef" \
2587 -s "Use of Connection ID has been negotiated" \
2588 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002589
Hanno Beckera0e20d02019-05-15 14:03:01 +01002590requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002591run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002592 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2593 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
2594 0 \
2595 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002596 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002597 -c "client hello, adding CID extension" \
2598 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002599 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002600 -s "server hello, adding CID extension" \
2601 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002602 -c "Use of CID extension negotiated" \
2603 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002604 -c "Copy CIDs into SSL transform" \
2605 -c "Peer CID (length 4 Bytes): de ad be ef" \
2606 -s "Peer CID (length 0 Bytes):" \
2607 -s "Use of Connection ID has been negotiated" \
2608 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002609
Hanno Beckera0e20d02019-05-15 14:03:01 +01002610requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002611run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002612 "$P_SRV debug_level=3 dtls=1 cid=1" \
2613 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
2614 0 \
2615 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002616 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002617 -c "client hello, adding CID extension" \
2618 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002619 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002620 -s "server hello, adding CID extension" \
2621 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002622 -c "Use of CID extension negotiated" \
2623 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002624 -c "Copy CIDs into SSL transform" \
2625 -s "Peer CID (length 4 Bytes): de ad be ef" \
2626 -c "Peer CID (length 0 Bytes):" \
2627 -s "Use of Connection ID has been negotiated" \
2628 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002629
Hanno Beckera0e20d02019-05-15 14:03:01 +01002630requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002631run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002632 "$P_SRV debug_level=3 dtls=1 cid=1" \
2633 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
2634 0 \
2635 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002636 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002637 -c "client hello, adding CID extension" \
2638 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002639 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002640 -s "server hello, adding CID extension" \
2641 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002642 -c "Use of CID extension negotiated" \
2643 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002644 -c "Copy CIDs into SSL transform" \
2645 -S "Use of Connection ID has been negotiated" \
2646 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002647
Hanno Beckera0e20d02019-05-15 14:03:01 +01002648requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker9bae30d2019-04-23 11:52:44 +01002649requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002650run_test "Connection ID: Cli+Srv enabled, renegotiate without change of CID" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002651 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
2652 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
2653 0 \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002654 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2655 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2656 -s "(initial handshake) Use of Connection ID has been negotiated" \
2657 -c "(initial handshake) Use of Connection ID has been negotiated" \
2658 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2659 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2660 -s "(after renegotiation) Use of Connection ID has been negotiated" \
2661 -c "(after renegotiation) Use of Connection ID has been negotiated"
2662
Hanno Beckera0e20d02019-05-15 14:03:01 +01002663requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002664requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002665run_test "Connection ID: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002666 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
2667 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
2668 0 \
2669 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2670 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2671 -s "(initial handshake) Use of Connection ID has been negotiated" \
2672 -c "(initial handshake) Use of Connection ID has been negotiated" \
2673 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2674 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2675 -s "(after renegotiation) Use of Connection ID has been negotiated" \
2676 -c "(after renegotiation) Use of Connection ID has been negotiated"
2677
Hanno Beckera0e20d02019-05-15 14:03:01 +01002678requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002679requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01002680run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate with different CID" \
2681 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead cid_val_renego=beef renegotiation=1" \
2682 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
2683 0 \
2684 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2685 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2686 -s "(initial handshake) Use of Connection ID has been negotiated" \
2687 -c "(initial handshake) Use of Connection ID has been negotiated" \
2688 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2689 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2690 -s "(after renegotiation) Use of Connection ID has been negotiated" \
2691 -c "(after renegotiation) Use of Connection ID has been negotiated"
2692
Hanno Beckera0e20d02019-05-15 14:03:01 +01002693requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01002694requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002695run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002696 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002697 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
2698 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
2699 0 \
2700 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2701 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2702 -s "(initial handshake) Use of Connection ID has been negotiated" \
2703 -c "(initial handshake) Use of Connection ID has been negotiated" \
2704 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2705 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2706 -s "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002707 -c "(after renegotiation) Use of Connection ID has been negotiated" \
2708 -c "ignoring unexpected CID" \
2709 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002710
Hanno Beckera0e20d02019-05-15 14:03:01 +01002711requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002712requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2713run_test "Connection ID: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002714 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2715 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2716 0 \
2717 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2718 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2719 -s "(initial handshake) Use of Connection ID has been negotiated" \
2720 -c "(initial handshake) Use of Connection ID has been negotiated" \
2721 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2722 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2723 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2724 -S "(after renegotiation) Use of Connection ID has been negotiated"
2725
Hanno Beckera0e20d02019-05-15 14:03:01 +01002726requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002727requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01002728run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate without CID" \
2729 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2730 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2731 0 \
2732 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2733 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2734 -s "(initial handshake) Use of Connection ID has been negotiated" \
2735 -c "(initial handshake) Use of Connection ID has been negotiated" \
2736 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2737 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2738 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2739 -S "(after renegotiation) Use of Connection ID has been negotiated"
2740
Hanno Beckera0e20d02019-05-15 14:03:01 +01002741requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01002742requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002743run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002744 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002745 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2746 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2747 0 \
2748 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2749 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2750 -s "(initial handshake) Use of Connection ID has been negotiated" \
2751 -c "(initial handshake) Use of Connection ID has been negotiated" \
2752 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2753 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2754 -C "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002755 -S "(after renegotiation) Use of Connection ID has been negotiated" \
2756 -c "ignoring unexpected CID" \
2757 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002758
Hanno Beckera0e20d02019-05-15 14:03:01 +01002759requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002760requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2761run_test "Connection ID: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002762 "$P_SRV debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
2763 "$P_CLI debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
2764 0 \
2765 -S "(initial handshake) Use of Connection ID has been negotiated" \
2766 -C "(initial handshake) Use of Connection ID has been negotiated" \
2767 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2768 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2769 -c "(after renegotiation) Use of Connection ID has been negotiated" \
2770 -s "(after renegotiation) Use of Connection ID has been negotiated"
2771
Hanno Beckera0e20d02019-05-15 14:03:01 +01002772requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002773requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01002774run_test "Connection ID, no packing: Cli+Srv enabled, CID on renegotiation" \
2775 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
2776 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
2777 0 \
2778 -S "(initial handshake) Use of Connection ID has been negotiated" \
2779 -C "(initial handshake) Use of Connection ID has been negotiated" \
2780 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2781 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2782 -c "(after renegotiation) Use of Connection ID has been negotiated" \
2783 -s "(after renegotiation) Use of Connection ID has been negotiated"
2784
Hanno Beckera0e20d02019-05-15 14:03:01 +01002785requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01002786requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002787run_test "Connection ID, 3D+MTU: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002788 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002789 "$P_SRV debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
2790 "$P_CLI debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
2791 0 \
2792 -S "(initial handshake) Use of Connection ID has been negotiated" \
2793 -C "(initial handshake) Use of Connection ID has been negotiated" \
2794 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2795 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2796 -c "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002797 -s "(after renegotiation) Use of Connection ID has been negotiated" \
2798 -c "ignoring unexpected CID" \
2799 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002800
Hanno Beckera0e20d02019-05-15 14:03:01 +01002801requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002802requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2803run_test "Connection ID: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002804 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
2805 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2806 0 \
2807 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2808 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2809 -s "(initial handshake) Use of Connection ID has been negotiated" \
2810 -c "(initial handshake) Use of Connection ID has been negotiated" \
2811 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2812 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2813 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2814 -S "(after renegotiation) Use of Connection ID has been negotiated" \
2815 -s "(after renegotiation) Use of Connection ID was not offered by client"
2816
Hanno Beckera0e20d02019-05-15 14:03:01 +01002817requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002818requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002819run_test "Connection ID, 3D: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002820 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002821 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
2822 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2823 0 \
2824 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2825 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2826 -s "(initial handshake) Use of Connection ID has been negotiated" \
2827 -c "(initial handshake) Use of Connection ID has been negotiated" \
2828 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2829 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2830 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2831 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002832 -s "(after renegotiation) Use of Connection ID was not offered by client" \
2833 -c "ignoring unexpected CID" \
2834 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002835
Hanno Beckera0e20d02019-05-15 14:03:01 +01002836requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002837requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2838run_test "Connection ID: Cli+Srv enabled, Srv disables on renegotiation" \
2839 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2840 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
2841 0 \
2842 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2843 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2844 -s "(initial handshake) Use of Connection ID has been negotiated" \
2845 -c "(initial handshake) Use of Connection ID has been negotiated" \
2846 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2847 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2848 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2849 -S "(after renegotiation) Use of Connection ID has been negotiated" \
2850 -c "(after renegotiation) Use of Connection ID was rejected by the server"
2851
Hanno Beckera0e20d02019-05-15 14:03:01 +01002852requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002853requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2854run_test "Connection ID, 3D: Cli+Srv enabled, Srv disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002855 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002856 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2857 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
2858 0 \
2859 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2860 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2861 -s "(initial handshake) Use of Connection ID has been negotiated" \
2862 -c "(initial handshake) Use of Connection ID has been negotiated" \
2863 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2864 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2865 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2866 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002867 -c "(after renegotiation) Use of Connection ID was rejected by the server" \
2868 -c "ignoring unexpected CID" \
2869 -s "ignoring unexpected CID"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002870
Yuto Takano71879532021-07-09 11:32:38 +01002871# This and the test below it require MAX_CONTENT_LEN to be at least MFL+1, because the
2872# tests check that the buffer contents are reallocated when the message is
2873# larger than the buffer.
Andrzej Kurekb6577832020-06-08 07:08:03 -04002874requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2875requires_config_enabled MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Yuto Takano71879532021-07-09 11:32:38 +01002876requires_max_content_len 513
Andrzej Kurekb6577832020-06-08 07:08:03 -04002877run_test "Connection ID: Cli+Srv enabled, variable buffer lengths, MFL=512" \
2878 "$P_SRV dtls=1 cid=1 cid_val=dead debug_level=2" \
2879 "$P_CLI force_ciphersuite="TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" max_frag_len=512 dtls=1 cid=1 cid_val=beef" \
2880 0 \
2881 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2882 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2883 -s "(initial handshake) Use of Connection ID has been negotiated" \
2884 -c "(initial handshake) Use of Connection ID has been negotiated" \
2885 -s "Reallocating in_buf" \
2886 -s "Reallocating out_buf"
2887
2888requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2889requires_config_enabled MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Yuto Takano71879532021-07-09 11:32:38 +01002890requires_max_content_len 1025
Andrzej Kurekb6577832020-06-08 07:08:03 -04002891run_test "Connection ID: Cli+Srv enabled, variable buffer lengths, MFL=1024" \
2892 "$P_SRV dtls=1 cid=1 cid_val=dead debug_level=2" \
2893 "$P_CLI force_ciphersuite="TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" max_frag_len=1024 dtls=1 cid=1 cid_val=beef" \
2894 0 \
2895 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2896 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2897 -s "(initial handshake) Use of Connection ID has been negotiated" \
2898 -c "(initial handshake) Use of Connection ID has been negotiated" \
2899 -s "Reallocating in_buf" \
2900 -s "Reallocating out_buf"
2901
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002902# Tests for Encrypt-then-MAC extension
2903
2904run_test "Encrypt then MAC: default" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002905 "$P_SRV debug_level=3 \
2906 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002907 "$P_CLI debug_level=3" \
2908 0 \
2909 -c "client hello, adding encrypt_then_mac extension" \
2910 -s "found encrypt then mac extension" \
2911 -s "server hello, adding encrypt then mac extension" \
2912 -c "found encrypt_then_mac extension" \
2913 -c "using encrypt then mac" \
2914 -s "using encrypt then mac"
2915
2916run_test "Encrypt then MAC: client enabled, server disabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002917 "$P_SRV debug_level=3 etm=0 \
2918 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002919 "$P_CLI debug_level=3 etm=1" \
2920 0 \
2921 -c "client hello, adding encrypt_then_mac extension" \
2922 -s "found encrypt then mac extension" \
2923 -S "server hello, adding encrypt then mac extension" \
2924 -C "found encrypt_then_mac extension" \
2925 -C "using encrypt then mac" \
2926 -S "using encrypt then mac"
2927
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01002928run_test "Encrypt then MAC: client enabled, aead cipher" \
2929 "$P_SRV debug_level=3 etm=1 \
2930 force_ciphersuite=TLS-RSA-WITH-AES-128-GCM-SHA256" \
2931 "$P_CLI debug_level=3 etm=1" \
2932 0 \
2933 -c "client hello, adding encrypt_then_mac extension" \
2934 -s "found encrypt then mac extension" \
2935 -S "server hello, adding encrypt then mac extension" \
2936 -C "found encrypt_then_mac extension" \
2937 -C "using encrypt then mac" \
2938 -S "using encrypt then mac"
2939
2940run_test "Encrypt then MAC: client enabled, stream cipher" \
2941 "$P_SRV debug_level=3 etm=1 \
2942 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01002943 "$P_CLI debug_level=3 etm=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01002944 0 \
2945 -c "client hello, adding encrypt_then_mac extension" \
2946 -s "found encrypt then mac extension" \
2947 -S "server hello, adding encrypt then mac extension" \
2948 -C "found encrypt_then_mac extension" \
2949 -C "using encrypt then mac" \
2950 -S "using encrypt then mac"
2951
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002952run_test "Encrypt then MAC: client disabled, server enabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002953 "$P_SRV debug_level=3 etm=1 \
2954 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002955 "$P_CLI debug_level=3 etm=0" \
2956 0 \
2957 -C "client hello, adding encrypt_then_mac extension" \
2958 -S "found encrypt then mac extension" \
2959 -S "server hello, adding encrypt then mac extension" \
2960 -C "found encrypt_then_mac extension" \
2961 -C "using encrypt then mac" \
2962 -S "using encrypt then mac"
2963
2964run_test "Encrypt then MAC: client SSLv3, server enabled" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002965 "$P_SRV debug_level=3 min_version=ssl3 \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002966 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002967 "$P_CLI debug_level=3 force_version=ssl3" \
2968 0 \
2969 -C "client hello, adding encrypt_then_mac extension" \
2970 -S "found encrypt then mac extension" \
2971 -S "server hello, adding encrypt then mac extension" \
2972 -C "found encrypt_then_mac extension" \
2973 -C "using encrypt then mac" \
2974 -S "using encrypt then mac"
2975
2976run_test "Encrypt then MAC: client enabled, server SSLv3" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002977 "$P_SRV debug_level=3 force_version=ssl3 \
2978 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002979 "$P_CLI debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002980 0 \
2981 -c "client hello, adding encrypt_then_mac extension" \
Janos Follath00efff72016-05-06 13:48:23 +01002982 -S "found encrypt then mac extension" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002983 -S "server hello, adding encrypt then mac extension" \
2984 -C "found encrypt_then_mac extension" \
2985 -C "using encrypt then mac" \
2986 -S "using encrypt then mac"
2987
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002988# Tests for Extended Master Secret extension
2989
Gilles Peskine111fde42022-02-25 19:51:52 +01002990requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002991run_test "Extended Master Secret: default" \
2992 "$P_SRV debug_level=3" \
2993 "$P_CLI debug_level=3" \
2994 0 \
2995 -c "client hello, adding extended_master_secret extension" \
2996 -s "found extended master secret extension" \
2997 -s "server hello, adding extended master secret extension" \
2998 -c "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002999 -c "session hash for extended master secret" \
3000 -s "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003001
Gilles Peskine111fde42022-02-25 19:51:52 +01003002requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003003run_test "Extended Master Secret: client enabled, server disabled" \
3004 "$P_SRV debug_level=3 extended_ms=0" \
3005 "$P_CLI debug_level=3 extended_ms=1" \
3006 0 \
3007 -c "client hello, adding extended_master_secret extension" \
3008 -s "found extended master secret extension" \
3009 -S "server hello, adding extended master secret extension" \
3010 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003011 -C "session hash for extended master secret" \
3012 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003013
Gilles Peskine111fde42022-02-25 19:51:52 +01003014requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003015run_test "Extended Master Secret: client disabled, server enabled" \
3016 "$P_SRV debug_level=3 extended_ms=1" \
3017 "$P_CLI debug_level=3 extended_ms=0" \
3018 0 \
3019 -C "client hello, adding extended_master_secret extension" \
3020 -S "found extended master secret extension" \
3021 -S "server hello, adding extended master secret extension" \
3022 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003023 -C "session hash for extended master secret" \
3024 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003025
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003026run_test "Extended Master Secret: client SSLv3, server enabled" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01003027 "$P_SRV debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003028 "$P_CLI debug_level=3 force_version=ssl3" \
3029 0 \
3030 -C "client hello, adding extended_master_secret extension" \
3031 -S "found extended master secret extension" \
3032 -S "server hello, adding extended master secret extension" \
3033 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003034 -C "session hash for extended master secret" \
3035 -S "session hash for extended master secret"
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003036
3037run_test "Extended Master Secret: client enabled, server SSLv3" \
3038 "$P_SRV debug_level=3 force_version=ssl3" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01003039 "$P_CLI debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003040 0 \
3041 -c "client hello, adding extended_master_secret extension" \
Janos Follath00efff72016-05-06 13:48:23 +01003042 -S "found extended master secret extension" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003043 -S "server hello, adding extended master secret extension" \
3044 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003045 -C "session hash for extended master secret" \
3046 -S "session hash for extended master secret"
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003047
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003048# Tests for FALLBACK_SCSV
3049
3050run_test "Fallback SCSV: default" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003051 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003052 "$P_CLI debug_level=3 force_version=tls1_1" \
3053 0 \
3054 -C "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003055 -S "received FALLBACK_SCSV" \
3056 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003057 -C "is a fatal alert message (msg 86)"
3058
3059run_test "Fallback SCSV: explicitly disabled" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003060 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003061 "$P_CLI debug_level=3 force_version=tls1_1 fallback=0" \
3062 0 \
3063 -C "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003064 -S "received FALLBACK_SCSV" \
3065 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003066 -C "is a fatal alert message (msg 86)"
3067
3068run_test "Fallback SCSV: enabled" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003069 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003070 "$P_CLI debug_level=3 force_version=tls1_1 fallback=1" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003071 1 \
3072 -c "adding FALLBACK_SCSV" \
3073 -s "received FALLBACK_SCSV" \
3074 -s "inapropriate fallback" \
3075 -c "is a fatal alert message (msg 86)"
3076
3077run_test "Fallback SCSV: enabled, max version" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003078 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003079 "$P_CLI debug_level=3 fallback=1" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003080 0 \
3081 -c "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003082 -s "received FALLBACK_SCSV" \
3083 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003084 -C "is a fatal alert message (msg 86)"
3085
3086requires_openssl_with_fallback_scsv
3087run_test "Fallback SCSV: default, openssl server" \
3088 "$O_SRV" \
3089 "$P_CLI debug_level=3 force_version=tls1_1 fallback=0" \
3090 0 \
3091 -C "adding FALLBACK_SCSV" \
3092 -C "is a fatal alert message (msg 86)"
3093
3094requires_openssl_with_fallback_scsv
3095run_test "Fallback SCSV: enabled, openssl server" \
3096 "$O_SRV" \
3097 "$P_CLI debug_level=3 force_version=tls1_1 fallback=1" \
3098 1 \
3099 -c "adding FALLBACK_SCSV" \
3100 -c "is a fatal alert message (msg 86)"
3101
Gilles Peskineadd21ad2022-04-15 15:14:58 +02003102requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003103requires_openssl_with_fallback_scsv
3104run_test "Fallback SCSV: disabled, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003105 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003106 "$O_CLI -tls1_1" \
3107 0 \
3108 -S "received FALLBACK_SCSV" \
3109 -S "inapropriate fallback"
3110
Gilles Peskineadd21ad2022-04-15 15:14:58 +02003111requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003112requires_openssl_with_fallback_scsv
3113run_test "Fallback SCSV: enabled, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003114 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003115 "$O_CLI -tls1_1 -fallback_scsv" \
3116 1 \
3117 -s "received FALLBACK_SCSV" \
3118 -s "inapropriate fallback"
3119
3120requires_openssl_with_fallback_scsv
3121run_test "Fallback SCSV: enabled, max version, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003122 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003123 "$O_CLI -fallback_scsv" \
3124 0 \
3125 -s "received FALLBACK_SCSV" \
3126 -S "inapropriate fallback"
3127
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003128# Test sending and receiving empty application data records
3129
3130run_test "Encrypt then MAC: empty application data record" \
3131 "$P_SRV auth_mode=none debug_level=4 etm=1" \
3132 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA" \
3133 0 \
3134 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
3135 -s "dumping 'input payload after decrypt' (0 bytes)" \
3136 -c "0 bytes written in 1 fragments"
3137
Manuel Pégourié-Gonnard9e2c80f2020-03-24 10:53:39 +01003138run_test "Encrypt then MAC: disabled, empty application data record" \
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003139 "$P_SRV auth_mode=none debug_level=4 etm=0" \
3140 "$P_CLI auth_mode=none etm=0 request_size=0" \
3141 0 \
3142 -s "dumping 'input payload after decrypt' (0 bytes)" \
3143 -c "0 bytes written in 1 fragments"
3144
3145run_test "Encrypt then MAC, DTLS: empty application data record" \
3146 "$P_SRV auth_mode=none debug_level=4 etm=1 dtls=1" \
3147 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA dtls=1" \
3148 0 \
3149 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
3150 -s "dumping 'input payload after decrypt' (0 bytes)" \
3151 -c "0 bytes written in 1 fragments"
3152
Manuel Pégourié-Gonnard9e2c80f2020-03-24 10:53:39 +01003153run_test "Encrypt then MAC, DTLS: disabled, empty application data record" \
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003154 "$P_SRV auth_mode=none debug_level=4 etm=0 dtls=1" \
3155 "$P_CLI auth_mode=none etm=0 request_size=0 dtls=1" \
3156 0 \
3157 -s "dumping 'input payload after decrypt' (0 bytes)" \
3158 -c "0 bytes written in 1 fragments"
3159
Gilles Peskined50177f2017-05-16 17:53:03 +02003160## ClientHello generated with
3161## "openssl s_client -CAfile tests/data_files/test-ca.crt -tls1_1 -connect localhost:4433 -cipher ..."
3162## then manually twiddling the ciphersuite list.
3163## The ClientHello content is spelled out below as a hex string as
3164## "prefix ciphersuite1 ciphersuite2 ciphersuite3 ciphersuite4 suffix".
3165## The expected response is an inappropriate_fallback alert.
Gilles Peskinebba3b4c2022-04-09 00:08:47 +02003166requires_config_enabled MBEDTLS_SSL_FALLBACK_SCSV
Gilles Peskined50177f2017-05-16 17:53:03 +02003167run_test "Fallback SCSV: beginning of list" \
3168 "$P_SRV debug_level=2" \
3169 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 5600 0031 0032 0033 0100000900230000000f000101' '15030200020256'" \
3170 0 \
3171 -s "received FALLBACK_SCSV" \
3172 -s "inapropriate fallback"
3173
Gilles Peskinebba3b4c2022-04-09 00:08:47 +02003174requires_config_enabled MBEDTLS_SSL_FALLBACK_SCSV
Gilles Peskined50177f2017-05-16 17:53:03 +02003175run_test "Fallback SCSV: end of list" \
3176 "$P_SRV debug_level=2" \
3177 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0031 0032 0033 5600 0100000900230000000f000101' '15030200020256'" \
3178 0 \
3179 -s "received FALLBACK_SCSV" \
3180 -s "inapropriate fallback"
3181
3182## Here the expected response is a valid ServerHello prefix, up to the random.
Gilles Peskinebba3b4c2022-04-09 00:08:47 +02003183requires_config_enabled MBEDTLS_SSL_FALLBACK_SCSV
Gilles Peskined50177f2017-05-16 17:53:03 +02003184run_test "Fallback SCSV: not in list" \
3185 "$P_SRV debug_level=2" \
3186 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0056 0031 0032 0033 0100000900230000000f000101' '16030200300200002c0302'" \
3187 0 \
3188 -S "received FALLBACK_SCSV" \
3189 -S "inapropriate fallback"
3190
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003191# Tests for CBC 1/n-1 record splitting
3192
3193run_test "CBC Record splitting: TLS 1.2, no splitting" \
3194 "$P_SRV" \
3195 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
Xiaofei Baif40545d2021-12-02 08:43:35 +00003196 request_size=123 force_version=tls12" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003197 0 \
3198 -s "Read from client: 123 bytes read" \
3199 -S "Read from client: 1 bytes read" \
3200 -S "122 bytes read"
3201
3202run_test "CBC Record splitting: TLS 1.1, no splitting" \
3203 "$P_SRV" \
3204 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3205 request_size=123 force_version=tls1_1" \
3206 0 \
3207 -s "Read from client: 123 bytes read" \
3208 -S "Read from client: 1 bytes read" \
3209 -S "122 bytes read"
3210
3211run_test "CBC Record splitting: TLS 1.0, splitting" \
3212 "$P_SRV" \
3213 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3214 request_size=123 force_version=tls1" \
3215 0 \
3216 -S "Read from client: 123 bytes read" \
3217 -s "Read from client: 1 bytes read" \
3218 -s "122 bytes read"
3219
3220run_test "CBC Record splitting: SSLv3, splitting" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01003221 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003222 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3223 request_size=123 force_version=ssl3" \
3224 0 \
3225 -S "Read from client: 123 bytes read" \
3226 -s "Read from client: 1 bytes read" \
3227 -s "122 bytes read"
3228
3229run_test "CBC Record splitting: TLS 1.0 RC4, no splitting" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01003230 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003231 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
3232 request_size=123 force_version=tls1" \
3233 0 \
3234 -s "Read from client: 123 bytes read" \
3235 -S "Read from client: 1 bytes read" \
3236 -S "122 bytes read"
3237
3238run_test "CBC Record splitting: TLS 1.0, splitting disabled" \
3239 "$P_SRV" \
3240 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3241 request_size=123 force_version=tls1 recsplit=0" \
3242 0 \
3243 -s "Read from client: 123 bytes read" \
3244 -S "Read from client: 1 bytes read" \
3245 -S "122 bytes read"
3246
Manuel Pégourié-Gonnarda852cf42015-01-13 20:56:15 +01003247run_test "CBC Record splitting: TLS 1.0, splitting, nbio" \
3248 "$P_SRV nbio=2" \
3249 "$P_CLI nbio=2 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3250 request_size=123 force_version=tls1" \
3251 0 \
3252 -S "Read from client: 123 bytes read" \
3253 -s "Read from client: 1 bytes read" \
3254 -s "122 bytes read"
3255
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003256# Tests for Session Tickets
3257
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003258run_test "Session resume using tickets: basic" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003259 "$P_SRV debug_level=3 tickets=1" \
3260 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003261 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003262 -c "client hello, adding session ticket extension" \
3263 -s "found session ticket extension" \
3264 -s "server hello, adding session ticket extension" \
3265 -c "found session_ticket extension" \
3266 -c "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003267 -S "session successfully restored from cache" \
3268 -s "session successfully restored from ticket" \
3269 -s "a session has been resumed" \
3270 -c "a session has been resumed"
3271
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003272run_test "Session resume using tickets: cache disabled" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003273 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
3274 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01003275 0 \
3276 -c "client hello, adding session ticket extension" \
3277 -s "found session ticket extension" \
3278 -s "server hello, adding session ticket extension" \
3279 -c "found session_ticket extension" \
3280 -c "parse new session ticket" \
3281 -S "session successfully restored from cache" \
3282 -s "session successfully restored from ticket" \
3283 -s "a session has been resumed" \
3284 -c "a session has been resumed"
3285
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003286run_test "Session resume using tickets: timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003287 "$P_SRV debug_level=3 tickets=1 cache_max=0 ticket_timeout=1" \
3288 "$P_CLI debug_level=3 tickets=1 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01003289 0 \
3290 -c "client hello, adding session ticket extension" \
3291 -s "found session ticket extension" \
3292 -s "server hello, adding session ticket extension" \
3293 -c "found session_ticket extension" \
3294 -c "parse new session ticket" \
3295 -S "session successfully restored from cache" \
3296 -S "session successfully restored from ticket" \
3297 -S "a session has been resumed" \
3298 -C "a session has been resumed"
3299
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003300run_test "Session resume using tickets: session copy" \
3301 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
3302 "$P_CLI debug_level=3 tickets=1 reconnect=1 reco_mode=0" \
3303 0 \
3304 -c "client hello, adding session ticket extension" \
3305 -s "found session ticket extension" \
3306 -s "server hello, adding session ticket extension" \
3307 -c "found session_ticket extension" \
3308 -c "parse new session ticket" \
3309 -S "session successfully restored from cache" \
3310 -s "session successfully restored from ticket" \
3311 -s "a session has been resumed" \
3312 -c "a session has been resumed"
3313
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003314run_test "Session resume using tickets: openssl server" \
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01003315 "$O_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003316 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01003317 0 \
3318 -c "client hello, adding session ticket extension" \
3319 -c "found session_ticket extension" \
3320 -c "parse new session ticket" \
3321 -c "a session has been resumed"
3322
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003323run_test "Session resume using tickets: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003324 "$P_SRV debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02003325 "( $O_CLI -sess_out $SESSION; \
3326 $O_CLI -sess_in $SESSION; \
3327 rm -f $SESSION )" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01003328 0 \
3329 -s "found session ticket extension" \
3330 -s "server hello, adding session ticket extension" \
3331 -S "session successfully restored from cache" \
3332 -s "session successfully restored from ticket" \
3333 -s "a session has been resumed"
3334
Hanno Becker1d739932018-08-21 13:55:22 +01003335# Tests for Session Tickets with DTLS
3336
3337run_test "Session resume using tickets, DTLS: basic" \
3338 "$P_SRV debug_level=3 dtls=1 tickets=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003339 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003340 0 \
3341 -c "client hello, adding session ticket extension" \
3342 -s "found session ticket extension" \
3343 -s "server hello, adding session ticket extension" \
3344 -c "found session_ticket extension" \
3345 -c "parse new session ticket" \
3346 -S "session successfully restored from cache" \
3347 -s "session successfully restored from ticket" \
3348 -s "a session has been resumed" \
3349 -c "a session has been resumed"
3350
3351run_test "Session resume using tickets, DTLS: cache disabled" \
3352 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003353 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003354 0 \
3355 -c "client hello, adding session ticket extension" \
3356 -s "found session ticket extension" \
3357 -s "server hello, adding session ticket extension" \
3358 -c "found session_ticket extension" \
3359 -c "parse new session ticket" \
3360 -S "session successfully restored from cache" \
3361 -s "session successfully restored from ticket" \
3362 -s "a session has been resumed" \
3363 -c "a session has been resumed"
3364
3365run_test "Session resume using tickets, DTLS: timeout" \
3366 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0 ticket_timeout=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003367 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1 reco_delay=2" \
Hanno Becker1d739932018-08-21 13:55:22 +01003368 0 \
3369 -c "client hello, adding session ticket extension" \
3370 -s "found session ticket extension" \
3371 -s "server hello, adding session ticket extension" \
3372 -c "found session_ticket extension" \
3373 -c "parse new session ticket" \
3374 -S "session successfully restored from cache" \
3375 -S "session successfully restored from ticket" \
3376 -S "a session has been resumed" \
3377 -C "a session has been resumed"
3378
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003379run_test "Session resume using tickets, DTLS: session copy" \
3380 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003381 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003382 0 \
3383 -c "client hello, adding session ticket extension" \
3384 -s "found session ticket extension" \
3385 -s "server hello, adding session ticket extension" \
3386 -c "found session_ticket extension" \
3387 -c "parse new session ticket" \
3388 -S "session successfully restored from cache" \
3389 -s "session successfully restored from ticket" \
3390 -s "a session has been resumed" \
3391 -c "a session has been resumed"
3392
Hanno Becker1d739932018-08-21 13:55:22 +01003393run_test "Session resume using tickets, DTLS: openssl server" \
3394 "$O_SRV -dtls1" \
3395 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1" \
3396 0 \
3397 -c "client hello, adding session ticket extension" \
3398 -c "found session_ticket extension" \
3399 -c "parse new session ticket" \
3400 -c "a session has been resumed"
3401
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003402# For reasons that aren't fully understood, this test randomly fails with high
Paul Elliott7ca2f392021-10-13 16:13:44 +01003403# probability with OpenSSL 1.0.2g on the CI, see #5012.
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003404requires_openssl_next
Hanno Becker1d739932018-08-21 13:55:22 +01003405run_test "Session resume using tickets, DTLS: openssl client" \
3406 "$P_SRV dtls=1 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003407 "( $O_NEXT_CLI -dtls1 -sess_out $SESSION; \
3408 $O_NEXT_CLI -dtls1 -sess_in $SESSION; \
Hanno Becker1d739932018-08-21 13:55:22 +01003409 rm -f $SESSION )" \
3410 0 \
3411 -s "found session ticket extension" \
3412 -s "server hello, adding session ticket extension" \
3413 -S "session successfully restored from cache" \
3414 -s "session successfully restored from ticket" \
3415 -s "a session has been resumed"
3416
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003417# Tests for Session Resume based on session-ID and cache
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003418
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003419run_test "Session resume using cache: tickets enabled on client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003420 "$P_SRV debug_level=3 tickets=0" \
3421 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003422 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003423 -c "client hello, adding session ticket extension" \
3424 -s "found session ticket extension" \
3425 -S "server hello, adding session ticket extension" \
3426 -C "found session_ticket extension" \
3427 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003428 -s "session successfully restored from cache" \
3429 -S "session successfully restored from ticket" \
3430 -s "a session has been resumed" \
3431 -c "a session has been resumed"
3432
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003433run_test "Session resume using cache: tickets enabled on server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003434 "$P_SRV debug_level=3 tickets=1" \
3435 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003436 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003437 -C "client hello, adding session ticket extension" \
3438 -S "found session ticket extension" \
3439 -S "server hello, adding session ticket extension" \
3440 -C "found session_ticket extension" \
3441 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003442 -s "session successfully restored from cache" \
3443 -S "session successfully restored from ticket" \
3444 -s "a session has been resumed" \
3445 -c "a session has been resumed"
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003446
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003447run_test "Session resume using cache: cache_max=0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003448 "$P_SRV debug_level=3 tickets=0 cache_max=0" \
3449 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01003450 0 \
3451 -S "session successfully restored from cache" \
3452 -S "session successfully restored from ticket" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003453 -S "a session has been resumed" \
3454 -C "a session has been resumed"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01003455
Gilles Peskine111fde42022-02-25 19:51:52 +01003456requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003457run_test "Session resume using cache: cache_max=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003458 "$P_SRV debug_level=3 tickets=0 cache_max=1" \
3459 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003460 0 \
3461 -s "session successfully restored from cache" \
3462 -S "session successfully restored from ticket" \
3463 -s "a session has been resumed" \
3464 -c "a session has been resumed"
3465
Gilles Peskine111fde42022-02-25 19:51:52 +01003466requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard6df31962015-05-04 10:55:47 +02003467run_test "Session resume using cache: timeout > delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003468 "$P_SRV debug_level=3 tickets=0" \
3469 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=0" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003470 0 \
3471 -s "session successfully restored from cache" \
3472 -S "session successfully restored from ticket" \
3473 -s "a session has been resumed" \
3474 -c "a session has been resumed"
3475
Gilles Peskine111fde42022-02-25 19:51:52 +01003476requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003477run_test "Session resume using cache: timeout < delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003478 "$P_SRV debug_level=3 tickets=0 cache_timeout=1" \
3479 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003480 0 \
3481 -S "session successfully restored from cache" \
3482 -S "session successfully restored from ticket" \
3483 -S "a session has been resumed" \
3484 -C "a session has been resumed"
3485
Gilles Peskine111fde42022-02-25 19:51:52 +01003486requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003487run_test "Session resume using cache: no timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003488 "$P_SRV debug_level=3 tickets=0 cache_timeout=0" \
3489 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01003490 0 \
3491 -s "session successfully restored from cache" \
3492 -S "session successfully restored from ticket" \
3493 -s "a session has been resumed" \
3494 -c "a session has been resumed"
3495
Gilles Peskine111fde42022-02-25 19:51:52 +01003496requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003497run_test "Session resume using cache: session copy" \
3498 "$P_SRV debug_level=3 tickets=0" \
3499 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_mode=0" \
3500 0 \
3501 -s "session successfully restored from cache" \
3502 -S "session successfully restored from ticket" \
3503 -s "a session has been resumed" \
3504 -c "a session has been resumed"
3505
Gilles Peskine111fde42022-02-25 19:51:52 +01003506requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003507run_test "Session resume using cache: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003508 "$P_SRV debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02003509 "( $O_CLI -sess_out $SESSION; \
3510 $O_CLI -sess_in $SESSION; \
3511 rm -f $SESSION )" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01003512 0 \
3513 -s "found session ticket extension" \
3514 -S "server hello, adding session ticket extension" \
3515 -s "session successfully restored from cache" \
3516 -S "session successfully restored from ticket" \
3517 -s "a session has been resumed"
3518
Gilles Peskine111fde42022-02-25 19:51:52 +01003519requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003520run_test "Session resume using cache: openssl server" \
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01003521 "$O_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003522 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01003523 0 \
3524 -C "found session_ticket extension" \
3525 -C "parse new session ticket" \
3526 -c "a session has been resumed"
3527
Andrzej Kurekc87d97b2022-06-14 07:12:33 -04003528# Tests for Session resume and extensions
3529
3530requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
3531requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
3532run_test "Session resume and connection ID" \
3533 "$P_SRV debug_level=3 cid=1 cid_val=dead dtls=1 tickets=0" \
3534 "$P_CLI debug_level=3 cid=1 cid_val=beef dtls=1 tickets=0 reconnect=1" \
3535 0 \
3536 -c "Enable use of CID extension." \
3537 -s "Enable use of CID extension." \
3538 -c "client hello, adding CID extension" \
3539 -s "found CID extension" \
3540 -s "Use of CID extension negotiated" \
3541 -s "server hello, adding CID extension" \
3542 -c "found CID extension" \
3543 -c "Use of CID extension negotiated" \
3544 -s "Copy CIDs into SSL transform" \
3545 -c "Copy CIDs into SSL transform" \
3546 -c "Peer CID (length 2 Bytes): de ad" \
3547 -s "Peer CID (length 2 Bytes): be ef" \
3548 -s "Use of Connection ID has been negotiated" \
3549 -c "Use of Connection ID has been negotiated"
3550
Hanno Becker1d739932018-08-21 13:55:22 +01003551# Tests for Session Resume based on session-ID and cache, DTLS
3552
Gilles Peskine111fde42022-02-25 19:51:52 +01003553requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003554run_test "Session resume using cache, DTLS: tickets enabled on client" \
3555 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003556 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003557 0 \
3558 -c "client hello, adding session ticket extension" \
3559 -s "found session ticket extension" \
3560 -S "server hello, adding session ticket extension" \
3561 -C "found session_ticket extension" \
3562 -C "parse new session ticket" \
3563 -s "session successfully restored from cache" \
3564 -S "session successfully restored from ticket" \
3565 -s "a session has been resumed" \
3566 -c "a session has been resumed"
3567
Gilles Peskine111fde42022-02-25 19:51:52 +01003568requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003569run_test "Session resume using cache, DTLS: tickets enabled on server" \
3570 "$P_SRV dtls=1 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003571 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003572 0 \
3573 -C "client hello, adding session ticket extension" \
3574 -S "found session ticket extension" \
3575 -S "server hello, adding session ticket extension" \
3576 -C "found session_ticket extension" \
3577 -C "parse new session ticket" \
3578 -s "session successfully restored from cache" \
3579 -S "session successfully restored from ticket" \
3580 -s "a session has been resumed" \
3581 -c "a session has been resumed"
3582
Gilles Peskine111fde42022-02-25 19:51:52 +01003583requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003584run_test "Session resume using cache, DTLS: cache_max=0" \
3585 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003586 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003587 0 \
3588 -S "session successfully restored from cache" \
3589 -S "session successfully restored from ticket" \
3590 -S "a session has been resumed" \
3591 -C "a session has been resumed"
3592
Gilles Peskine111fde42022-02-25 19:51:52 +01003593requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003594run_test "Session resume using cache, DTLS: cache_max=1" \
3595 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003596 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003597 0 \
3598 -s "session successfully restored from cache" \
3599 -S "session successfully restored from ticket" \
3600 -s "a session has been resumed" \
3601 -c "a session has been resumed"
3602
Gilles Peskine111fde42022-02-25 19:51:52 +01003603requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003604run_test "Session resume using cache, DTLS: timeout > delay" \
3605 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003606 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=0" \
Hanno Becker1d739932018-08-21 13:55:22 +01003607 0 \
3608 -s "session successfully restored from cache" \
3609 -S "session successfully restored from ticket" \
3610 -s "a session has been resumed" \
3611 -c "a session has been resumed"
3612
Gilles Peskine111fde42022-02-25 19:51:52 +01003613requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003614run_test "Session resume using cache, DTLS: timeout < delay" \
3615 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003616 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=2" \
Hanno Becker1d739932018-08-21 13:55:22 +01003617 0 \
3618 -S "session successfully restored from cache" \
3619 -S "session successfully restored from ticket" \
3620 -S "a session has been resumed" \
3621 -C "a session has been resumed"
3622
Gilles Peskine111fde42022-02-25 19:51:52 +01003623requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003624run_test "Session resume using cache, DTLS: no timeout" \
3625 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003626 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=2" \
Hanno Becker1d739932018-08-21 13:55:22 +01003627 0 \
3628 -s "session successfully restored from cache" \
3629 -S "session successfully restored from ticket" \
3630 -s "a session has been resumed" \
3631 -c "a session has been resumed"
3632
Gilles Peskine111fde42022-02-25 19:51:52 +01003633requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003634run_test "Session resume using cache, DTLS: session copy" \
3635 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003636 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003637 0 \
3638 -s "session successfully restored from cache" \
3639 -S "session successfully restored from ticket" \
3640 -s "a session has been resumed" \
3641 -c "a session has been resumed"
3642
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003643# For reasons that aren't fully understood, this test randomly fails with high
Paul Elliott7ca2f392021-10-13 16:13:44 +01003644# probability with OpenSSL 1.0.2g on the CI, see #5012.
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003645requires_openssl_next
Gilles Peskine111fde42022-02-25 19:51:52 +01003646requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003647run_test "Session resume using cache, DTLS: openssl client" \
3648 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003649 "( $O_NEXT_CLI -dtls1 -sess_out $SESSION; \
3650 $O_NEXT_CLI -dtls1 -sess_in $SESSION; \
Hanno Becker1d739932018-08-21 13:55:22 +01003651 rm -f $SESSION )" \
3652 0 \
3653 -s "found session ticket extension" \
3654 -S "server hello, adding session ticket extension" \
3655 -s "session successfully restored from cache" \
3656 -S "session successfully restored from ticket" \
3657 -s "a session has been resumed"
3658
Gilles Peskine111fde42022-02-25 19:51:52 +01003659requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003660run_test "Session resume using cache, DTLS: openssl server" \
3661 "$O_SRV -dtls1" \
3662 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
3663 0 \
3664 -C "found session_ticket extension" \
3665 -C "parse new session ticket" \
3666 -c "a session has been resumed"
3667
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003668# Tests for Max Fragment Length extension
3669
Hanno Becker4aed27e2017-09-18 15:00:34 +01003670requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Hanno Beckerc5266962017-09-18 15:01:50 +01003671run_test "Max fragment length: enabled, default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003672 "$P_SRV debug_level=3" \
3673 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003674 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003675 -c "Maximum input fragment length is $MAX_CONTENT_LEN" \
3676 -c "Maximum output fragment length is $MAX_CONTENT_LEN" \
3677 -s "Maximum input fragment length is $MAX_CONTENT_LEN" \
3678 -s "Maximum output fragment length is $MAX_CONTENT_LEN" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003679 -C "client hello, adding max_fragment_length extension" \
3680 -S "found max fragment length extension" \
3681 -S "server hello, max_fragment_length extension" \
3682 -C "found max_fragment_length extension"
3683
Hanno Becker4aed27e2017-09-18 15:00:34 +01003684requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Hanno Beckerc5266962017-09-18 15:01:50 +01003685run_test "Max fragment length: enabled, default, larger message" \
3686 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003687 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003688 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003689 -c "Maximum input fragment length is $MAX_CONTENT_LEN" \
3690 -c "Maximum output fragment length is $MAX_CONTENT_LEN" \
3691 -s "Maximum input fragment length is $MAX_CONTENT_LEN" \
3692 -s "Maximum output fragment length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003693 -C "client hello, adding max_fragment_length extension" \
3694 -S "found max fragment length extension" \
3695 -S "server hello, max_fragment_length extension" \
3696 -C "found max_fragment_length extension" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003697 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
3698 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01003699 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01003700
3701requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3702run_test "Max fragment length, DTLS: enabled, default, larger message" \
3703 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003704 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003705 1 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003706 -c "Maximum input fragment length is $MAX_CONTENT_LEN" \
3707 -c "Maximum output fragment length is $MAX_CONTENT_LEN" \
3708 -s "Maximum input fragment length is $MAX_CONTENT_LEN" \
3709 -s "Maximum output fragment length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003710 -C "client hello, adding max_fragment_length extension" \
3711 -S "found max fragment length extension" \
3712 -S "server hello, max_fragment_length extension" \
3713 -C "found max_fragment_length extension" \
3714 -c "fragment larger than.*maximum "
3715
Angus Grattonc4dd0732018-04-11 16:28:39 +10003716# Run some tests with MBEDTLS_SSL_MAX_FRAGMENT_LENGTH disabled
3717# (session fragment length will be 16384 regardless of mbedtls
3718# content length configuration.)
3719
Hanno Beckerc5266962017-09-18 15:01:50 +01003720requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3721run_test "Max fragment length: disabled, larger message" \
3722 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003723 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003724 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003725 -C "Maximum input fragment length is 16384" \
3726 -C "Maximum output fragment length is 16384" \
3727 -S "Maximum input fragment length is 16384" \
3728 -S "Maximum output fragment length is 16384" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003729 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
3730 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01003731 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01003732
3733requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takano18ddccc2021-06-21 19:43:33 +01003734run_test "Max fragment length, DTLS: disabled, larger message" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003735 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003736 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003737 1 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003738 -C "Maximum input fragment length is 16384" \
3739 -C "Maximum output fragment length is 16384" \
3740 -S "Maximum input fragment length is 16384" \
3741 -S "Maximum output fragment length is 16384" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003742 -c "fragment larger than.*maximum "
3743
Yuto Takanobec7cf72021-07-02 10:10:49 +01003744requires_max_content_len 4096
Hanno Beckerc5266962017-09-18 15:01:50 +01003745requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003746run_test "Max fragment length: used by client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003747 "$P_SRV debug_level=3" \
3748 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003749 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003750 -c "Maximum input fragment length is 4096" \
3751 -c "Maximum output fragment length is 4096" \
3752 -s "Maximum input fragment length is 4096" \
3753 -s "Maximum output fragment length is 4096" \
3754 -c "client hello, adding max_fragment_length extension" \
3755 -s "found max fragment length extension" \
3756 -s "server hello, max_fragment_length extension" \
3757 -c "found max_fragment_length extension"
3758
Yuto Takanobec7cf72021-07-02 10:10:49 +01003759requires_max_content_len 1024
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003760requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3761run_test "Max fragment length: client 512, server 1024" \
3762 "$P_SRV debug_level=3 max_frag_len=1024" \
3763 "$P_CLI debug_level=3 max_frag_len=512" \
3764 0 \
3765 -c "Maximum input fragment length is 512" \
3766 -c "Maximum output fragment length is 512" \
3767 -s "Maximum input fragment length is 512" \
3768 -s "Maximum output fragment length is 512" \
3769 -c "client hello, adding max_fragment_length extension" \
3770 -s "found max fragment length extension" \
3771 -s "server hello, max_fragment_length extension" \
3772 -c "found max_fragment_length extension"
3773
Yuto Takanobec7cf72021-07-02 10:10:49 +01003774requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003775requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3776run_test "Max fragment length: client 512, server 2048" \
3777 "$P_SRV debug_level=3 max_frag_len=2048" \
3778 "$P_CLI debug_level=3 max_frag_len=512" \
3779 0 \
3780 -c "Maximum input fragment length is 512" \
3781 -c "Maximum output fragment length is 512" \
3782 -s "Maximum input fragment length is 512" \
3783 -s "Maximum output fragment length is 512" \
3784 -c "client hello, adding max_fragment_length extension" \
3785 -s "found max fragment length extension" \
3786 -s "server hello, max_fragment_length extension" \
3787 -c "found max_fragment_length extension"
3788
Yuto Takanobec7cf72021-07-02 10:10:49 +01003789requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003790requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3791run_test "Max fragment length: client 512, server 4096" \
3792 "$P_SRV debug_level=3 max_frag_len=4096" \
3793 "$P_CLI debug_level=3 max_frag_len=512" \
3794 0 \
3795 -c "Maximum input fragment length is 512" \
3796 -c "Maximum output fragment length is 512" \
3797 -s "Maximum input fragment length is 512" \
3798 -s "Maximum output fragment length is 512" \
3799 -c "client hello, adding max_fragment_length extension" \
3800 -s "found max fragment length extension" \
3801 -s "server hello, max_fragment_length extension" \
3802 -c "found max_fragment_length extension"
3803
Yuto Takanobec7cf72021-07-02 10:10:49 +01003804requires_max_content_len 1024
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003805requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3806run_test "Max fragment length: client 1024, server 512" \
3807 "$P_SRV debug_level=3 max_frag_len=512" \
3808 "$P_CLI debug_level=3 max_frag_len=1024" \
3809 0 \
3810 -c "Maximum input fragment length is 1024" \
3811 -c "Maximum output fragment length is 1024" \
3812 -s "Maximum input fragment length is 1024" \
3813 -s "Maximum output fragment length is 512" \
3814 -c "client hello, adding max_fragment_length extension" \
3815 -s "found max fragment length extension" \
3816 -s "server hello, max_fragment_length extension" \
3817 -c "found max_fragment_length extension"
3818
Yuto Takanobec7cf72021-07-02 10:10:49 +01003819requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003820requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3821run_test "Max fragment length: client 1024, server 2048" \
3822 "$P_SRV debug_level=3 max_frag_len=2048" \
3823 "$P_CLI debug_level=3 max_frag_len=1024" \
3824 0 \
3825 -c "Maximum input fragment length is 1024" \
3826 -c "Maximum output fragment length is 1024" \
3827 -s "Maximum input fragment length is 1024" \
3828 -s "Maximum output fragment length is 1024" \
3829 -c "client hello, adding max_fragment_length extension" \
3830 -s "found max fragment length extension" \
3831 -s "server hello, max_fragment_length extension" \
3832 -c "found max_fragment_length extension"
3833
Yuto Takanobec7cf72021-07-02 10:10:49 +01003834requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003835requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3836run_test "Max fragment length: client 1024, server 4096" \
3837 "$P_SRV debug_level=3 max_frag_len=4096" \
3838 "$P_CLI debug_level=3 max_frag_len=1024" \
3839 0 \
3840 -c "Maximum input fragment length is 1024" \
3841 -c "Maximum output fragment length is 1024" \
3842 -s "Maximum input fragment length is 1024" \
3843 -s "Maximum output fragment length is 1024" \
3844 -c "client hello, adding max_fragment_length extension" \
3845 -s "found max fragment length extension" \
3846 -s "server hello, max_fragment_length extension" \
3847 -c "found max_fragment_length extension"
3848
Yuto Takanobec7cf72021-07-02 10:10:49 +01003849requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003850requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3851run_test "Max fragment length: client 2048, server 512" \
3852 "$P_SRV debug_level=3 max_frag_len=512" \
3853 "$P_CLI debug_level=3 max_frag_len=2048" \
3854 0 \
3855 -c "Maximum input fragment length is 2048" \
3856 -c "Maximum output fragment length is 2048" \
3857 -s "Maximum input fragment length is 2048" \
3858 -s "Maximum output fragment length is 512" \
3859 -c "client hello, adding max_fragment_length extension" \
3860 -s "found max fragment length extension" \
3861 -s "server hello, max_fragment_length extension" \
3862 -c "found max_fragment_length extension"
3863
Yuto Takanobec7cf72021-07-02 10:10:49 +01003864requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003865requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3866run_test "Max fragment length: client 2048, server 1024" \
3867 "$P_SRV debug_level=3 max_frag_len=1024" \
3868 "$P_CLI debug_level=3 max_frag_len=2048" \
3869 0 \
3870 -c "Maximum input fragment length is 2048" \
3871 -c "Maximum output fragment length is 2048" \
3872 -s "Maximum input fragment length is 2048" \
3873 -s "Maximum output fragment length is 1024" \
3874 -c "client hello, adding max_fragment_length extension" \
3875 -s "found max fragment length extension" \
3876 -s "server hello, max_fragment_length extension" \
3877 -c "found max_fragment_length extension"
3878
Yuto Takanobec7cf72021-07-02 10:10:49 +01003879requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003880requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3881run_test "Max fragment length: client 2048, server 4096" \
3882 "$P_SRV debug_level=3 max_frag_len=4096" \
3883 "$P_CLI debug_level=3 max_frag_len=2048" \
3884 0 \
3885 -c "Maximum input fragment length is 2048" \
3886 -c "Maximum output fragment length is 2048" \
3887 -s "Maximum input fragment length is 2048" \
3888 -s "Maximum output fragment length is 2048" \
3889 -c "client hello, adding max_fragment_length extension" \
3890 -s "found max fragment length extension" \
3891 -s "server hello, max_fragment_length extension" \
3892 -c "found max_fragment_length extension"
3893
Yuto Takanobec7cf72021-07-02 10:10:49 +01003894requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003895requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3896run_test "Max fragment length: client 4096, server 512" \
3897 "$P_SRV debug_level=3 max_frag_len=512" \
3898 "$P_CLI debug_level=3 max_frag_len=4096" \
3899 0 \
3900 -c "Maximum input fragment length is 4096" \
3901 -c "Maximum output fragment length is 4096" \
3902 -s "Maximum input fragment length is 4096" \
3903 -s "Maximum output fragment length is 512" \
3904 -c "client hello, adding max_fragment_length extension" \
3905 -s "found max fragment length extension" \
3906 -s "server hello, max_fragment_length extension" \
3907 -c "found max_fragment_length extension"
3908
Yuto Takanobec7cf72021-07-02 10:10:49 +01003909requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003910requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3911run_test "Max fragment length: client 4096, server 1024" \
3912 "$P_SRV debug_level=3 max_frag_len=1024" \
3913 "$P_CLI debug_level=3 max_frag_len=4096" \
3914 0 \
3915 -c "Maximum input fragment length is 4096" \
3916 -c "Maximum output fragment length is 4096" \
3917 -s "Maximum input fragment length is 4096" \
3918 -s "Maximum output fragment length is 1024" \
3919 -c "client hello, adding max_fragment_length extension" \
3920 -s "found max fragment length extension" \
3921 -s "server hello, max_fragment_length extension" \
3922 -c "found max_fragment_length extension"
3923
Yuto Takanobec7cf72021-07-02 10:10:49 +01003924requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003925requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3926run_test "Max fragment length: client 4096, server 2048" \
3927 "$P_SRV debug_level=3 max_frag_len=2048" \
3928 "$P_CLI debug_level=3 max_frag_len=4096" \
3929 0 \
3930 -c "Maximum input fragment length is 4096" \
3931 -c "Maximum output fragment length is 4096" \
3932 -s "Maximum input fragment length is 4096" \
3933 -s "Maximum output fragment length is 2048" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003934 -c "client hello, adding max_fragment_length extension" \
3935 -s "found max fragment length extension" \
3936 -s "server hello, max_fragment_length extension" \
3937 -c "found max_fragment_length extension"
3938
Yuto Takanobec7cf72021-07-02 10:10:49 +01003939requires_max_content_len 4096
Hanno Becker4aed27e2017-09-18 15:00:34 +01003940requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003941run_test "Max fragment length: used by server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003942 "$P_SRV debug_level=3 max_frag_len=4096" \
3943 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003944 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003945 -c "Maximum input fragment length is $MAX_CONTENT_LEN" \
3946 -c "Maximum output fragment length is $MAX_CONTENT_LEN" \
3947 -s "Maximum input fragment length is $MAX_CONTENT_LEN" \
3948 -s "Maximum output fragment length is 4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003949 -C "client hello, adding max_fragment_length extension" \
3950 -S "found max fragment length extension" \
3951 -S "server hello, max_fragment_length extension" \
3952 -C "found max_fragment_length extension"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003953
Yuto Takanobec7cf72021-07-02 10:10:49 +01003954requires_max_content_len 4096
Hanno Becker4aed27e2017-09-18 15:00:34 +01003955requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003956requires_gnutls
3957run_test "Max fragment length: gnutls server" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02003958 "$G_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003959 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02003960 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003961 -c "Maximum input fragment length is 4096" \
3962 -c "Maximum output fragment length is 4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02003963 -c "client hello, adding max_fragment_length extension" \
3964 -c "found max_fragment_length extension"
3965
Yuto Takanobec7cf72021-07-02 10:10:49 +01003966requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01003967requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003968run_test "Max fragment length: client, message just fits" \
3969 "$P_SRV debug_level=3" \
3970 "$P_CLI debug_level=3 max_frag_len=2048 request_size=2048" \
3971 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003972 -c "Maximum input fragment length is 2048" \
3973 -c "Maximum output fragment length is 2048" \
3974 -s "Maximum input fragment length is 2048" \
3975 -s "Maximum output fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003976 -c "client hello, adding max_fragment_length extension" \
3977 -s "found max fragment length extension" \
3978 -s "server hello, max_fragment_length extension" \
3979 -c "found max_fragment_length extension" \
3980 -c "2048 bytes written in 1 fragments" \
3981 -s "2048 bytes read"
3982
Yuto Takanobec7cf72021-07-02 10:10:49 +01003983requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01003984requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003985run_test "Max fragment length: client, larger message" \
3986 "$P_SRV debug_level=3" \
3987 "$P_CLI debug_level=3 max_frag_len=2048 request_size=2345" \
3988 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003989 -c "Maximum input fragment length is 2048" \
3990 -c "Maximum output fragment length is 2048" \
3991 -s "Maximum input fragment length is 2048" \
3992 -s "Maximum output fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003993 -c "client hello, adding max_fragment_length extension" \
3994 -s "found max fragment length extension" \
3995 -s "server hello, max_fragment_length extension" \
3996 -c "found max_fragment_length extension" \
3997 -c "2345 bytes written in 2 fragments" \
3998 -s "2048 bytes read" \
3999 -s "297 bytes read"
4000
Yuto Takanobec7cf72021-07-02 10:10:49 +01004001requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01004002requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard23eb74d2015-01-21 14:37:13 +00004003run_test "Max fragment length: DTLS client, larger message" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004004 "$P_SRV debug_level=3 dtls=1" \
4005 "$P_CLI debug_level=3 dtls=1 max_frag_len=2048 request_size=2345" \
4006 1 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004007 -c "Maximum input fragment length is 2048" \
4008 -c "Maximum output fragment length is 2048" \
4009 -s "Maximum input fragment length is 2048" \
4010 -s "Maximum output fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004011 -c "client hello, adding max_fragment_length extension" \
4012 -s "found max fragment length extension" \
4013 -s "server hello, max_fragment_length extension" \
4014 -c "found max_fragment_length extension" \
4015 -c "fragment larger than.*maximum"
4016
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004017# Tests for renegotiation
4018
Hanno Becker6a243642017-10-12 15:18:45 +01004019# Renegotiation SCSV always added, regardless of SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004020run_test "Renegotiation: none, for reference" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004021 "$P_SRV debug_level=3 exchanges=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004022 "$P_CLI debug_level=3 exchanges=2" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004023 0 \
4024 -C "client hello, adding renegotiation extension" \
4025 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4026 -S "found renegotiation extension" \
4027 -s "server hello, secure renegotiation extension" \
4028 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004029 -C "=> renegotiate" \
4030 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004031 -S "write hello request"
4032
Hanno Becker6a243642017-10-12 15:18:45 +01004033requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004034run_test "Renegotiation: client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004035 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004036 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004037 0 \
4038 -c "client hello, adding renegotiation extension" \
4039 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4040 -s "found renegotiation extension" \
4041 -s "server hello, secure renegotiation extension" \
4042 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004043 -c "=> renegotiate" \
4044 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004045 -S "write hello request"
4046
Hanno Becker6a243642017-10-12 15:18:45 +01004047requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004048run_test "Renegotiation: server-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004049 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004050 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004051 0 \
4052 -c "client hello, adding renegotiation extension" \
4053 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4054 -s "found renegotiation extension" \
4055 -s "server hello, secure renegotiation extension" \
4056 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004057 -c "=> renegotiate" \
4058 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004059 -s "write hello request"
4060
Janos Follathb0f148c2017-10-05 12:29:42 +01004061# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
4062# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
4063# algorithm stronger than SHA-1 is enabled in config.h
Hanno Becker6a243642017-10-12 15:18:45 +01004064requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01004065run_test "Renegotiation: Signature Algorithms parsing, client-initiated" \
4066 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
4067 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
4068 0 \
4069 -c "client hello, adding renegotiation extension" \
4070 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4071 -s "found renegotiation extension" \
4072 -s "server hello, secure renegotiation extension" \
4073 -c "found renegotiation extension" \
4074 -c "=> renegotiate" \
4075 -s "=> renegotiate" \
4076 -S "write hello request" \
4077 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
4078
4079# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
4080# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
4081# algorithm stronger than SHA-1 is enabled in config.h
Hanno Becker6a243642017-10-12 15:18:45 +01004082requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01004083run_test "Renegotiation: Signature Algorithms parsing, server-initiated" \
4084 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
4085 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
4086 0 \
4087 -c "client hello, adding renegotiation extension" \
4088 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4089 -s "found renegotiation extension" \
4090 -s "server hello, secure renegotiation extension" \
4091 -c "found renegotiation extension" \
4092 -c "=> renegotiate" \
4093 -s "=> renegotiate" \
4094 -s "write hello request" \
4095 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
4096
Hanno Becker6a243642017-10-12 15:18:45 +01004097requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004098run_test "Renegotiation: double" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004099 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004100 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004101 0 \
4102 -c "client hello, adding renegotiation extension" \
4103 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4104 -s "found renegotiation extension" \
4105 -s "server hello, secure renegotiation extension" \
4106 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004107 -c "=> renegotiate" \
4108 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004109 -s "write hello request"
4110
Hanno Becker6a243642017-10-12 15:18:45 +01004111requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Andrzej Kurek8ea68722020-04-03 06:40:47 -04004112requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobec7cf72021-07-02 10:10:49 +01004113requires_max_content_len 2048
Andrzej Kurek8ea68722020-04-03 06:40:47 -04004114run_test "Renegotiation with max fragment length: client 2048, server 512" \
4115 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1 max_frag_len=512" \
4116 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 max_frag_len=2048 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
4117 0 \
4118 -c "Maximum input fragment length is 2048" \
4119 -c "Maximum output fragment length is 2048" \
4120 -s "Maximum input fragment length is 2048" \
4121 -s "Maximum output fragment length is 512" \
4122 -c "client hello, adding max_fragment_length extension" \
4123 -s "found max fragment length extension" \
4124 -s "server hello, max_fragment_length extension" \
4125 -c "found max_fragment_length extension" \
4126 -c "client hello, adding renegotiation extension" \
4127 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4128 -s "found renegotiation extension" \
4129 -s "server hello, secure renegotiation extension" \
4130 -c "found renegotiation extension" \
4131 -c "=> renegotiate" \
4132 -s "=> renegotiate" \
4133 -s "write hello request"
4134
4135requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004136run_test "Renegotiation: client-initiated, server-rejected" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004137 "$P_SRV debug_level=3 exchanges=2 renegotiation=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004138 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004139 1 \
4140 -c "client hello, adding renegotiation extension" \
4141 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4142 -S "found renegotiation extension" \
4143 -s "server hello, secure renegotiation extension" \
4144 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004145 -c "=> renegotiate" \
4146 -S "=> renegotiate" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004147 -S "write hello request" \
Manuel Pégourié-Gonnard65919622014-08-19 12:50:30 +02004148 -c "SSL - Unexpected message at ServerHello in renegotiation" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004149 -c "failed"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004150
Hanno Becker6a243642017-10-12 15:18:45 +01004151requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004152run_test "Renegotiation: server-initiated, client-rejected, default" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004153 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004154 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004155 0 \
4156 -C "client hello, adding renegotiation extension" \
4157 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4158 -S "found renegotiation extension" \
4159 -s "server hello, secure renegotiation extension" \
4160 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004161 -C "=> renegotiate" \
4162 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004163 -s "write hello request" \
Manuel Pégourié-Gonnarda9964db2014-07-03 19:29:16 +02004164 -S "SSL - An unexpected message was received from our peer" \
4165 -S "failed"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01004166
Hanno Becker6a243642017-10-12 15:18:45 +01004167requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004168run_test "Renegotiation: server-initiated, client-rejected, not enforced" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004169 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004170 renego_delay=-1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004171 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004172 0 \
4173 -C "client hello, adding renegotiation extension" \
4174 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4175 -S "found renegotiation extension" \
4176 -s "server hello, secure renegotiation extension" \
4177 -c "found renegotiation extension" \
4178 -C "=> renegotiate" \
4179 -S "=> renegotiate" \
4180 -s "write hello request" \
4181 -S "SSL - An unexpected message was received from our peer" \
4182 -S "failed"
4183
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004184# delay 2 for 1 alert record + 1 application data record
Hanno Becker6a243642017-10-12 15:18:45 +01004185requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004186run_test "Renegotiation: server-initiated, client-rejected, delay 2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004187 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004188 renego_delay=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004189 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004190 0 \
4191 -C "client hello, adding renegotiation extension" \
4192 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4193 -S "found renegotiation extension" \
4194 -s "server hello, secure renegotiation extension" \
4195 -c "found renegotiation extension" \
4196 -C "=> renegotiate" \
4197 -S "=> renegotiate" \
4198 -s "write hello request" \
4199 -S "SSL - An unexpected message was received from our peer" \
4200 -S "failed"
4201
Hanno Becker6a243642017-10-12 15:18:45 +01004202requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004203run_test "Renegotiation: server-initiated, client-rejected, delay 0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004204 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004205 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004206 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004207 0 \
4208 -C "client hello, adding renegotiation extension" \
4209 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4210 -S "found renegotiation extension" \
4211 -s "server hello, secure renegotiation extension" \
4212 -c "found renegotiation extension" \
4213 -C "=> renegotiate" \
4214 -S "=> renegotiate" \
4215 -s "write hello request" \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004216 -s "SSL - An unexpected message was received from our peer"
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004217
Hanno Becker6a243642017-10-12 15:18:45 +01004218requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004219run_test "Renegotiation: server-initiated, client-accepted, delay 0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004220 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004221 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004222 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004223 0 \
4224 -c "client hello, adding renegotiation extension" \
4225 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4226 -s "found renegotiation extension" \
4227 -s "server hello, secure renegotiation extension" \
4228 -c "found renegotiation extension" \
4229 -c "=> renegotiate" \
4230 -s "=> renegotiate" \
4231 -s "write hello request" \
4232 -S "SSL - An unexpected message was received from our peer" \
4233 -S "failed"
4234
Hanno Becker6a243642017-10-12 15:18:45 +01004235requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004236run_test "Renegotiation: periodic, just below period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004237 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004238 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
4239 0 \
4240 -C "client hello, adding renegotiation extension" \
4241 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4242 -S "found renegotiation extension" \
4243 -s "server hello, secure renegotiation extension" \
4244 -c "found renegotiation extension" \
4245 -S "record counter limit reached: renegotiate" \
4246 -C "=> renegotiate" \
4247 -S "=> renegotiate" \
4248 -S "write hello request" \
4249 -S "SSL - An unexpected message was received from our peer" \
4250 -S "failed"
4251
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01004252# one extra exchange to be able to complete renego
Hanno Becker6a243642017-10-12 15:18:45 +01004253requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004254run_test "Renegotiation: periodic, just above period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004255 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01004256 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004257 0 \
4258 -c "client hello, adding renegotiation extension" \
4259 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4260 -s "found renegotiation extension" \
4261 -s "server hello, secure renegotiation extension" \
4262 -c "found renegotiation extension" \
4263 -s "record counter limit reached: renegotiate" \
4264 -c "=> renegotiate" \
4265 -s "=> renegotiate" \
4266 -s "write hello request" \
4267 -S "SSL - An unexpected message was received from our peer" \
4268 -S "failed"
4269
Hanno Becker6a243642017-10-12 15:18:45 +01004270requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004271run_test "Renegotiation: periodic, two times period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004272 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01004273 "$P_CLI debug_level=3 exchanges=7 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004274 0 \
4275 -c "client hello, adding renegotiation extension" \
4276 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4277 -s "found renegotiation extension" \
4278 -s "server hello, secure renegotiation extension" \
4279 -c "found renegotiation extension" \
4280 -s "record counter limit reached: renegotiate" \
4281 -c "=> renegotiate" \
4282 -s "=> renegotiate" \
4283 -s "write hello request" \
4284 -S "SSL - An unexpected message was received from our peer" \
4285 -S "failed"
4286
Hanno Becker6a243642017-10-12 15:18:45 +01004287requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004288run_test "Renegotiation: periodic, above period, disabled" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004289 "$P_SRV debug_level=3 exchanges=9 renegotiation=0 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004290 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
4291 0 \
4292 -C "client hello, adding renegotiation extension" \
4293 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4294 -S "found renegotiation extension" \
4295 -s "server hello, secure renegotiation extension" \
4296 -c "found renegotiation extension" \
4297 -S "record counter limit reached: renegotiate" \
4298 -C "=> renegotiate" \
4299 -S "=> renegotiate" \
4300 -S "write hello request" \
4301 -S "SSL - An unexpected message was received from our peer" \
4302 -S "failed"
4303
Hanno Becker6a243642017-10-12 15:18:45 +01004304requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004305run_test "Renegotiation: nbio, client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004306 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004307 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02004308 0 \
4309 -c "client hello, adding renegotiation extension" \
4310 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4311 -s "found renegotiation extension" \
4312 -s "server hello, secure renegotiation extension" \
4313 -c "found renegotiation extension" \
4314 -c "=> renegotiate" \
4315 -s "=> renegotiate" \
4316 -S "write hello request"
4317
Hanno Becker6a243642017-10-12 15:18:45 +01004318requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004319run_test "Renegotiation: nbio, server-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004320 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004321 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02004322 0 \
4323 -c "client hello, adding renegotiation extension" \
4324 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4325 -s "found renegotiation extension" \
4326 -s "server hello, secure renegotiation extension" \
4327 -c "found renegotiation extension" \
4328 -c "=> renegotiate" \
4329 -s "=> renegotiate" \
4330 -s "write hello request"
4331
Hanno Becker6a243642017-10-12 15:18:45 +01004332requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004333run_test "Renegotiation: openssl server, client-initiated" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02004334 "$O_SRV -www" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004335 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02004336 0 \
4337 -c "client hello, adding renegotiation extension" \
4338 -c "found renegotiation extension" \
4339 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004340 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02004341 -C "error" \
4342 -c "HTTP/1.0 200 [Oo][Kk]"
4343
Paul Bakker539d9722015-02-08 16:18:35 +01004344requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004345requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004346run_test "Renegotiation: gnutls server strict, client-initiated" \
4347 "$G_SRV --priority=NORMAL:%SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004348 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02004349 0 \
4350 -c "client hello, adding renegotiation extension" \
4351 -c "found renegotiation extension" \
4352 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004353 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02004354 -C "error" \
4355 -c "HTTP/1.0 200 [Oo][Kk]"
4356
Paul Bakker539d9722015-02-08 16:18:35 +01004357requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004358requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004359run_test "Renegotiation: gnutls server unsafe, client-initiated default" \
4360 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4361 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
4362 1 \
4363 -c "client hello, adding renegotiation extension" \
4364 -C "found renegotiation extension" \
4365 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004366 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004367 -c "error" \
4368 -C "HTTP/1.0 200 [Oo][Kk]"
4369
Paul Bakker539d9722015-02-08 16:18:35 +01004370requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004371requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004372run_test "Renegotiation: gnutls server unsafe, client-inititated no legacy" \
4373 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4374 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
4375 allow_legacy=0" \
4376 1 \
4377 -c "client hello, adding renegotiation extension" \
4378 -C "found renegotiation extension" \
4379 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004380 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004381 -c "error" \
4382 -C "HTTP/1.0 200 [Oo][Kk]"
4383
Paul Bakker539d9722015-02-08 16:18:35 +01004384requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004385requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004386run_test "Renegotiation: gnutls server unsafe, client-inititated legacy" \
4387 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4388 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
4389 allow_legacy=1" \
4390 0 \
4391 -c "client hello, adding renegotiation extension" \
4392 -C "found renegotiation extension" \
4393 -c "=> renegotiate" \
4394 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004395 -C "error" \
4396 -c "HTTP/1.0 200 [Oo][Kk]"
4397
Hanno Becker6a243642017-10-12 15:18:45 +01004398requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard30d16eb2014-08-19 17:43:50 +02004399run_test "Renegotiation: DTLS, client-initiated" \
4400 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1" \
4401 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
4402 0 \
4403 -c "client hello, adding renegotiation extension" \
4404 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4405 -s "found renegotiation extension" \
4406 -s "server hello, secure renegotiation extension" \
4407 -c "found renegotiation extension" \
4408 -c "=> renegotiate" \
4409 -s "=> renegotiate" \
4410 -S "write hello request"
4411
Hanno Becker6a243642017-10-12 15:18:45 +01004412requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02004413run_test "Renegotiation: DTLS, server-initiated" \
4414 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnarddf9a0a82014-10-02 14:17:18 +02004415 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 \
4416 read_timeout=1000 max_resend=2" \
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02004417 0 \
4418 -c "client hello, adding renegotiation extension" \
4419 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4420 -s "found renegotiation extension" \
4421 -s "server hello, secure renegotiation extension" \
4422 -c "found renegotiation extension" \
4423 -c "=> renegotiate" \
4424 -s "=> renegotiate" \
4425 -s "write hello request"
4426
Hanno Becker6a243642017-10-12 15:18:45 +01004427requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Andres AG692ad842017-01-19 16:30:57 +00004428run_test "Renegotiation: DTLS, renego_period overflow" \
4429 "$P_SRV debug_level=3 dtls=1 exchanges=4 renegotiation=1 renego_period=18446462598732840962 auth_mode=optional" \
4430 "$P_CLI debug_level=3 dtls=1 exchanges=4 renegotiation=1" \
4431 0 \
4432 -c "client hello, adding renegotiation extension" \
4433 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4434 -s "found renegotiation extension" \
4435 -s "server hello, secure renegotiation extension" \
4436 -s "record counter limit reached: renegotiate" \
4437 -c "=> renegotiate" \
4438 -s "=> renegotiate" \
Hanno Becker6a243642017-10-12 15:18:45 +01004439 -s "write hello request"
Andres AG692ad842017-01-19 16:30:57 +00004440
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +00004441requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004442requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02004443run_test "Renegotiation: DTLS, gnutls server, client-initiated" \
4444 "$G_SRV -u --mtu 4096" \
4445 "$P_CLI debug_level=3 dtls=1 exchanges=1 renegotiation=1 renegotiate=1" \
4446 0 \
4447 -c "client hello, adding renegotiation extension" \
4448 -c "found renegotiation extension" \
4449 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004450 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02004451 -C "error" \
4452 -s "Extra-header:"
4453
Shaun Case0e7791f2021-12-20 21:14:10 -08004454# Test for the "secure renegotiation" extension only (no actual renegotiation)
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004455
Paul Bakker539d9722015-02-08 16:18:35 +01004456requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004457run_test "Renego ext: gnutls server strict, client default" \
4458 "$G_SRV --priority=NORMAL:%SAFE_RENEGOTIATION" \
4459 "$P_CLI debug_level=3" \
4460 0 \
4461 -c "found renegotiation extension" \
4462 -C "error" \
4463 -c "HTTP/1.0 200 [Oo][Kk]"
4464
Paul Bakker539d9722015-02-08 16:18:35 +01004465requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004466run_test "Renego ext: gnutls server unsafe, client default" \
4467 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4468 "$P_CLI debug_level=3" \
4469 0 \
4470 -C "found renegotiation extension" \
4471 -C "error" \
4472 -c "HTTP/1.0 200 [Oo][Kk]"
4473
Paul Bakker539d9722015-02-08 16:18:35 +01004474requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004475run_test "Renego ext: gnutls server unsafe, client break legacy" \
4476 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4477 "$P_CLI debug_level=3 allow_legacy=-1" \
4478 1 \
4479 -C "found renegotiation extension" \
4480 -c "error" \
4481 -C "HTTP/1.0 200 [Oo][Kk]"
4482
Paul Bakker539d9722015-02-08 16:18:35 +01004483requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004484run_test "Renego ext: gnutls client strict, server default" \
4485 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004486 "$G_CLI --priority=NORMAL:%SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004487 0 \
4488 -s "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
4489 -s "server hello, secure renegotiation extension"
4490
Paul Bakker539d9722015-02-08 16:18:35 +01004491requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004492run_test "Renego ext: gnutls client unsafe, server default" \
4493 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004494 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004495 0 \
4496 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
4497 -S "server hello, secure renegotiation extension"
4498
Paul Bakker539d9722015-02-08 16:18:35 +01004499requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004500run_test "Renego ext: gnutls client unsafe, server break legacy" \
4501 "$P_SRV debug_level=3 allow_legacy=-1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004502 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004503 1 \
4504 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
4505 -S "server hello, secure renegotiation extension"
4506
Janos Follath0b242342016-02-17 10:11:21 +00004507# Tests for silently dropping trailing extra bytes in .der certificates
4508
4509requires_gnutls
4510run_test "DER format: no trailing bytes" \
4511 "$P_SRV crt_file=data_files/server5-der0.crt \
4512 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004513 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004514 0 \
4515 -c "Handshake was completed" \
4516
4517requires_gnutls
4518run_test "DER format: with a trailing zero byte" \
4519 "$P_SRV crt_file=data_files/server5-der1a.crt \
4520 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004521 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004522 0 \
4523 -c "Handshake was completed" \
4524
4525requires_gnutls
4526run_test "DER format: with a trailing random byte" \
4527 "$P_SRV crt_file=data_files/server5-der1b.crt \
4528 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004529 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004530 0 \
4531 -c "Handshake was completed" \
4532
4533requires_gnutls
4534run_test "DER format: with 2 trailing random bytes" \
4535 "$P_SRV crt_file=data_files/server5-der2.crt \
4536 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004537 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004538 0 \
4539 -c "Handshake was completed" \
4540
4541requires_gnutls
4542run_test "DER format: with 4 trailing random bytes" \
4543 "$P_SRV crt_file=data_files/server5-der4.crt \
4544 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004545 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004546 0 \
4547 -c "Handshake was completed" \
4548
4549requires_gnutls
4550run_test "DER format: with 8 trailing random bytes" \
4551 "$P_SRV crt_file=data_files/server5-der8.crt \
4552 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004553 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004554 0 \
4555 -c "Handshake was completed" \
4556
4557requires_gnutls
4558run_test "DER format: with 9 trailing random bytes" \
4559 "$P_SRV crt_file=data_files/server5-der9.crt \
4560 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004561 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004562 0 \
4563 -c "Handshake was completed" \
4564
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03004565# Tests for auth_mode, there are duplicated tests using ca callback for authentication
4566# When updating these tests, modify the matching authentication tests accordingly
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004567
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004568run_test "Authentication: server badcert, client required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004569 "$P_SRV crt_file=data_files/server5-badsign.crt \
4570 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004571 "$P_CLI debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004572 1 \
4573 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004574 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004575 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004576 -c "X509 - Certificate verification failed"
4577
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004578run_test "Authentication: server badcert, client optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004579 "$P_SRV crt_file=data_files/server5-badsign.crt \
4580 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004581 "$P_CLI debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004582 0 \
4583 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004584 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004585 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004586 -C "X509 - Certificate verification failed"
4587
Hanno Beckere6706e62017-05-15 16:05:15 +01004588run_test "Authentication: server goodcert, client optional, no trusted CA" \
4589 "$P_SRV" \
4590 "$P_CLI debug_level=3 auth_mode=optional ca_file=none ca_path=none" \
4591 0 \
4592 -c "x509_verify_cert() returned" \
4593 -c "! The certificate is not correctly signed by the trusted CA" \
4594 -c "! Certificate verification flags"\
4595 -C "! mbedtls_ssl_handshake returned" \
4596 -C "X509 - Certificate verification failed" \
4597 -C "SSL - No CA Chain is set, but required to operate"
4598
4599run_test "Authentication: server goodcert, client required, no trusted CA" \
4600 "$P_SRV" \
4601 "$P_CLI debug_level=3 auth_mode=required ca_file=none ca_path=none" \
4602 1 \
4603 -c "x509_verify_cert() returned" \
4604 -c "! The certificate is not correctly signed by the trusted CA" \
4605 -c "! Certificate verification flags"\
4606 -c "! mbedtls_ssl_handshake returned" \
4607 -c "SSL - No CA Chain is set, but required to operate"
4608
4609# The purpose of the next two tests is to test the client's behaviour when receiving a server
4610# certificate with an unsupported elliptic curve. This should usually not happen because
4611# the client informs the server about the supported curves - it does, though, in the
4612# corner case of a static ECDH suite, because the server doesn't check the curve on that
4613# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
4614# different means to have the server ignoring the client's supported curve list.
4615
4616requires_config_enabled MBEDTLS_ECP_C
4617run_test "Authentication: server ECDH p256v1, client required, p256v1 unsupported" \
4618 "$P_SRV debug_level=1 key_file=data_files/server5.key \
4619 crt_file=data_files/server5.ku-ka.crt" \
4620 "$P_CLI debug_level=3 auth_mode=required curves=secp521r1" \
4621 1 \
4622 -c "bad certificate (EC key curve)"\
4623 -c "! Certificate verification flags"\
4624 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
4625
4626requires_config_enabled MBEDTLS_ECP_C
4627run_test "Authentication: server ECDH p256v1, client optional, p256v1 unsupported" \
4628 "$P_SRV debug_level=1 key_file=data_files/server5.key \
4629 crt_file=data_files/server5.ku-ka.crt" \
4630 "$P_CLI debug_level=3 auth_mode=optional curves=secp521r1" \
4631 1 \
4632 -c "bad certificate (EC key curve)"\
4633 -c "! Certificate verification flags"\
4634 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
4635
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004636run_test "Authentication: server badcert, client none" \
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01004637 "$P_SRV crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004638 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004639 "$P_CLI debug_level=1 auth_mode=none" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004640 0 \
4641 -C "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004642 -C "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004643 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004644 -C "X509 - Certificate verification failed"
4645
Simon Butcher99000142016-10-13 17:21:01 +01004646run_test "Authentication: client SHA256, server required" \
4647 "$P_SRV auth_mode=required" \
4648 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
4649 key_file=data_files/server6.key \
4650 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
4651 0 \
4652 -c "Supported Signature Algorithm found: 4," \
4653 -c "Supported Signature Algorithm found: 5,"
4654
4655run_test "Authentication: client SHA384, server required" \
4656 "$P_SRV auth_mode=required" \
4657 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
4658 key_file=data_files/server6.key \
4659 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
4660 0 \
4661 -c "Supported Signature Algorithm found: 4," \
4662 -c "Supported Signature Algorithm found: 5,"
4663
Gilles Peskinefd8332e2017-05-03 16:25:07 +02004664run_test "Authentication: client has no cert, server required (SSLv3)" \
4665 "$P_SRV debug_level=3 min_version=ssl3 auth_mode=required" \
4666 "$P_CLI debug_level=3 force_version=ssl3 crt_file=none \
4667 key_file=data_files/server5.key" \
4668 1 \
4669 -S "skip write certificate request" \
4670 -C "skip parse certificate request" \
4671 -c "got a certificate request" \
4672 -c "got no certificate to send" \
4673 -S "x509_verify_cert() returned" \
4674 -s "client has no certificate" \
4675 -s "! mbedtls_ssl_handshake returned" \
4676 -c "! mbedtls_ssl_handshake returned" \
4677 -s "No client certification received from the client, but required by the authentication mode"
4678
4679run_test "Authentication: client has no cert, server required (TLS)" \
4680 "$P_SRV debug_level=3 auth_mode=required" \
4681 "$P_CLI debug_level=3 crt_file=none \
4682 key_file=data_files/server5.key" \
4683 1 \
4684 -S "skip write certificate request" \
4685 -C "skip parse certificate request" \
4686 -c "got a certificate request" \
4687 -c "= write certificate$" \
4688 -C "skip write certificate$" \
4689 -S "x509_verify_cert() returned" \
4690 -s "client has no certificate" \
4691 -s "! mbedtls_ssl_handshake returned" \
4692 -c "! mbedtls_ssl_handshake returned" \
4693 -s "No client certification received from the client, but required by the authentication mode"
4694
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004695run_test "Authentication: client badcert, server required" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004696 "$P_SRV debug_level=3 auth_mode=required" \
4697 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004698 key_file=data_files/server5.key" \
4699 1 \
4700 -S "skip write certificate request" \
4701 -C "skip parse certificate request" \
4702 -c "got a certificate request" \
4703 -C "skip write certificate" \
4704 -C "skip write certificate verify" \
4705 -S "skip parse certificate verify" \
4706 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02004707 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004708 -s "! mbedtls_ssl_handshake returned" \
Gilles Peskine1cc8e342017-05-03 16:28:34 +02004709 -s "send alert level=2 message=48" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004710 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004711 -s "X509 - Certificate verification failed"
Gilles Peskine1cc8e342017-05-03 16:28:34 +02004712# We don't check that the client receives the alert because it might
4713# detect that its write end of the connection is closed and abort
4714# before reading the alert message.
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004715
Gilles Peskine8c681b72022-01-07 23:10:56 +01004716run_test "Authentication: client cert self-signed and trusted, server required" \
4717 "$P_SRV debug_level=3 auth_mode=required ca_file=data_files/server5-selfsigned.crt" \
4718 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
4719 key_file=data_files/server5.key" \
4720 0 \
4721 -S "skip write certificate request" \
4722 -C "skip parse certificate request" \
4723 -c "got a certificate request" \
4724 -C "skip write certificate" \
4725 -C "skip write certificate verify" \
4726 -S "skip parse certificate verify" \
4727 -S "x509_verify_cert() returned" \
4728 -S "! The certificate is not correctly signed" \
4729 -S "X509 - Certificate verification failed"
4730
Janos Follath89baba22017-04-10 14:34:35 +01004731run_test "Authentication: client cert not trusted, server required" \
4732 "$P_SRV debug_level=3 auth_mode=required" \
4733 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
4734 key_file=data_files/server5.key" \
4735 1 \
4736 -S "skip write certificate request" \
4737 -C "skip parse certificate request" \
4738 -c "got a certificate request" \
4739 -C "skip write certificate" \
4740 -C "skip write certificate verify" \
4741 -S "skip parse certificate verify" \
4742 -s "x509_verify_cert() returned" \
4743 -s "! The certificate is not correctly signed by the trusted CA" \
4744 -s "! mbedtls_ssl_handshake returned" \
4745 -c "! mbedtls_ssl_handshake returned" \
4746 -s "X509 - Certificate verification failed"
4747
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004748run_test "Authentication: client badcert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004749 "$P_SRV debug_level=3 auth_mode=optional" \
4750 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004751 key_file=data_files/server5.key" \
4752 0 \
4753 -S "skip write certificate request" \
4754 -C "skip parse certificate request" \
4755 -c "got a certificate request" \
4756 -C "skip write certificate" \
4757 -C "skip write certificate verify" \
4758 -S "skip parse certificate verify" \
4759 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004760 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004761 -S "! mbedtls_ssl_handshake returned" \
4762 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004763 -S "X509 - Certificate verification failed"
4764
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004765run_test "Authentication: client badcert, server none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004766 "$P_SRV debug_level=3 auth_mode=none" \
4767 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004768 key_file=data_files/server5.key" \
4769 0 \
4770 -s "skip write certificate request" \
4771 -C "skip parse certificate request" \
4772 -c "got no certificate request" \
4773 -c "skip write certificate" \
4774 -c "skip write certificate verify" \
4775 -s "skip parse certificate verify" \
4776 -S "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004777 -S "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004778 -S "! mbedtls_ssl_handshake returned" \
4779 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004780 -S "X509 - Certificate verification failed"
4781
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004782run_test "Authentication: client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004783 "$P_SRV debug_level=3 auth_mode=optional" \
4784 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004785 0 \
4786 -S "skip write certificate request" \
4787 -C "skip parse certificate request" \
4788 -c "got a certificate request" \
4789 -C "skip write certificate$" \
4790 -C "got no certificate to send" \
4791 -S "SSLv3 client has no certificate" \
4792 -c "skip write certificate verify" \
4793 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004794 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004795 -S "! mbedtls_ssl_handshake returned" \
4796 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004797 -S "X509 - Certificate verification failed"
4798
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004799run_test "Authentication: openssl client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004800 "$P_SRV debug_level=3 auth_mode=optional" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004801 "$O_CLI" \
4802 0 \
4803 -S "skip write certificate request" \
4804 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004805 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004806 -S "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004807 -S "X509 - Certificate verification failed"
4808
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004809run_test "Authentication: client no cert, openssl server optional" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004810 "$O_SRV -verify 10" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004811 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004812 0 \
4813 -C "skip parse certificate request" \
4814 -c "got a certificate request" \
4815 -C "skip write certificate$" \
4816 -c "skip write certificate verify" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004817 -C "! mbedtls_ssl_handshake returned"
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004818
Gilles Peskinefd8332e2017-05-03 16:25:07 +02004819run_test "Authentication: client no cert, openssl server required" \
4820 "$O_SRV -Verify 10" \
4821 "$P_CLI debug_level=3 crt_file=none key_file=none" \
4822 1 \
4823 -C "skip parse certificate request" \
4824 -c "got a certificate request" \
4825 -C "skip write certificate$" \
4826 -c "skip write certificate verify" \
4827 -c "! mbedtls_ssl_handshake returned"
4828
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004829run_test "Authentication: client no cert, ssl3" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004830 "$P_SRV debug_level=3 auth_mode=optional force_version=ssl3" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01004831 "$P_CLI debug_level=3 crt_file=none key_file=none min_version=ssl3" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004832 0 \
4833 -S "skip write certificate request" \
4834 -C "skip parse certificate request" \
4835 -c "got a certificate request" \
4836 -C "skip write certificate$" \
4837 -c "skip write certificate verify" \
4838 -c "got no certificate to send" \
4839 -s "SSLv3 client has no certificate" \
4840 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004841 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004842 -S "! mbedtls_ssl_handshake returned" \
4843 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004844 -S "X509 - Certificate verification failed"
4845
Yuto Takanoccdd25c2021-07-02 13:05:15 +01004846# This script assumes that MBEDTLS_X509_MAX_INTERMEDIATE_CA has its default
4847# value, defined here as MAX_IM_CA. Some test cases will be skipped if the
4848# library is configured with a different value.
Hanno Beckera6bca9f2017-07-26 13:35:11 +01004849
Simon Butcherbcfa6f42017-07-28 15:59:35 +01004850MAX_IM_CA='8'
Hanno Beckera6bca9f2017-07-26 13:35:11 +01004851
Yuto Takanoccdd25c2021-07-02 13:05:15 +01004852# The tests for the max_int tests can pass with any number higher than MAX_IM_CA
4853# because only a chain of MAX_IM_CA length is tested. Equally, the max_int+1
4854# tests can pass with any number less than MAX_IM_CA. However, stricter preconditions
4855# are in place so that the semantics are consistent with the test description.
Yuto Takano8a693ef2021-07-02 13:10:41 +01004856requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004857requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004858run_test "Authentication: server max_int chain, client default" \
4859 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
4860 key_file=data_files/dir-maxpath/09.key" \
4861 "$P_CLI server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
4862 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004863 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004864
Yuto Takano8a693ef2021-07-02 13:10:41 +01004865requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004866requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004867run_test "Authentication: server max_int+1 chain, client default" \
4868 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
4869 key_file=data_files/dir-maxpath/10.key" \
4870 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
4871 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004872 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004873
Yuto Takano8a693ef2021-07-02 13:10:41 +01004874requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004875requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004876run_test "Authentication: server max_int+1 chain, client optional" \
4877 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
4878 key_file=data_files/dir-maxpath/10.key" \
4879 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
4880 auth_mode=optional" \
4881 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004882 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004883
Yuto Takano8a693ef2021-07-02 13:10:41 +01004884requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004885requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004886run_test "Authentication: server max_int+1 chain, client none" \
4887 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
4888 key_file=data_files/dir-maxpath/10.key" \
4889 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
4890 auth_mode=none" \
4891 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004892 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004893
Yuto Takano8a693ef2021-07-02 13:10:41 +01004894requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004895requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004896run_test "Authentication: client max_int+1 chain, server default" \
4897 "$P_SRV ca_file=data_files/dir-maxpath/00.crt" \
4898 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
4899 key_file=data_files/dir-maxpath/10.key" \
4900 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004901 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004902
Yuto Takano8a693ef2021-07-02 13:10:41 +01004903requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004904requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004905run_test "Authentication: client max_int+1 chain, server optional" \
4906 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
4907 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
4908 key_file=data_files/dir-maxpath/10.key" \
4909 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004910 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004911
Yuto Takano8a693ef2021-07-02 13:10:41 +01004912requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004913requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004914run_test "Authentication: client max_int+1 chain, server required" \
4915 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
4916 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
4917 key_file=data_files/dir-maxpath/10.key" \
4918 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004919 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004920
Yuto Takano8a693ef2021-07-02 13:10:41 +01004921requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004922requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004923run_test "Authentication: client max_int chain, server required" \
4924 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
4925 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
4926 key_file=data_files/dir-maxpath/09.key" \
4927 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004928 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004929
Janos Follath89baba22017-04-10 14:34:35 +01004930# Tests for CA list in CertificateRequest messages
4931
4932run_test "Authentication: send CA list in CertificateRequest (default)" \
4933 "$P_SRV debug_level=3 auth_mode=required" \
4934 "$P_CLI crt_file=data_files/server6.crt \
4935 key_file=data_files/server6.key" \
4936 0 \
4937 -s "requested DN"
4938
4939run_test "Authentication: do not send CA list in CertificateRequest" \
4940 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
4941 "$P_CLI crt_file=data_files/server6.crt \
4942 key_file=data_files/server6.key" \
4943 0 \
4944 -S "requested DN"
4945
4946run_test "Authentication: send CA list in CertificateRequest, client self signed" \
4947 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
4948 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
4949 key_file=data_files/server5.key" \
4950 1 \
4951 -S "requested DN" \
4952 -s "x509_verify_cert() returned" \
4953 -s "! The certificate is not correctly signed by the trusted CA" \
4954 -s "! mbedtls_ssl_handshake returned" \
4955 -c "! mbedtls_ssl_handshake returned" \
4956 -s "X509 - Certificate verification failed"
4957
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03004958# Tests for auth_mode, using CA callback, these are duplicated from the authentication tests
4959# When updating these tests, modify the matching authentication tests accordingly
Hanno Becker746aaf32019-03-28 15:25:23 +00004960
4961requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4962run_test "Authentication, CA callback: server badcert, client required" \
4963 "$P_SRV crt_file=data_files/server5-badsign.crt \
4964 key_file=data_files/server5.key" \
4965 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required" \
4966 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004967 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004968 -c "x509_verify_cert() returned" \
4969 -c "! The certificate is not correctly signed by the trusted CA" \
4970 -c "! mbedtls_ssl_handshake returned" \
4971 -c "X509 - Certificate verification failed"
4972
4973requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4974run_test "Authentication, CA callback: server badcert, client optional" \
4975 "$P_SRV crt_file=data_files/server5-badsign.crt \
4976 key_file=data_files/server5.key" \
4977 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional" \
4978 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004979 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004980 -c "x509_verify_cert() returned" \
4981 -c "! The certificate is not correctly signed by the trusted CA" \
4982 -C "! mbedtls_ssl_handshake returned" \
4983 -C "X509 - Certificate verification failed"
4984
4985# The purpose of the next two tests is to test the client's behaviour when receiving a server
4986# certificate with an unsupported elliptic curve. This should usually not happen because
4987# the client informs the server about the supported curves - it does, though, in the
4988# corner case of a static ECDH suite, because the server doesn't check the curve on that
4989# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
4990# different means to have the server ignoring the client's supported curve list.
4991
4992requires_config_enabled MBEDTLS_ECP_C
4993requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4994run_test "Authentication, CA callback: server ECDH p256v1, client required, p256v1 unsupported" \
4995 "$P_SRV debug_level=1 key_file=data_files/server5.key \
4996 crt_file=data_files/server5.ku-ka.crt" \
4997 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required curves=secp521r1" \
4998 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004999 -c "use CA callback for X.509 CRT verification" \
5000 -c "bad certificate (EC key curve)" \
5001 -c "! Certificate verification flags" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005002 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
5003
5004requires_config_enabled MBEDTLS_ECP_C
5005requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5006run_test "Authentication, CA callback: server ECDH p256v1, client optional, p256v1 unsupported" \
5007 "$P_SRV debug_level=1 key_file=data_files/server5.key \
5008 crt_file=data_files/server5.ku-ka.crt" \
5009 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional curves=secp521r1" \
5010 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005011 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005012 -c "bad certificate (EC key curve)"\
5013 -c "! Certificate verification flags"\
5014 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
5015
5016requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5017run_test "Authentication, CA callback: client SHA256, server required" \
5018 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
5019 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
5020 key_file=data_files/server6.key \
5021 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
5022 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005023 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005024 -c "Supported Signature Algorithm found: 4," \
5025 -c "Supported Signature Algorithm found: 5,"
5026
5027requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5028run_test "Authentication, CA callback: client SHA384, server required" \
5029 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
5030 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
5031 key_file=data_files/server6.key \
5032 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
5033 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005034 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005035 -c "Supported Signature Algorithm found: 4," \
5036 -c "Supported Signature Algorithm found: 5,"
5037
5038requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5039run_test "Authentication, CA callback: client badcert, server required" \
5040 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
5041 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
5042 key_file=data_files/server5.key" \
5043 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005044 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005045 -S "skip write certificate request" \
5046 -C "skip parse certificate request" \
5047 -c "got a certificate request" \
5048 -C "skip write certificate" \
5049 -C "skip write certificate verify" \
5050 -S "skip parse certificate verify" \
5051 -s "x509_verify_cert() returned" \
5052 -s "! The certificate is not correctly signed by the trusted CA" \
5053 -s "! mbedtls_ssl_handshake returned" \
5054 -s "send alert level=2 message=48" \
5055 -c "! mbedtls_ssl_handshake returned" \
5056 -s "X509 - Certificate verification failed"
5057# We don't check that the client receives the alert because it might
5058# detect that its write end of the connection is closed and abort
5059# before reading the alert message.
5060
5061requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5062run_test "Authentication, CA callback: client cert not trusted, server required" \
5063 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
5064 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
5065 key_file=data_files/server5.key" \
5066 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005067 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005068 -S "skip write certificate request" \
5069 -C "skip parse certificate request" \
5070 -c "got a certificate request" \
5071 -C "skip write certificate" \
5072 -C "skip write certificate verify" \
5073 -S "skip parse certificate verify" \
5074 -s "x509_verify_cert() returned" \
5075 -s "! The certificate is not correctly signed by the trusted CA" \
5076 -s "! mbedtls_ssl_handshake returned" \
5077 -c "! mbedtls_ssl_handshake returned" \
5078 -s "X509 - Certificate verification failed"
5079
5080requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5081run_test "Authentication, CA callback: client badcert, server optional" \
5082 "$P_SRV ca_callback=1 debug_level=3 auth_mode=optional" \
5083 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
5084 key_file=data_files/server5.key" \
5085 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005086 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005087 -S "skip write certificate request" \
5088 -C "skip parse certificate request" \
5089 -c "got a certificate request" \
5090 -C "skip write certificate" \
5091 -C "skip write certificate verify" \
5092 -S "skip parse certificate verify" \
5093 -s "x509_verify_cert() returned" \
5094 -s "! The certificate is not correctly signed by the trusted CA" \
5095 -S "! mbedtls_ssl_handshake returned" \
5096 -C "! mbedtls_ssl_handshake returned" \
5097 -S "X509 - Certificate verification failed"
5098
Yuto Takano8a693ef2021-07-02 13:10:41 +01005099requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005100requires_full_size_output_buffer
5101requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5102run_test "Authentication, CA callback: server max_int chain, client default" \
5103 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
5104 key_file=data_files/dir-maxpath/09.key" \
5105 "$P_CLI ca_callback=1 debug_level=3 server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
5106 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005107 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005108 -C "X509 - A fatal error occurred"
5109
Yuto Takano8a693ef2021-07-02 13:10:41 +01005110requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005111requires_full_size_output_buffer
5112requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5113run_test "Authentication, CA callback: server max_int+1 chain, client default" \
5114 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5115 key_file=data_files/dir-maxpath/10.key" \
5116 "$P_CLI debug_level=3 ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
5117 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005118 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005119 -c "X509 - A fatal error occurred"
5120
Yuto Takano8a693ef2021-07-02 13:10:41 +01005121requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005122requires_full_size_output_buffer
5123requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5124run_test "Authentication, CA callback: server max_int+1 chain, client optional" \
5125 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5126 key_file=data_files/dir-maxpath/10.key" \
5127 "$P_CLI ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
5128 debug_level=3 auth_mode=optional" \
5129 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005130 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005131 -c "X509 - A fatal error occurred"
5132
Yuto Takano8a693ef2021-07-02 13:10:41 +01005133requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005134requires_full_size_output_buffer
5135requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5136run_test "Authentication, CA callback: client max_int+1 chain, server optional" \
5137 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
5138 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5139 key_file=data_files/dir-maxpath/10.key" \
5140 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005141 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005142 -s "X509 - A fatal error occurred"
5143
Yuto Takano8a693ef2021-07-02 13:10:41 +01005144requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005145requires_full_size_output_buffer
5146requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5147run_test "Authentication, CA callback: client max_int+1 chain, server required" \
5148 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
5149 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5150 key_file=data_files/dir-maxpath/10.key" \
5151 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005152 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005153 -s "X509 - A fatal error occurred"
5154
Yuto Takano8a693ef2021-07-02 13:10:41 +01005155requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005156requires_full_size_output_buffer
5157requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5158run_test "Authentication, CA callback: client max_int chain, server required" \
5159 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
5160 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
5161 key_file=data_files/dir-maxpath/09.key" \
5162 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005163 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005164 -S "X509 - A fatal error occurred"
5165
Shaun Case0e7791f2021-12-20 21:14:10 -08005166# Tests for certificate selection based on SHA version
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01005167
5168run_test "Certificate hash: client TLS 1.2 -> SHA-2" \
5169 "$P_SRV crt_file=data_files/server5.crt \
5170 key_file=data_files/server5.key \
5171 crt_file2=data_files/server5-sha1.crt \
5172 key_file2=data_files/server5.key" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00005173 "$P_CLI force_version=tls12" \
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01005174 0 \
5175 -c "signed using.*ECDSA with SHA256" \
5176 -C "signed using.*ECDSA with SHA1"
5177
5178run_test "Certificate hash: client TLS 1.1 -> SHA-1" \
5179 "$P_SRV crt_file=data_files/server5.crt \
5180 key_file=data_files/server5.key \
5181 crt_file2=data_files/server5-sha1.crt \
5182 key_file2=data_files/server5.key" \
5183 "$P_CLI force_version=tls1_1" \
5184 0 \
5185 -C "signed using.*ECDSA with SHA256" \
5186 -c "signed using.*ECDSA with SHA1"
5187
5188run_test "Certificate hash: client TLS 1.0 -> SHA-1" \
5189 "$P_SRV crt_file=data_files/server5.crt \
5190 key_file=data_files/server5.key \
5191 crt_file2=data_files/server5-sha1.crt \
5192 key_file2=data_files/server5.key" \
5193 "$P_CLI force_version=tls1" \
5194 0 \
5195 -C "signed using.*ECDSA with SHA256" \
5196 -c "signed using.*ECDSA with SHA1"
5197
5198run_test "Certificate hash: client TLS 1.1, no SHA-1 -> SHA-2 (order 1)" \
5199 "$P_SRV crt_file=data_files/server5.crt \
5200 key_file=data_files/server5.key \
5201 crt_file2=data_files/server6.crt \
5202 key_file2=data_files/server6.key" \
5203 "$P_CLI force_version=tls1_1" \
5204 0 \
5205 -c "serial number.*09" \
5206 -c "signed using.*ECDSA with SHA256" \
5207 -C "signed using.*ECDSA with SHA1"
5208
5209run_test "Certificate hash: client TLS 1.1, no SHA-1 -> SHA-2 (order 2)" \
5210 "$P_SRV crt_file=data_files/server6.crt \
5211 key_file=data_files/server6.key \
5212 crt_file2=data_files/server5.crt \
5213 key_file2=data_files/server5.key" \
5214 "$P_CLI force_version=tls1_1" \
5215 0 \
5216 -c "serial number.*0A" \
5217 -c "signed using.*ECDSA with SHA256" \
5218 -C "signed using.*ECDSA with SHA1"
5219
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005220# tests for SNI
5221
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005222run_test "SNI: no SNI callback" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005223 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005224 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005225 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005226 0 \
5227 -S "parse ServerName extension" \
5228 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
5229 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005230
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005231run_test "SNI: matching cert 1" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005232 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005233 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02005234 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005235 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005236 0 \
5237 -s "parse ServerName extension" \
5238 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5239 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005240
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005241run_test "SNI: matching cert 2" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005242 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005243 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02005244 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005245 "$P_CLI server_name=polarssl.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005246 0 \
5247 -s "parse ServerName extension" \
5248 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5249 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005250
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005251run_test "SNI: no matching cert" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005252 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005253 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02005254 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005255 "$P_CLI server_name=nonesuch.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005256 1 \
5257 -s "parse ServerName extension" \
5258 -s "ssl_sni_wrapper() returned" \
5259 -s "mbedtls_ssl_handshake returned" \
5260 -c "mbedtls_ssl_handshake returned" \
5261 -c "SSL - A fatal alert message was received from our peer"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005262
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02005263run_test "SNI: client auth no override: optional" \
5264 "$P_SRV debug_level=3 auth_mode=optional \
5265 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5266 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
5267 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005268 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02005269 -S "skip write certificate request" \
5270 -C "skip parse certificate request" \
5271 -c "got a certificate request" \
5272 -C "skip write certificate" \
5273 -C "skip write certificate verify" \
5274 -S "skip parse certificate verify"
5275
5276run_test "SNI: client auth override: none -> optional" \
5277 "$P_SRV debug_level=3 auth_mode=none \
5278 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5279 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
5280 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005281 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02005282 -S "skip write certificate request" \
5283 -C "skip parse certificate request" \
5284 -c "got a certificate request" \
5285 -C "skip write certificate" \
5286 -C "skip write certificate verify" \
5287 -S "skip parse certificate verify"
5288
5289run_test "SNI: client auth override: optional -> none" \
5290 "$P_SRV debug_level=3 auth_mode=optional \
5291 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5292 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
5293 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005294 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02005295 -s "skip write certificate request" \
5296 -C "skip parse certificate request" \
5297 -c "got no certificate request" \
5298 -c "skip write certificate" \
5299 -c "skip write certificate verify" \
5300 -s "skip parse certificate verify"
5301
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005302run_test "SNI: CA no override" \
5303 "$P_SRV debug_level=3 auth_mode=optional \
5304 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5305 ca_file=data_files/test-ca.crt \
5306 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
5307 "$P_CLI debug_level=3 server_name=localhost \
5308 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5309 1 \
5310 -S "skip write certificate request" \
5311 -C "skip parse certificate request" \
5312 -c "got a certificate request" \
5313 -C "skip write certificate" \
5314 -C "skip write certificate verify" \
5315 -S "skip parse certificate verify" \
5316 -s "x509_verify_cert() returned" \
5317 -s "! The certificate is not correctly signed by the trusted CA" \
5318 -S "The certificate has been revoked (is on a CRL)"
5319
5320run_test "SNI: CA override" \
5321 "$P_SRV debug_level=3 auth_mode=optional \
5322 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5323 ca_file=data_files/test-ca.crt \
5324 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
5325 "$P_CLI debug_level=3 server_name=localhost \
5326 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5327 0 \
5328 -S "skip write certificate request" \
5329 -C "skip parse certificate request" \
5330 -c "got a certificate request" \
5331 -C "skip write certificate" \
5332 -C "skip write certificate verify" \
5333 -S "skip parse certificate verify" \
5334 -S "x509_verify_cert() returned" \
5335 -S "! The certificate is not correctly signed by the trusted CA" \
5336 -S "The certificate has been revoked (is on a CRL)"
5337
5338run_test "SNI: CA override with CRL" \
5339 "$P_SRV debug_level=3 auth_mode=optional \
5340 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5341 ca_file=data_files/test-ca.crt \
5342 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
5343 "$P_CLI debug_level=3 server_name=localhost \
5344 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5345 1 \
5346 -S "skip write certificate request" \
5347 -C "skip parse certificate request" \
5348 -c "got a certificate request" \
5349 -C "skip write certificate" \
5350 -C "skip write certificate verify" \
5351 -S "skip parse certificate verify" \
5352 -s "x509_verify_cert() returned" \
5353 -S "! The certificate is not correctly signed by the trusted CA" \
5354 -s "The certificate has been revoked (is on a CRL)"
5355
Andres AG1a834452016-12-07 10:01:30 +00005356# Tests for SNI and DTLS
5357
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01005358run_test "SNI: DTLS, no SNI callback" \
5359 "$P_SRV debug_level=3 dtls=1 \
5360 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
5361 "$P_CLI server_name=localhost dtls=1" \
5362 0 \
5363 -S "parse ServerName extension" \
5364 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
5365 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
5366
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01005367run_test "SNI: DTLS, matching cert 1" \
Andres AG1a834452016-12-07 10:01:30 +00005368 "$P_SRV debug_level=3 dtls=1 \
5369 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5370 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
5371 "$P_CLI server_name=localhost dtls=1" \
5372 0 \
5373 -s "parse ServerName extension" \
5374 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5375 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
5376
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01005377run_test "SNI: DTLS, matching cert 2" \
5378 "$P_SRV debug_level=3 dtls=1 \
5379 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5380 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
5381 "$P_CLI server_name=polarssl.example dtls=1" \
5382 0 \
5383 -s "parse ServerName extension" \
5384 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5385 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
5386
5387run_test "SNI: DTLS, no matching cert" \
5388 "$P_SRV debug_level=3 dtls=1 \
5389 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5390 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
5391 "$P_CLI server_name=nonesuch.example dtls=1" \
5392 1 \
5393 -s "parse ServerName extension" \
5394 -s "ssl_sni_wrapper() returned" \
5395 -s "mbedtls_ssl_handshake returned" \
5396 -c "mbedtls_ssl_handshake returned" \
5397 -c "SSL - A fatal alert message was received from our peer"
5398
5399run_test "SNI: DTLS, client auth no override: optional" \
5400 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
5401 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5402 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
5403 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
5404 0 \
5405 -S "skip write certificate request" \
5406 -C "skip parse certificate request" \
5407 -c "got a certificate request" \
5408 -C "skip write certificate" \
5409 -C "skip write certificate verify" \
5410 -S "skip parse certificate verify"
5411
5412run_test "SNI: DTLS, client auth override: none -> optional" \
5413 "$P_SRV debug_level=3 auth_mode=none dtls=1 \
5414 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5415 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
5416 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
5417 0 \
5418 -S "skip write certificate request" \
5419 -C "skip parse certificate request" \
5420 -c "got a certificate request" \
5421 -C "skip write certificate" \
5422 -C "skip write certificate verify" \
5423 -S "skip parse certificate verify"
5424
5425run_test "SNI: DTLS, client auth override: optional -> none" \
5426 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
5427 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5428 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
5429 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
5430 0 \
5431 -s "skip write certificate request" \
5432 -C "skip parse certificate request" \
5433 -c "got no certificate request" \
5434 -c "skip write certificate" \
5435 -c "skip write certificate verify" \
5436 -s "skip parse certificate verify"
5437
5438run_test "SNI: DTLS, CA no override" \
5439 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
5440 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5441 ca_file=data_files/test-ca.crt \
5442 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
5443 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
5444 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5445 1 \
5446 -S "skip write certificate request" \
5447 -C "skip parse certificate request" \
5448 -c "got a certificate request" \
5449 -C "skip write certificate" \
5450 -C "skip write certificate verify" \
5451 -S "skip parse certificate verify" \
5452 -s "x509_verify_cert() returned" \
5453 -s "! The certificate is not correctly signed by the trusted CA" \
5454 -S "The certificate has been revoked (is on a CRL)"
5455
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01005456run_test "SNI: DTLS, CA override" \
Andres AG1a834452016-12-07 10:01:30 +00005457 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
5458 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5459 ca_file=data_files/test-ca.crt \
5460 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
5461 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
5462 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5463 0 \
5464 -S "skip write certificate request" \
5465 -C "skip parse certificate request" \
5466 -c "got a certificate request" \
5467 -C "skip write certificate" \
5468 -C "skip write certificate verify" \
5469 -S "skip parse certificate verify" \
5470 -S "x509_verify_cert() returned" \
5471 -S "! The certificate is not correctly signed by the trusted CA" \
5472 -S "The certificate has been revoked (is on a CRL)"
5473
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01005474run_test "SNI: DTLS, CA override with CRL" \
Andres AG1a834452016-12-07 10:01:30 +00005475 "$P_SRV debug_level=3 auth_mode=optional \
5476 crt_file=data_files/server5.crt key_file=data_files/server5.key dtls=1 \
5477 ca_file=data_files/test-ca.crt \
5478 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
5479 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
5480 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5481 1 \
5482 -S "skip write certificate request" \
5483 -C "skip parse certificate request" \
5484 -c "got a certificate request" \
5485 -C "skip write certificate" \
5486 -C "skip write certificate verify" \
5487 -S "skip parse certificate verify" \
5488 -s "x509_verify_cert() returned" \
5489 -S "! The certificate is not correctly signed by the trusted CA" \
5490 -s "The certificate has been revoked (is on a CRL)"
5491
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005492# Tests for non-blocking I/O: exercise a variety of handshake flows
5493
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005494run_test "Non-blocking I/O: basic handshake" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005495 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
5496 "$P_CLI nbio=2 tickets=0" \
5497 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005498 -S "mbedtls_ssl_handshake returned" \
5499 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005500 -c "Read from server: .* bytes read"
5501
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005502run_test "Non-blocking I/O: client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005503 "$P_SRV nbio=2 tickets=0 auth_mode=required" \
5504 "$P_CLI nbio=2 tickets=0" \
5505 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005506 -S "mbedtls_ssl_handshake returned" \
5507 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005508 -c "Read from server: .* bytes read"
5509
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005510run_test "Non-blocking I/O: ticket" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005511 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
5512 "$P_CLI nbio=2 tickets=1" \
5513 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005514 -S "mbedtls_ssl_handshake returned" \
5515 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005516 -c "Read from server: .* bytes read"
5517
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005518run_test "Non-blocking I/O: ticket + client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005519 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
5520 "$P_CLI nbio=2 tickets=1" \
5521 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005522 -S "mbedtls_ssl_handshake returned" \
5523 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005524 -c "Read from server: .* bytes read"
5525
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005526run_test "Non-blocking I/O: ticket + client auth + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005527 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
5528 "$P_CLI nbio=2 tickets=1 reconnect=1" \
5529 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005530 -S "mbedtls_ssl_handshake returned" \
5531 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005532 -c "Read from server: .* bytes read"
5533
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005534run_test "Non-blocking I/O: ticket + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005535 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
5536 "$P_CLI nbio=2 tickets=1 reconnect=1" \
5537 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005538 -S "mbedtls_ssl_handshake returned" \
5539 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005540 -c "Read from server: .* bytes read"
5541
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005542run_test "Non-blocking I/O: session-id resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005543 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
5544 "$P_CLI nbio=2 tickets=0 reconnect=1" \
5545 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005546 -S "mbedtls_ssl_handshake returned" \
5547 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005548 -c "Read from server: .* bytes read"
5549
Hanno Becker00076712017-11-15 16:39:08 +00005550# Tests for event-driven I/O: exercise a variety of handshake flows
5551
5552run_test "Event-driven I/O: basic handshake" \
5553 "$P_SRV event=1 tickets=0 auth_mode=none" \
5554 "$P_CLI event=1 tickets=0" \
5555 0 \
5556 -S "mbedtls_ssl_handshake returned" \
5557 -C "mbedtls_ssl_handshake returned" \
5558 -c "Read from server: .* bytes read"
5559
5560run_test "Event-driven I/O: client auth" \
5561 "$P_SRV event=1 tickets=0 auth_mode=required" \
5562 "$P_CLI event=1 tickets=0" \
5563 0 \
5564 -S "mbedtls_ssl_handshake returned" \
5565 -C "mbedtls_ssl_handshake returned" \
5566 -c "Read from server: .* bytes read"
5567
5568run_test "Event-driven I/O: ticket" \
5569 "$P_SRV event=1 tickets=1 auth_mode=none" \
5570 "$P_CLI event=1 tickets=1" \
5571 0 \
5572 -S "mbedtls_ssl_handshake returned" \
5573 -C "mbedtls_ssl_handshake returned" \
5574 -c "Read from server: .* bytes read"
5575
5576run_test "Event-driven I/O: ticket + client auth" \
5577 "$P_SRV event=1 tickets=1 auth_mode=required" \
5578 "$P_CLI event=1 tickets=1" \
5579 0 \
5580 -S "mbedtls_ssl_handshake returned" \
5581 -C "mbedtls_ssl_handshake returned" \
5582 -c "Read from server: .* bytes read"
5583
5584run_test "Event-driven I/O: ticket + client auth + resume" \
5585 "$P_SRV event=1 tickets=1 auth_mode=required" \
5586 "$P_CLI event=1 tickets=1 reconnect=1" \
5587 0 \
5588 -S "mbedtls_ssl_handshake returned" \
5589 -C "mbedtls_ssl_handshake returned" \
5590 -c "Read from server: .* bytes read"
5591
5592run_test "Event-driven I/O: ticket + resume" \
5593 "$P_SRV event=1 tickets=1 auth_mode=none" \
5594 "$P_CLI event=1 tickets=1 reconnect=1" \
5595 0 \
5596 -S "mbedtls_ssl_handshake returned" \
5597 -C "mbedtls_ssl_handshake returned" \
5598 -c "Read from server: .* bytes read"
5599
5600run_test "Event-driven I/O: session-id resume" \
5601 "$P_SRV event=1 tickets=0 auth_mode=none" \
5602 "$P_CLI event=1 tickets=0 reconnect=1" \
5603 0 \
5604 -S "mbedtls_ssl_handshake returned" \
5605 -C "mbedtls_ssl_handshake returned" \
5606 -c "Read from server: .* bytes read"
5607
Hanno Becker6a33f592018-03-13 11:38:46 +00005608run_test "Event-driven I/O, DTLS: basic handshake" \
5609 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
5610 "$P_CLI dtls=1 event=1 tickets=0" \
5611 0 \
5612 -c "Read from server: .* bytes read"
5613
5614run_test "Event-driven I/O, DTLS: client auth" \
5615 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
5616 "$P_CLI dtls=1 event=1 tickets=0" \
5617 0 \
5618 -c "Read from server: .* bytes read"
5619
5620run_test "Event-driven I/O, DTLS: ticket" \
5621 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
5622 "$P_CLI dtls=1 event=1 tickets=1" \
5623 0 \
5624 -c "Read from server: .* bytes read"
5625
5626run_test "Event-driven I/O, DTLS: ticket + client auth" \
5627 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
5628 "$P_CLI dtls=1 event=1 tickets=1" \
5629 0 \
5630 -c "Read from server: .* bytes read"
5631
5632run_test "Event-driven I/O, DTLS: ticket + client auth + resume" \
5633 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01005634 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00005635 0 \
5636 -c "Read from server: .* bytes read"
5637
5638run_test "Event-driven I/O, DTLS: ticket + resume" \
5639 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01005640 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00005641 0 \
5642 -c "Read from server: .* bytes read"
5643
5644run_test "Event-driven I/O, DTLS: session-id resume" \
5645 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01005646 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00005647 0 \
5648 -c "Read from server: .* bytes read"
Hanno Beckerbc6c1102018-03-13 11:39:40 +00005649
5650# This test demonstrates the need for the mbedtls_ssl_check_pending function.
5651# During session resumption, the client will send its ApplicationData record
5652# within the same datagram as the Finished messages. In this situation, the
5653# server MUST NOT idle on the underlying transport after handshake completion,
5654# because the ApplicationData request has already been queued internally.
5655run_test "Event-driven I/O, DTLS: session-id resume, UDP packing" \
Hanno Becker8d832182018-03-15 10:14:19 +00005656 -p "$P_PXY pack=50" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00005657 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01005658 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00005659 0 \
5660 -c "Read from server: .* bytes read"
5661
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005662# Tests for version negotiation
5663
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005664requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005665run_test "Version check: all -> 1.2" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005666 "$P_SRV" \
5667 "$P_CLI" \
5668 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005669 -S "mbedtls_ssl_handshake returned" \
5670 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005671 -s "Protocol is TLSv1.2" \
5672 -c "Protocol is TLSv1.2"
5673
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005674requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005675run_test "Version check: cli max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005676 "$P_SRV" \
5677 "$P_CLI max_version=tls1_1" \
5678 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005679 -S "mbedtls_ssl_handshake returned" \
5680 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005681 -s "Protocol is TLSv1.1" \
5682 -c "Protocol is TLSv1.1"
5683
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005684requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005685run_test "Version check: srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005686 "$P_SRV max_version=tls1_1" \
5687 "$P_CLI" \
5688 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005689 -S "mbedtls_ssl_handshake returned" \
5690 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005691 -s "Protocol is TLSv1.1" \
5692 -c "Protocol is TLSv1.1"
5693
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005694requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005695run_test "Version check: cli+srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005696 "$P_SRV max_version=tls1_1" \
5697 "$P_CLI max_version=tls1_1" \
5698 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005699 -S "mbedtls_ssl_handshake returned" \
5700 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005701 -s "Protocol is TLSv1.1" \
5702 -c "Protocol is TLSv1.1"
5703
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005704requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005705run_test "Version check: cli max 1.1, srv min 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005706 "$P_SRV min_version=tls1_1" \
5707 "$P_CLI max_version=tls1_1" \
5708 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005709 -S "mbedtls_ssl_handshake returned" \
5710 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005711 -s "Protocol is TLSv1.1" \
5712 -c "Protocol is TLSv1.1"
5713
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005714requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005715run_test "Version check: cli min 1.1, srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005716 "$P_SRV max_version=tls1_1" \
5717 "$P_CLI min_version=tls1_1" \
5718 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005719 -S "mbedtls_ssl_handshake returned" \
5720 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005721 -s "Protocol is TLSv1.1" \
5722 -c "Protocol is TLSv1.1"
5723
Gilles Peskinebcb2ab02022-04-09 00:11:16 +02005724requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
5725requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005726run_test "Version check: cli min 1.2, srv max 1.1 -> fail" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005727 "$P_SRV max_version=tls1_1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00005728 "$P_CLI min_version=tls12" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005729 1 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005730 -s "mbedtls_ssl_handshake returned" \
5731 -c "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005732 -c "SSL - Handshake protocol not within min/max boundaries"
5733
Gilles Peskinebcb2ab02022-04-09 00:11:16 +02005734requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
5735requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005736run_test "Version check: srv min 1.2, cli max 1.1 -> fail" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00005737 "$P_SRV min_version=tls12" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005738 "$P_CLI max_version=tls1_1" \
5739 1 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005740 -s "mbedtls_ssl_handshake returned" \
5741 -c "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005742 -s "SSL - Handshake protocol not within min/max boundaries"
5743
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005744# Tests for ALPN extension
5745
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005746run_test "ALPN: none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005747 "$P_SRV debug_level=3" \
5748 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005749 0 \
5750 -C "client hello, adding alpn extension" \
5751 -S "found alpn extension" \
5752 -C "got an alert message, type: \\[2:120]" \
5753 -S "server hello, adding alpn extension" \
5754 -C "found alpn extension " \
5755 -C "Application Layer Protocol is" \
5756 -S "Application Layer Protocol is"
5757
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005758run_test "ALPN: client only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005759 "$P_SRV debug_level=3" \
5760 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005761 0 \
5762 -c "client hello, adding alpn extension" \
5763 -s "found alpn extension" \
5764 -C "got an alert message, type: \\[2:120]" \
5765 -S "server hello, adding alpn extension" \
5766 -C "found alpn extension " \
5767 -c "Application Layer Protocol is (none)" \
5768 -S "Application Layer Protocol is"
5769
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005770run_test "ALPN: server only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005771 "$P_SRV debug_level=3 alpn=abc,1234" \
5772 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005773 0 \
5774 -C "client hello, adding alpn extension" \
5775 -S "found alpn extension" \
5776 -C "got an alert message, type: \\[2:120]" \
5777 -S "server hello, adding alpn extension" \
5778 -C "found alpn extension " \
5779 -C "Application Layer Protocol is" \
5780 -s "Application Layer Protocol is (none)"
5781
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005782run_test "ALPN: both, common cli1-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005783 "$P_SRV debug_level=3 alpn=abc,1234" \
5784 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005785 0 \
5786 -c "client hello, adding alpn extension" \
5787 -s "found alpn extension" \
5788 -C "got an alert message, type: \\[2:120]" \
5789 -s "server hello, adding alpn extension" \
5790 -c "found alpn extension" \
5791 -c "Application Layer Protocol is abc" \
5792 -s "Application Layer Protocol is abc"
5793
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005794run_test "ALPN: both, common cli2-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005795 "$P_SRV debug_level=3 alpn=abc,1234" \
5796 "$P_CLI debug_level=3 alpn=1234,abc" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005797 0 \
5798 -c "client hello, adding alpn extension" \
5799 -s "found alpn extension" \
5800 -C "got an alert message, type: \\[2:120]" \
5801 -s "server hello, adding alpn extension" \
5802 -c "found alpn extension" \
5803 -c "Application Layer Protocol is abc" \
5804 -s "Application Layer Protocol is abc"
5805
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005806run_test "ALPN: both, common cli1-srv2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005807 "$P_SRV debug_level=3 alpn=abc,1234" \
5808 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005809 0 \
5810 -c "client hello, adding alpn extension" \
5811 -s "found alpn extension" \
5812 -C "got an alert message, type: \\[2:120]" \
5813 -s "server hello, adding alpn extension" \
5814 -c "found alpn extension" \
5815 -c "Application Layer Protocol is 1234" \
5816 -s "Application Layer Protocol is 1234"
5817
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005818run_test "ALPN: both, no common" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005819 "$P_SRV debug_level=3 alpn=abc,123" \
5820 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005821 1 \
5822 -c "client hello, adding alpn extension" \
5823 -s "found alpn extension" \
5824 -c "got an alert message, type: \\[2:120]" \
5825 -S "server hello, adding alpn extension" \
5826 -C "found alpn extension" \
5827 -C "Application Layer Protocol is 1234" \
5828 -S "Application Layer Protocol is 1234"
5829
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +02005830
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005831# Tests for keyUsage in leaf certificates, part 1:
5832# server-side certificate/suite selection
5833
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005834run_test "keyUsage srv: RSA, digitalSignature -> (EC)DHE-RSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005835 "$P_SRV key_file=data_files/server2.key \
5836 crt_file=data_files/server2.ku-ds.crt" \
5837 "$P_CLI" \
5838 0 \
Manuel Pégourié-Gonnard17cde5f2014-05-22 14:42:39 +02005839 -c "Ciphersuite is TLS-[EC]*DHE-RSA-WITH-"
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005840
5841
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005842run_test "keyUsage srv: RSA, keyEncipherment -> RSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005843 "$P_SRV key_file=data_files/server2.key \
5844 crt_file=data_files/server2.ku-ke.crt" \
5845 "$P_CLI" \
5846 0 \
5847 -c "Ciphersuite is TLS-RSA-WITH-"
5848
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005849run_test "keyUsage srv: RSA, keyAgreement -> fail" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02005850 "$P_SRV key_file=data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005851 crt_file=data_files/server2.ku-ka.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02005852 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005853 1 \
5854 -C "Ciphersuite is "
5855
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005856run_test "keyUsage srv: ECDSA, digitalSignature -> ECDHE-ECDSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005857 "$P_SRV key_file=data_files/server5.key \
5858 crt_file=data_files/server5.ku-ds.crt" \
5859 "$P_CLI" \
5860 0 \
5861 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-"
5862
5863
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005864run_test "keyUsage srv: ECDSA, keyAgreement -> ECDH-" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005865 "$P_SRV key_file=data_files/server5.key \
5866 crt_file=data_files/server5.ku-ka.crt" \
5867 "$P_CLI" \
5868 0 \
5869 -c "Ciphersuite is TLS-ECDH-"
5870
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005871run_test "keyUsage srv: ECDSA, keyEncipherment -> fail" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02005872 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005873 crt_file=data_files/server5.ku-ke.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02005874 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005875 1 \
5876 -C "Ciphersuite is "
5877
5878# Tests for keyUsage in leaf certificates, part 2:
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005879# client-side checking of server cert
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005880
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005881run_test "keyUsage cli: DigitalSignature+KeyEncipherment, RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005882 "$O_SRV -key data_files/server2.key \
5883 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005884 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005885 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
5886 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005887 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005888 -C "Processing of the Certificate handshake message failed" \
5889 -c "Ciphersuite is TLS-"
5890
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005891run_test "keyUsage cli: DigitalSignature+KeyEncipherment, DHE-RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005892 "$O_SRV -key data_files/server2.key \
5893 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005894 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005895 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
5896 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005897 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005898 -C "Processing of the Certificate handshake message failed" \
5899 -c "Ciphersuite is TLS-"
5900
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005901run_test "keyUsage cli: KeyEncipherment, RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005902 "$O_SRV -key data_files/server2.key \
5903 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005904 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005905 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
5906 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005907 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005908 -C "Processing of the Certificate handshake message failed" \
5909 -c "Ciphersuite is TLS-"
5910
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005911run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005912 "$O_SRV -key data_files/server2.key \
5913 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005914 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005915 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
5916 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005917 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005918 -c "Processing of the Certificate handshake message failed" \
5919 -C "Ciphersuite is TLS-"
5920
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01005921run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail, soft" \
5922 "$O_SRV -key data_files/server2.key \
5923 -cert data_files/server2.ku-ke.crt" \
5924 "$P_CLI debug_level=1 auth_mode=optional \
5925 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
5926 0 \
5927 -c "bad certificate (usage extensions)" \
5928 -C "Processing of the Certificate handshake message failed" \
5929 -c "Ciphersuite is TLS-" \
5930 -c "! Usage does not match the keyUsage extension"
5931
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005932run_test "keyUsage cli: DigitalSignature, DHE-RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005933 "$O_SRV -key data_files/server2.key \
5934 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005935 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005936 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
5937 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005938 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005939 -C "Processing of the Certificate handshake message failed" \
5940 -c "Ciphersuite is TLS-"
5941
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005942run_test "keyUsage cli: DigitalSignature, RSA: fail" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005943 "$O_SRV -key data_files/server2.key \
5944 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005945 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005946 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
5947 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005948 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005949 -c "Processing of the Certificate handshake message failed" \
5950 -C "Ciphersuite is TLS-"
5951
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01005952run_test "keyUsage cli: DigitalSignature, RSA: fail, soft" \
5953 "$O_SRV -key data_files/server2.key \
5954 -cert data_files/server2.ku-ds.crt" \
5955 "$P_CLI debug_level=1 auth_mode=optional \
5956 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
5957 0 \
5958 -c "bad certificate (usage extensions)" \
5959 -C "Processing of the Certificate handshake message failed" \
5960 -c "Ciphersuite is TLS-" \
5961 -c "! Usage does not match the keyUsage extension"
5962
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005963# Tests for keyUsage in leaf certificates, part 3:
5964# server-side checking of client cert
5965
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005966run_test "keyUsage cli-auth: RSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005967 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005968 "$O_CLI -key data_files/server2.key \
5969 -cert data_files/server2.ku-ds.crt" \
5970 0 \
5971 -S "bad certificate (usage extensions)" \
5972 -S "Processing of the Certificate handshake message failed"
5973
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005974run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005975 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005976 "$O_CLI -key data_files/server2.key \
5977 -cert data_files/server2.ku-ke.crt" \
5978 0 \
5979 -s "bad certificate (usage extensions)" \
5980 -S "Processing of the Certificate handshake message failed"
5981
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005982run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005983 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005984 "$O_CLI -key data_files/server2.key \
5985 -cert data_files/server2.ku-ke.crt" \
5986 1 \
5987 -s "bad certificate (usage extensions)" \
5988 -s "Processing of the Certificate handshake message failed"
5989
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005990run_test "keyUsage cli-auth: ECDSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005991 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005992 "$O_CLI -key data_files/server5.key \
5993 -cert data_files/server5.ku-ds.crt" \
5994 0 \
5995 -S "bad certificate (usage extensions)" \
5996 -S "Processing of the Certificate handshake message failed"
5997
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005998run_test "keyUsage cli-auth: ECDSA, KeyAgreement: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005999 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006000 "$O_CLI -key data_files/server5.key \
6001 -cert data_files/server5.ku-ka.crt" \
6002 0 \
6003 -s "bad certificate (usage extensions)" \
6004 -S "Processing of the Certificate handshake message failed"
6005
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006006# Tests for extendedKeyUsage, part 1: server-side certificate/suite selection
6007
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006008run_test "extKeyUsage srv: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006009 "$P_SRV key_file=data_files/server5.key \
6010 crt_file=data_files/server5.eku-srv.crt" \
6011 "$P_CLI" \
6012 0
6013
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006014run_test "extKeyUsage srv: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006015 "$P_SRV key_file=data_files/server5.key \
6016 crt_file=data_files/server5.eku-srv.crt" \
6017 "$P_CLI" \
6018 0
6019
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006020run_test "extKeyUsage srv: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006021 "$P_SRV key_file=data_files/server5.key \
6022 crt_file=data_files/server5.eku-cs_any.crt" \
6023 "$P_CLI" \
6024 0
6025
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006026run_test "extKeyUsage srv: codeSign -> fail" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02006027 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006028 crt_file=data_files/server5.eku-cli.crt" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02006029 "$P_CLI" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006030 1
6031
6032# Tests for extendedKeyUsage, part 2: client-side checking of server cert
6033
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006034run_test "extKeyUsage cli: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006035 "$O_SRV -key data_files/server5.key \
6036 -cert data_files/server5.eku-srv.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006037 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006038 0 \
6039 -C "bad certificate (usage extensions)" \
6040 -C "Processing of the Certificate handshake message failed" \
6041 -c "Ciphersuite is TLS-"
6042
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006043run_test "extKeyUsage cli: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006044 "$O_SRV -key data_files/server5.key \
6045 -cert data_files/server5.eku-srv_cli.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006046 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006047 0 \
6048 -C "bad certificate (usage extensions)" \
6049 -C "Processing of the Certificate handshake message failed" \
6050 -c "Ciphersuite is TLS-"
6051
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006052run_test "extKeyUsage cli: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006053 "$O_SRV -key data_files/server5.key \
6054 -cert data_files/server5.eku-cs_any.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006055 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006056 0 \
6057 -C "bad certificate (usage extensions)" \
6058 -C "Processing of the Certificate handshake message failed" \
6059 -c "Ciphersuite is TLS-"
6060
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006061run_test "extKeyUsage cli: codeSign -> fail" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006062 "$O_SRV -key data_files/server5.key \
6063 -cert data_files/server5.eku-cs.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006064 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006065 1 \
6066 -c "bad certificate (usage extensions)" \
6067 -c "Processing of the Certificate handshake message failed" \
6068 -C "Ciphersuite is TLS-"
6069
6070# Tests for extendedKeyUsage, part 3: server-side checking of client cert
6071
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006072run_test "extKeyUsage cli-auth: clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006073 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006074 "$O_CLI -key data_files/server5.key \
6075 -cert data_files/server5.eku-cli.crt" \
6076 0 \
6077 -S "bad certificate (usage extensions)" \
6078 -S "Processing of the Certificate handshake message failed"
6079
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006080run_test "extKeyUsage cli-auth: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006081 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006082 "$O_CLI -key data_files/server5.key \
6083 -cert data_files/server5.eku-srv_cli.crt" \
6084 0 \
6085 -S "bad certificate (usage extensions)" \
6086 -S "Processing of the Certificate handshake message failed"
6087
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006088run_test "extKeyUsage cli-auth: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006089 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006090 "$O_CLI -key data_files/server5.key \
6091 -cert data_files/server5.eku-cs_any.crt" \
6092 0 \
6093 -S "bad certificate (usage extensions)" \
6094 -S "Processing of the Certificate handshake message failed"
6095
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006096run_test "extKeyUsage cli-auth: codeSign -> fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006097 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006098 "$O_CLI -key data_files/server5.key \
6099 -cert data_files/server5.eku-cs.crt" \
6100 0 \
6101 -s "bad certificate (usage extensions)" \
6102 -S "Processing of the Certificate handshake message failed"
6103
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006104run_test "extKeyUsage cli-auth: codeSign -> fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006105 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006106 "$O_CLI -key data_files/server5.key \
6107 -cert data_files/server5.eku-cs.crt" \
6108 1 \
6109 -s "bad certificate (usage extensions)" \
6110 -s "Processing of the Certificate handshake message failed"
6111
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006112# Tests for DHM parameters loading
6113
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006114run_test "DHM parameters: reference" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006115 "$P_SRV" \
6116 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6117 debug_level=3" \
6118 0 \
6119 -c "value of 'DHM: P ' (2048 bits)" \
Hanno Becker13be9902017-09-27 17:17:30 +01006120 -c "value of 'DHM: G ' (2 bits)"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006121
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006122run_test "DHM parameters: other parameters" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006123 "$P_SRV dhm_file=data_files/dhparams.pem" \
6124 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6125 debug_level=3" \
6126 0 \
6127 -c "value of 'DHM: P ' (1024 bits)" \
6128 -c "value of 'DHM: G ' (2 bits)"
6129
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02006130# Tests for DHM client-side size checking
6131
6132run_test "DHM size: server default, client default, OK" \
6133 "$P_SRV" \
6134 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6135 debug_level=1" \
6136 0 \
6137 -C "DHM prime too short:"
6138
6139run_test "DHM size: server default, client 2048, OK" \
6140 "$P_SRV" \
6141 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6142 debug_level=1 dhmlen=2048" \
6143 0 \
6144 -C "DHM prime too short:"
6145
6146run_test "DHM size: server 1024, client default, OK" \
6147 "$P_SRV dhm_file=data_files/dhparams.pem" \
6148 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6149 debug_level=1" \
6150 0 \
6151 -C "DHM prime too short:"
6152
Gilles Peskinec6b0d962020-12-08 22:31:52 +01006153run_test "DHM size: server 999, client 999, OK" \
6154 "$P_SRV dhm_file=data_files/dh.999.pem" \
6155 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6156 debug_level=1 dhmlen=999" \
6157 0 \
6158 -C "DHM prime too short:"
6159
6160run_test "DHM size: server 1000, client 1000, OK" \
6161 "$P_SRV dhm_file=data_files/dh.1000.pem" \
6162 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6163 debug_level=1 dhmlen=1000" \
6164 0 \
6165 -C "DHM prime too short:"
6166
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02006167run_test "DHM size: server 1000, client default, rejected" \
6168 "$P_SRV dhm_file=data_files/dh.1000.pem" \
6169 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6170 debug_level=1" \
6171 1 \
6172 -c "DHM prime too short:"
6173
Gilles Peskinec6b0d962020-12-08 22:31:52 +01006174run_test "DHM size: server 1000, client 1001, rejected" \
6175 "$P_SRV dhm_file=data_files/dh.1000.pem" \
6176 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6177 debug_level=1 dhmlen=1001" \
6178 1 \
6179 -c "DHM prime too short:"
6180
6181run_test "DHM size: server 999, client 1000, rejected" \
6182 "$P_SRV dhm_file=data_files/dh.999.pem" \
6183 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6184 debug_level=1 dhmlen=1000" \
6185 1 \
6186 -c "DHM prime too short:"
6187
6188run_test "DHM size: server 998, client 999, rejected" \
6189 "$P_SRV dhm_file=data_files/dh.998.pem" \
6190 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6191 debug_level=1 dhmlen=999" \
6192 1 \
6193 -c "DHM prime too short:"
6194
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02006195run_test "DHM size: server default, client 2049, rejected" \
6196 "$P_SRV" \
6197 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6198 debug_level=1 dhmlen=2049" \
6199 1 \
6200 -c "DHM prime too short:"
6201
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006202# Tests for PSK callback
6203
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006204run_test "PSK callback: psk, no callback" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006205 "$P_SRV psk=abc123 psk_identity=foo" \
6206 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6207 psk_identity=foo psk=abc123" \
6208 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006209 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02006210 -S "SSL - Unknown identity received" \
6211 -S "SSL - Verification of the message MAC failed"
6212
Hanno Beckerf7027512018-10-23 15:27:39 +01006213requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6214run_test "PSK callback: opaque psk on client, no callback" \
6215 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006216 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00006217 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01006218 0 \
6219 -c "skip PMS generation for opaque PSK"\
6220 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006221 -C "session hash for extended master secret"\
6222 -S "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01006223 -S "SSL - None of the common ciphersuites is usable" \
6224 -S "SSL - Unknown identity received" \
6225 -S "SSL - Verification of the message MAC failed"
6226
6227requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6228run_test "PSK callback: opaque psk on client, no callback, SHA-384" \
6229 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006230 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00006231 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01006232 0 \
6233 -c "skip PMS generation for opaque PSK"\
6234 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006235 -C "session hash for extended master secret"\
6236 -S "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01006237 -S "SSL - None of the common ciphersuites is usable" \
6238 -S "SSL - Unknown identity received" \
6239 -S "SSL - Verification of the message MAC failed"
6240
6241requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6242run_test "PSK callback: opaque psk on client, no callback, EMS" \
6243 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006244 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00006245 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01006246 0 \
6247 -c "skip PMS generation for opaque PSK"\
6248 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006249 -c "session hash for extended master secret"\
6250 -s "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01006251 -S "SSL - None of the common ciphersuites is usable" \
6252 -S "SSL - Unknown identity received" \
6253 -S "SSL - Verification of the message MAC failed"
6254
6255requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6256run_test "PSK callback: opaque psk on client, no callback, SHA-384, EMS" \
6257 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006258 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00006259 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01006260 0 \
6261 -c "skip PMS generation for opaque PSK"\
6262 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006263 -c "session hash for extended master secret"\
6264 -s "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01006265 -S "SSL - None of the common ciphersuites is usable" \
6266 -S "SSL - Unknown identity received" \
6267 -S "SSL - Verification of the message MAC failed"
6268
Hanno Becker28c79dc2018-10-26 13:15:08 +01006269requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6270run_test "PSK callback: raw psk on client, static opaque on server, no callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006271 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6272 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006273 psk_identity=foo psk=abc123" \
6274 0 \
6275 -C "skip PMS generation for opaque PSK"\
6276 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006277 -C "session hash for extended master secret"\
6278 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006279 -S "SSL - None of the common ciphersuites is usable" \
6280 -S "SSL - Unknown identity received" \
6281 -S "SSL - Verification of the message MAC failed"
6282
6283requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6284run_test "PSK callback: raw psk on client, static opaque on server, no callback, SHA-384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006285 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
6286 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006287 psk_identity=foo psk=abc123" \
6288 0 \
6289 -C "skip PMS generation for opaque PSK"\
6290 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006291 -C "session hash for extended master secret"\
6292 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006293 -S "SSL - None of the common ciphersuites is usable" \
6294 -S "SSL - Unknown identity received" \
6295 -S "SSL - Verification of the message MAC failed"
6296
6297requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6298run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006299 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006300 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006301 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006302 psk_identity=foo psk=abc123 extended_ms=1" \
6303 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006304 -c "session hash for extended master secret"\
6305 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006306 -C "skip PMS generation for opaque PSK"\
6307 -s "skip PMS generation for opaque PSK"\
6308 -S "SSL - None of the common ciphersuites is usable" \
6309 -S "SSL - Unknown identity received" \
6310 -S "SSL - Verification of the message MAC failed"
6311
6312requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6313run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS, SHA384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006314 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006315 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006316 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006317 psk_identity=foo psk=abc123 extended_ms=1" \
6318 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006319 -c "session hash for extended master secret"\
6320 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006321 -C "skip PMS generation for opaque PSK"\
6322 -s "skip PMS generation for opaque PSK"\
6323 -S "SSL - None of the common ciphersuites is usable" \
6324 -S "SSL - Unknown identity received" \
6325 -S "SSL - Verification of the message MAC failed"
6326
6327requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6328run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006329 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6330 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006331 psk_identity=def psk=beef" \
6332 0 \
6333 -C "skip PMS generation for opaque PSK"\
6334 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006335 -C "session hash for extended master secret"\
6336 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006337 -S "SSL - None of the common ciphersuites is usable" \
6338 -S "SSL - Unknown identity received" \
6339 -S "SSL - Verification of the message MAC failed"
6340
6341requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6342run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, SHA-384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006343 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
6344 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006345 psk_identity=def psk=beef" \
6346 0 \
6347 -C "skip PMS generation for opaque PSK"\
6348 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006349 -C "session hash for extended master secret"\
6350 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006351 -S "SSL - None of the common ciphersuites is usable" \
6352 -S "SSL - Unknown identity received" \
6353 -S "SSL - Verification of the message MAC failed"
6354
6355requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6356run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006357 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006358 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006359 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006360 psk_identity=abc psk=dead extended_ms=1" \
6361 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006362 -c "session hash for extended master secret"\
6363 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006364 -C "skip PMS generation for opaque PSK"\
6365 -s "skip PMS generation for opaque PSK"\
6366 -S "SSL - None of the common ciphersuites is usable" \
6367 -S "SSL - Unknown identity received" \
6368 -S "SSL - Verification of the message MAC failed"
6369
6370requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6371run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS, SHA384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006372 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006373 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006374 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006375 psk_identity=abc psk=dead extended_ms=1" \
6376 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006377 -c "session hash for extended master secret"\
6378 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006379 -C "skip PMS generation for opaque PSK"\
6380 -s "skip PMS generation for opaque PSK"\
6381 -S "SSL - None of the common ciphersuites is usable" \
6382 -S "SSL - Unknown identity received" \
6383 -S "SSL - Verification of the message MAC failed"
6384
6385requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6386run_test "PSK callback: raw psk on client, mismatching static raw PSK on server, opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006387 "$P_SRV extended_ms=0 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6388 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006389 psk_identity=def psk=beef" \
6390 0 \
6391 -C "skip PMS generation for opaque PSK"\
6392 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006393 -C "session hash for extended master secret"\
6394 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006395 -S "SSL - None of the common ciphersuites is usable" \
6396 -S "SSL - Unknown identity received" \
6397 -S "SSL - Verification of the message MAC failed"
6398
6399requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6400run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006401 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6402 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006403 psk_identity=def psk=beef" \
6404 0 \
6405 -C "skip PMS generation for opaque PSK"\
6406 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006407 -C "session hash for extended master secret"\
6408 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006409 -S "SSL - None of the common ciphersuites is usable" \
6410 -S "SSL - Unknown identity received" \
6411 -S "SSL - Verification of the message MAC failed"
6412
6413requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6414run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, raw PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006415 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6416 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006417 psk_identity=def psk=beef" \
6418 0 \
6419 -C "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006420 -C "session hash for extended master secret"\
6421 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006422 -S "SSL - None of the common ciphersuites is usable" \
6423 -S "SSL - Unknown identity received" \
6424 -S "SSL - Verification of the message MAC failed"
6425
6426requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6427run_test "PSK callback: raw psk on client, id-matching but wrong raw PSK on server, opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006428 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6429 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006430 psk_identity=def psk=beef" \
6431 0 \
6432 -C "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006433 -C "session hash for extended master secret"\
6434 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006435 -S "SSL - None of the common ciphersuites is usable" \
6436 -S "SSL - Unknown identity received" \
6437 -S "SSL - Verification of the message MAC failed"
6438
6439requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6440run_test "PSK callback: raw psk on client, matching opaque PSK on server, wrong opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006441 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=beef debug_level=3 psk_list=abc,dead,def,abc123 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6442 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006443 psk_identity=def psk=beef" \
6444 1 \
6445 -s "SSL - Verification of the message MAC failed"
6446
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006447run_test "PSK callback: no psk, no callback" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02006448 "$P_SRV" \
6449 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6450 psk_identity=foo psk=abc123" \
6451 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006452 -s "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006453 -S "SSL - Unknown identity received" \
6454 -S "SSL - Verification of the message MAC failed"
6455
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006456run_test "PSK callback: callback overrides other settings" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006457 "$P_SRV psk=abc123 psk_identity=foo psk_list=abc,dead,def,beef" \
6458 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6459 psk_identity=foo psk=abc123" \
6460 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006461 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006462 -s "SSL - Unknown identity received" \
6463 -S "SSL - Verification of the message MAC failed"
6464
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006465run_test "PSK callback: first id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006466 "$P_SRV psk_list=abc,dead,def,beef" \
6467 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6468 psk_identity=abc psk=dead" \
6469 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006470 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006471 -S "SSL - Unknown identity received" \
6472 -S "SSL - Verification of the message MAC failed"
6473
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006474run_test "PSK callback: second id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006475 "$P_SRV psk_list=abc,dead,def,beef" \
6476 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6477 psk_identity=def psk=beef" \
6478 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006479 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006480 -S "SSL - Unknown identity received" \
6481 -S "SSL - Verification of the message MAC failed"
6482
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006483run_test "PSK callback: no match" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006484 "$P_SRV psk_list=abc,dead,def,beef" \
6485 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6486 psk_identity=ghi psk=beef" \
6487 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006488 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006489 -s "SSL - Unknown identity received" \
6490 -S "SSL - Verification of the message MAC failed"
6491
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006492run_test "PSK callback: wrong key" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006493 "$P_SRV psk_list=abc,dead,def,beef" \
6494 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6495 psk_identity=abc psk=beef" \
6496 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006497 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006498 -S "SSL - Unknown identity received" \
6499 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006500
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006501# Tests for EC J-PAKE
6502
Hanno Beckerfa452c42020-08-14 15:42:49 +01006503requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006504run_test "ECJPAKE: client not configured" \
6505 "$P_SRV debug_level=3" \
6506 "$P_CLI debug_level=3" \
6507 0 \
Hanno Beckeree63af62020-08-14 15:41:23 +01006508 -C "add ciphersuite: 0xc0ff" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006509 -C "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006510 -S "found ecjpake kkpp extension" \
6511 -S "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006512 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02006513 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02006514 -C "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006515 -S "None of the common ciphersuites is usable"
6516
Hanno Beckerfa452c42020-08-14 15:42:49 +01006517requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006518run_test "ECJPAKE: server not configured" \
6519 "$P_SRV debug_level=3" \
6520 "$P_CLI debug_level=3 ecjpake_pw=bla \
6521 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6522 1 \
Hanno Beckeree63af62020-08-14 15:41:23 +01006523 -c "add ciphersuite: 0xc0ff" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006524 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006525 -s "found ecjpake kkpp extension" \
6526 -s "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006527 -s "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02006528 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02006529 -C "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006530 -s "None of the common ciphersuites is usable"
6531
Hanno Beckerfa452c42020-08-14 15:42:49 +01006532requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006533run_test "ECJPAKE: working, TLS" \
6534 "$P_SRV debug_level=3 ecjpake_pw=bla" \
6535 "$P_CLI debug_level=3 ecjpake_pw=bla \
6536 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
Manuel Pégourié-Gonnard0f1660a2015-09-16 22:41:06 +02006537 0 \
Hanno Beckeree63af62020-08-14 15:41:23 +01006538 -c "add ciphersuite: 0xc0ff" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006539 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006540 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006541 -s "found ecjpake kkpp extension" \
6542 -S "skip ecjpake kkpp extension" \
6543 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02006544 -s "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02006545 -c "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006546 -S "None of the common ciphersuites is usable" \
6547 -S "SSL - Verification of the message MAC failed"
6548
Janos Follath74537a62016-09-02 13:45:28 +01006549server_needs_more_time 1
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006550requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006551run_test "ECJPAKE: password mismatch, TLS" \
6552 "$P_SRV debug_level=3 ecjpake_pw=bla" \
6553 "$P_CLI debug_level=3 ecjpake_pw=bad \
6554 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6555 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006556 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006557 -s "SSL - Verification of the message MAC failed"
6558
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006559requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006560run_test "ECJPAKE: working, DTLS" \
6561 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
6562 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
6563 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6564 0 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006565 -c "re-using cached ecjpake parameters" \
6566 -S "SSL - Verification of the message MAC failed"
6567
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006568requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006569run_test "ECJPAKE: working, DTLS, no cookie" \
6570 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla cookies=0" \
6571 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
6572 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6573 0 \
6574 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006575 -S "SSL - Verification of the message MAC failed"
6576
Janos Follath74537a62016-09-02 13:45:28 +01006577server_needs_more_time 1
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006578requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006579run_test "ECJPAKE: password mismatch, DTLS" \
6580 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
6581 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bad \
6582 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6583 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006584 -c "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006585 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006586
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02006587# for tests with configs/config-thread.h
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006588requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02006589run_test "ECJPAKE: working, DTLS, nolog" \
6590 "$P_SRV dtls=1 ecjpake_pw=bla" \
6591 "$P_CLI dtls=1 ecjpake_pw=bla \
6592 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6593 0
6594
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006595# Tests for ciphersuites per version
6596
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006597requires_config_enabled MBEDTLS_CAMELLIA_C
6598requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006599run_test "Per-version suites: SSL3" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006600 "$P_SRV min_version=ssl3 version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006601 "$P_CLI force_version=ssl3" \
6602 0 \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006603 -c "Ciphersuite is TLS-RSA-WITH-CAMELLIA-128-CBC-SHA"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006604
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006605requires_config_enabled MBEDTLS_CAMELLIA_C
6606requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006607run_test "Per-version suites: TLS 1.0" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006608 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01006609 "$P_CLI force_version=tls1 arc4=1" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006610 0 \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006611 -c "Ciphersuite is TLS-RSA-WITH-AES-256-CBC-SHA"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006612
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006613requires_config_enabled MBEDTLS_CAMELLIA_C
6614requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006615run_test "Per-version suites: TLS 1.1" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006616 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006617 "$P_CLI force_version=tls1_1" \
6618 0 \
6619 -c "Ciphersuite is TLS-RSA-WITH-AES-128-CBC-SHA"
6620
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006621requires_config_enabled MBEDTLS_CAMELLIA_C
6622requires_config_enabled MBEDTLS_AES_C
Przemek Stekielefc894b2022-10-06 12:15:21 +02006623requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006624run_test "Per-version suites: TLS 1.2" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006625 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006626 "$P_CLI force_version=tls12" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006627 0 \
6628 -c "Ciphersuite is TLS-RSA-WITH-AES-128-GCM-SHA256"
6629
Manuel Pégourié-Gonnard4cc8c632015-07-23 12:24:03 +02006630# Test for ClientHello without extensions
6631
Manuel Pégourié-Gonnardd55bc202015-08-04 16:22:30 +02006632requires_gnutls
Manuel Pégourié-Gonnardbc4da292020-01-30 12:45:14 +01006633run_test "ClientHello without extensions" \
Manuel Pégourié-Gonnard77cbeff2020-01-30 10:58:57 +01006634 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02006635 "$G_CLI --priority=NORMAL:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION localhost" \
Gilles Peskine5d2511c2017-05-12 13:16:40 +02006636 0 \
6637 -s "dumping 'client hello extensions' (0 bytes)"
6638
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006639# Tests for mbedtls_ssl_get_bytes_avail()
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02006640
Gilles Peskine5a1b3bd2022-04-06 23:35:56 +02006641# The server first reads buffer_size-1 bytes, then reads the remainder.
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006642run_test "mbedtls_ssl_get_bytes_avail: no extra data" \
Gilles Peskine5a1b3bd2022-04-06 23:35:56 +02006643 "$P_SRV buffer_size=100" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02006644 "$P_CLI request_size=100" \
6645 0 \
6646 -s "Read from client: 100 bytes read$"
6647
Gilles Peskine5a1b3bd2022-04-06 23:35:56 +02006648run_test "mbedtls_ssl_get_bytes_avail: extra data (+1)" \
6649 "$P_SRV buffer_size=100" \
6650 "$P_CLI request_size=101" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02006651 0 \
Gilles Peskine5a1b3bd2022-04-06 23:35:56 +02006652 -s "Read from client: 101 bytes read (100 + 1)"
6653
6654requires_max_content_len 200
6655run_test "mbedtls_ssl_get_bytes_avail: extra data (*2)" \
6656 "$P_SRV buffer_size=100" \
6657 "$P_CLI request_size=200" \
6658 0 \
6659 -s "Read from client: 200 bytes read (100 + 100)"
6660
6661run_test "mbedtls_ssl_get_bytes_avail: extra data (max)" \
6662 "$P_SRV buffer_size=100" \
6663 "$P_CLI request_size=$MAX_CONTENT_LEN" \
6664 0 \
6665 -s "Read from client: $MAX_CONTENT_LEN bytes read (100 + $((MAX_CONTENT_LEN - 100)))"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006666
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006667# Tests for small client packets
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006668
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006669run_test "Small client packet SSLv3 BlockCipher" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01006670 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006671 "$P_CLI request_size=1 force_version=ssl3 \
6672 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6673 0 \
6674 -s "Read from client: 1 bytes read"
6675
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006676run_test "Small client packet SSLv3 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006677 "$P_SRV min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006678 "$P_CLI request_size=1 force_version=ssl3 \
6679 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6680 0 \
6681 -s "Read from client: 1 bytes read"
6682
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006683run_test "Small client packet TLS 1.0 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006684 "$P_SRV" \
6685 "$P_CLI request_size=1 force_version=tls1 \
6686 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6687 0 \
6688 -s "Read from client: 1 bytes read"
6689
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006690run_test "Small client packet TLS 1.0 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006691 "$P_SRV" \
6692 "$P_CLI request_size=1 force_version=tls1 etm=0 \
6693 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6694 0 \
6695 -s "Read from client: 1 bytes read"
6696
Hanno Becker32c55012017-11-10 08:42:54 +00006697requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006698run_test "Small client packet TLS 1.0 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006699 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006700 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006701 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006702 0 \
6703 -s "Read from client: 1 bytes read"
6704
Hanno Becker32c55012017-11-10 08:42:54 +00006705requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006706run_test "Small client packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006707 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00006708 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006709 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00006710 0 \
6711 -s "Read from client: 1 bytes read"
6712
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006713run_test "Small client packet TLS 1.0 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006714 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006715 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker8501f982017-11-10 08:59:04 +00006716 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6717 0 \
6718 -s "Read from client: 1 bytes read"
6719
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006720run_test "Small client packet TLS 1.0 StreamCipher, without EtM" \
Hanno Becker8501f982017-11-10 08:59:04 +00006721 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6722 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006723 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00006724 0 \
6725 -s "Read from client: 1 bytes read"
6726
6727requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006728run_test "Small client packet TLS 1.0 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006729 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006730 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006731 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006732 0 \
6733 -s "Read from client: 1 bytes read"
6734
Hanno Becker8501f982017-11-10 08:59:04 +00006735requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006736run_test "Small client packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006737 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6738 "$P_CLI request_size=1 force_version=tls1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
6739 trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006740 0 \
6741 -s "Read from client: 1 bytes read"
6742
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006743run_test "Small client packet TLS 1.1 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006744 "$P_SRV" \
6745 "$P_CLI request_size=1 force_version=tls1_1 \
6746 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6747 0 \
6748 -s "Read from client: 1 bytes read"
6749
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006750run_test "Small client packet TLS 1.1 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006751 "$P_SRV" \
Hanno Becker8501f982017-11-10 08:59:04 +00006752 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006753 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00006754 0 \
6755 -s "Read from client: 1 bytes read"
6756
6757requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006758run_test "Small client packet TLS 1.1 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006759 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00006760 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006761 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00006762 0 \
6763 -s "Read from client: 1 bytes read"
6764
6765requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006766run_test "Small client packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006767 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00006768 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006769 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006770 0 \
6771 -s "Read from client: 1 bytes read"
6772
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006773run_test "Small client packet TLS 1.1 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006774 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006775 "$P_CLI request_size=1 force_version=tls1_1 \
6776 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6777 0 \
6778 -s "Read from client: 1 bytes read"
6779
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006780run_test "Small client packet TLS 1.1 StreamCipher, without EtM" \
Hanno Becker8501f982017-11-10 08:59:04 +00006781 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006782 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006783 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006784 0 \
6785 -s "Read from client: 1 bytes read"
6786
Hanno Becker8501f982017-11-10 08:59:04 +00006787requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006788run_test "Small client packet TLS 1.1 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006789 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006790 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006791 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006792 0 \
6793 -s "Read from client: 1 bytes read"
6794
Hanno Becker32c55012017-11-10 08:42:54 +00006795requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006796run_test "Small client packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006797 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006798 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006799 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006800 0 \
6801 -s "Read from client: 1 bytes read"
6802
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006803run_test "Small client packet TLS 1.2 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006804 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006805 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006806 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6807 0 \
6808 -s "Read from client: 1 bytes read"
6809
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006810run_test "Small client packet TLS 1.2 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006811 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006812 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006813 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006814 0 \
6815 -s "Read from client: 1 bytes read"
6816
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006817run_test "Small client packet TLS 1.2 BlockCipher larger MAC" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006818 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006819 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01006820 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006821 0 \
6822 -s "Read from client: 1 bytes read"
6823
Hanno Becker32c55012017-11-10 08:42:54 +00006824requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006825run_test "Small client packet TLS 1.2 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006826 "$P_SRV trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006827 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006828 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006829 0 \
6830 -s "Read from client: 1 bytes read"
6831
Hanno Becker8501f982017-11-10 08:59:04 +00006832requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006833run_test "Small client packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006834 "$P_SRV trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006835 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006836 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006837 0 \
6838 -s "Read from client: 1 bytes read"
6839
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006840run_test "Small client packet TLS 1.2 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006841 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006842 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006843 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6844 0 \
6845 -s "Read from client: 1 bytes read"
6846
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006847run_test "Small client packet TLS 1.2 StreamCipher, without EtM" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006848 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006849 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006850 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00006851 0 \
6852 -s "Read from client: 1 bytes read"
6853
Hanno Becker32c55012017-11-10 08:42:54 +00006854requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006855run_test "Small client packet TLS 1.2 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006856 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006857 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006858 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006859 0 \
6860 -s "Read from client: 1 bytes read"
6861
Hanno Becker8501f982017-11-10 08:59:04 +00006862requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006863run_test "Small client packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006864 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006865 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006866 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006867 0 \
6868 -s "Read from client: 1 bytes read"
6869
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006870run_test "Small client packet TLS 1.2 AEAD" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006871 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006872 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006873 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
6874 0 \
6875 -s "Read from client: 1 bytes read"
6876
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006877run_test "Small client packet TLS 1.2 AEAD shorter tag" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006878 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006879 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006880 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
6881 0 \
6882 -s "Read from client: 1 bytes read"
6883
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006884# Tests for small client packets in DTLS
Hanno Beckere2148042017-11-10 08:59:18 +00006885
6886requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006887run_test "Small client packet DTLS 1.0" \
Hanno Beckere2148042017-11-10 08:59:18 +00006888 "$P_SRV dtls=1 force_version=dtls1" \
6889 "$P_CLI dtls=1 request_size=1 \
6890 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6891 0 \
6892 -s "Read from client: 1 bytes read"
6893
6894requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006895run_test "Small client packet DTLS 1.0, without EtM" \
Hanno Beckere2148042017-11-10 08:59:18 +00006896 "$P_SRV dtls=1 force_version=dtls1 etm=0" \
6897 "$P_CLI dtls=1 request_size=1 \
6898 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6899 0 \
6900 -s "Read from client: 1 bytes read"
6901
6902requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6903requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006904run_test "Small client packet DTLS 1.0, truncated hmac" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006905 "$P_SRV dtls=1 force_version=dtls1 trunc_hmac=1" \
6906 "$P_CLI dtls=1 request_size=1 trunc_hmac=1 \
Hanno Beckere2148042017-11-10 08:59:18 +00006907 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6908 0 \
6909 -s "Read from client: 1 bytes read"
6910
6911requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6912requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006913run_test "Small client packet DTLS 1.0, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006914 "$P_SRV dtls=1 force_version=dtls1 trunc_hmac=1 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00006915 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006916 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
Hanno Beckere2148042017-11-10 08:59:18 +00006917 0 \
6918 -s "Read from client: 1 bytes read"
6919
6920requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006921run_test "Small client packet DTLS 1.2" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006922 "$P_SRV dtls=1 force_version=dtls12" \
Hanno Beckere2148042017-11-10 08:59:18 +00006923 "$P_CLI dtls=1 request_size=1 \
6924 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6925 0 \
6926 -s "Read from client: 1 bytes read"
6927
6928requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006929run_test "Small client packet DTLS 1.2, without EtM" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006930 "$P_SRV dtls=1 force_version=dtls12 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00006931 "$P_CLI dtls=1 request_size=1 \
6932 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6933 0 \
6934 -s "Read from client: 1 bytes read"
6935
6936requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6937requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006938run_test "Small client packet DTLS 1.2, truncated hmac" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006939 "$P_SRV dtls=1 force_version=dtls12 trunc_hmac=1" \
Hanno Beckere2148042017-11-10 08:59:18 +00006940 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006941 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Beckere2148042017-11-10 08:59:18 +00006942 0 \
6943 -s "Read from client: 1 bytes read"
6944
6945requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6946requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006947run_test "Small client packet DTLS 1.2, without EtM, truncated MAC" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006948 "$P_SRV dtls=1 force_version=dtls12 trunc_hmac=1 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00006949 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006950 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
Hanno Beckere2148042017-11-10 08:59:18 +00006951 0 \
6952 -s "Read from client: 1 bytes read"
6953
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006954# Tests for small server packets
6955
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006956run_test "Small server packet SSLv3 BlockCipher" \
6957 "$P_SRV response_size=1 min_version=ssl3" \
6958 "$P_CLI force_version=ssl3 \
6959 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6960 0 \
6961 -c "Read from server: 1 bytes read"
6962
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006963run_test "Small server packet SSLv3 StreamCipher" \
6964 "$P_SRV response_size=1 min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6965 "$P_CLI force_version=ssl3 \
6966 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6967 0 \
6968 -c "Read from server: 1 bytes read"
6969
6970run_test "Small server packet TLS 1.0 BlockCipher" \
6971 "$P_SRV response_size=1" \
6972 "$P_CLI force_version=tls1 \
6973 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6974 0 \
6975 -c "Read from server: 1 bytes read"
6976
6977run_test "Small server packet TLS 1.0 BlockCipher, without EtM" \
6978 "$P_SRV response_size=1" \
6979 "$P_CLI force_version=tls1 etm=0 \
6980 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6981 0 \
6982 -c "Read from server: 1 bytes read"
6983
6984requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6985run_test "Small server packet TLS 1.0 BlockCipher, truncated MAC" \
6986 "$P_SRV response_size=1 trunc_hmac=1" \
6987 "$P_CLI force_version=tls1 \
6988 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
6989 0 \
6990 -c "Read from server: 1 bytes read"
6991
6992requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6993run_test "Small server packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
6994 "$P_SRV response_size=1 trunc_hmac=1" \
6995 "$P_CLI force_version=tls1 \
6996 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
6997 0 \
6998 -c "Read from server: 1 bytes read"
6999
7000run_test "Small server packet TLS 1.0 StreamCipher" \
7001 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7002 "$P_CLI force_version=tls1 \
7003 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7004 0 \
7005 -c "Read from server: 1 bytes read"
7006
7007run_test "Small server packet TLS 1.0 StreamCipher, without EtM" \
7008 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7009 "$P_CLI force_version=tls1 \
7010 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7011 0 \
7012 -c "Read from server: 1 bytes read"
7013
7014requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7015run_test "Small server packet TLS 1.0 StreamCipher, truncated MAC" \
7016 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7017 "$P_CLI force_version=tls1 \
7018 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7019 0 \
7020 -c "Read from server: 1 bytes read"
7021
7022requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7023run_test "Small server packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
7024 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7025 "$P_CLI force_version=tls1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
7026 trunc_hmac=1 etm=0" \
7027 0 \
7028 -c "Read from server: 1 bytes read"
7029
7030run_test "Small server packet TLS 1.1 BlockCipher" \
7031 "$P_SRV response_size=1" \
7032 "$P_CLI force_version=tls1_1 \
7033 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7034 0 \
7035 -c "Read from server: 1 bytes read"
7036
7037run_test "Small server packet TLS 1.1 BlockCipher, without EtM" \
7038 "$P_SRV response_size=1" \
7039 "$P_CLI force_version=tls1_1 \
7040 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
7041 0 \
7042 -c "Read from server: 1 bytes read"
7043
7044requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7045run_test "Small server packet TLS 1.1 BlockCipher, truncated MAC" \
7046 "$P_SRV response_size=1 trunc_hmac=1" \
7047 "$P_CLI force_version=tls1_1 \
7048 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
7049 0 \
7050 -c "Read from server: 1 bytes read"
7051
7052requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7053run_test "Small server packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
7054 "$P_SRV response_size=1 trunc_hmac=1" \
7055 "$P_CLI force_version=tls1_1 \
7056 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
7057 0 \
7058 -c "Read from server: 1 bytes read"
7059
7060run_test "Small server packet TLS 1.1 StreamCipher" \
7061 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7062 "$P_CLI force_version=tls1_1 \
7063 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7064 0 \
7065 -c "Read from server: 1 bytes read"
7066
7067run_test "Small server packet TLS 1.1 StreamCipher, without EtM" \
7068 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7069 "$P_CLI force_version=tls1_1 \
7070 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7071 0 \
7072 -c "Read from server: 1 bytes read"
7073
7074requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7075run_test "Small server packet TLS 1.1 StreamCipher, truncated MAC" \
7076 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7077 "$P_CLI force_version=tls1_1 \
7078 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7079 0 \
7080 -c "Read from server: 1 bytes read"
7081
7082requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7083run_test "Small server packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
7084 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7085 "$P_CLI force_version=tls1_1 \
7086 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7087 0 \
7088 -c "Read from server: 1 bytes read"
7089
7090run_test "Small server packet TLS 1.2 BlockCipher" \
7091 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007092 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007093 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7094 0 \
7095 -c "Read from server: 1 bytes read"
7096
7097run_test "Small server packet TLS 1.2 BlockCipher, without EtM" \
7098 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007099 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007100 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
7101 0 \
7102 -c "Read from server: 1 bytes read"
7103
7104run_test "Small server packet TLS 1.2 BlockCipher larger MAC" \
7105 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007106 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007107 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
7108 0 \
7109 -c "Read from server: 1 bytes read"
7110
7111requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7112run_test "Small server packet TLS 1.2 BlockCipher, truncated MAC" \
7113 "$P_SRV response_size=1 trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007114 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007115 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
7116 0 \
7117 -c "Read from server: 1 bytes read"
7118
7119requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7120run_test "Small server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
7121 "$P_SRV response_size=1 trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007122 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007123 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
7124 0 \
7125 -c "Read from server: 1 bytes read"
7126
7127run_test "Small server packet TLS 1.2 StreamCipher" \
7128 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007129 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007130 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7131 0 \
7132 -c "Read from server: 1 bytes read"
7133
7134run_test "Small server packet TLS 1.2 StreamCipher, without EtM" \
7135 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007136 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007137 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7138 0 \
7139 -c "Read from server: 1 bytes read"
7140
7141requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7142run_test "Small server packet TLS 1.2 StreamCipher, truncated MAC" \
7143 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007144 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007145 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7146 0 \
7147 -c "Read from server: 1 bytes read"
7148
7149requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7150run_test "Small server packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
7151 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007152 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007153 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7154 0 \
7155 -c "Read from server: 1 bytes read"
7156
7157run_test "Small server packet TLS 1.2 AEAD" \
7158 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007159 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007160 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
7161 0 \
7162 -c "Read from server: 1 bytes read"
7163
7164run_test "Small server packet TLS 1.2 AEAD shorter tag" \
7165 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007166 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007167 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
7168 0 \
7169 -c "Read from server: 1 bytes read"
7170
7171# Tests for small server packets in DTLS
7172
7173requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7174run_test "Small server packet DTLS 1.0" \
7175 "$P_SRV dtls=1 response_size=1 force_version=dtls1" \
7176 "$P_CLI dtls=1 \
7177 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7178 0 \
7179 -c "Read from server: 1 bytes read"
7180
7181requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7182run_test "Small server packet DTLS 1.0, without EtM" \
7183 "$P_SRV dtls=1 response_size=1 force_version=dtls1 etm=0" \
7184 "$P_CLI dtls=1 \
7185 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7186 0 \
7187 -c "Read from server: 1 bytes read"
7188
7189requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7190requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7191run_test "Small server packet DTLS 1.0, truncated hmac" \
7192 "$P_SRV dtls=1 response_size=1 force_version=dtls1 trunc_hmac=1" \
7193 "$P_CLI dtls=1 trunc_hmac=1 \
7194 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7195 0 \
7196 -c "Read from server: 1 bytes read"
7197
7198requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7199requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7200run_test "Small server packet DTLS 1.0, without EtM, truncated MAC" \
7201 "$P_SRV dtls=1 response_size=1 force_version=dtls1 trunc_hmac=1 etm=0" \
7202 "$P_CLI dtls=1 \
7203 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
7204 0 \
7205 -c "Read from server: 1 bytes read"
7206
7207requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7208run_test "Small server packet DTLS 1.2" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007209 "$P_SRV dtls=1 response_size=1 force_version=dtls12" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007210 "$P_CLI dtls=1 \
7211 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7212 0 \
7213 -c "Read from server: 1 bytes read"
7214
7215requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7216run_test "Small server packet DTLS 1.2, without EtM" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007217 "$P_SRV dtls=1 response_size=1 force_version=dtls12 etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007218 "$P_CLI dtls=1 \
7219 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7220 0 \
7221 -c "Read from server: 1 bytes read"
7222
7223requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7224requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7225run_test "Small server packet DTLS 1.2, truncated hmac" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007226 "$P_SRV dtls=1 response_size=1 force_version=dtls12 trunc_hmac=1" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007227 "$P_CLI dtls=1 \
7228 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
7229 0 \
7230 -c "Read from server: 1 bytes read"
7231
7232requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7233requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7234run_test "Small server packet DTLS 1.2, without EtM, truncated MAC" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007235 "$P_SRV dtls=1 response_size=1 force_version=dtls12 trunc_hmac=1 etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007236 "$P_CLI dtls=1 \
7237 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
7238 0 \
7239 -c "Read from server: 1 bytes read"
7240
Janos Follath00efff72016-05-06 13:48:23 +01007241# A test for extensions in SSLv3
Yuto Takanoa49124e2021-07-08 15:56:33 +01007242requires_max_content_len 4096
Janos Follath00efff72016-05-06 13:48:23 +01007243run_test "SSLv3 with extensions, server side" \
7244 "$P_SRV min_version=ssl3 debug_level=3" \
7245 "$P_CLI force_version=ssl3 tickets=1 max_frag_len=4096 alpn=abc,1234" \
7246 0 \
7247 -S "dumping 'client hello extensions'" \
7248 -S "server hello, total extension length:"
7249
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007250# Test for large client packets
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007251
Angus Grattonc4dd0732018-04-11 16:28:39 +10007252# How many fragments do we expect to write $1 bytes?
7253fragments_for_write() {
7254 echo "$(( ( $1 + $MAX_OUT_LEN - 1 ) / $MAX_OUT_LEN ))"
7255}
7256
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007257run_test "Large client packet SSLv3 BlockCipher" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01007258 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01007259 "$P_CLI request_size=16384 force_version=ssl3 recsplit=0 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007260 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7261 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007262 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7263 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007264
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007265run_test "Large client packet SSLv3 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01007266 "$P_SRV min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007267 "$P_CLI request_size=16384 force_version=ssl3 \
7268 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7269 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007270 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7271 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007272
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007273run_test "Large client packet TLS 1.0 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007274 "$P_SRV" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01007275 "$P_CLI request_size=16384 force_version=tls1 recsplit=0 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007276 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7277 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007278 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7279 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007280
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007281run_test "Large client packet TLS 1.0 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007282 "$P_SRV" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007283 "$P_CLI request_size=16384 force_version=tls1 etm=0 recsplit=0 \
7284 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7285 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007286 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007287
Hanno Becker32c55012017-11-10 08:42:54 +00007288requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007289run_test "Large client packet TLS 1.0 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007290 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01007291 "$P_CLI request_size=16384 force_version=tls1 recsplit=0 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007292 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007293 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007294 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7295 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007296
Hanno Becker32c55012017-11-10 08:42:54 +00007297requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007298run_test "Large client packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007299 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007300 "$P_CLI request_size=16384 force_version=tls1 etm=0 recsplit=0 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007301 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007302 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007303 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007304
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007305run_test "Large client packet TLS 1.0 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01007306 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007307 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007308 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7309 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007310 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007311
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007312run_test "Large client packet TLS 1.0 StreamCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007313 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7314 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007315 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007316 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007317 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007318
7319requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007320run_test "Large client packet TLS 1.0 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007321 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007322 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007323 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007324 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007325 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007326
Hanno Becker278fc7a2017-11-10 09:16:28 +00007327requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007328run_test "Large client packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007329 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007330 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007331 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007332 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007333 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7334 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007335
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007336run_test "Large client packet TLS 1.1 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007337 "$P_SRV" \
7338 "$P_CLI request_size=16384 force_version=tls1_1 \
7339 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7340 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007341 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7342 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007343
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007344run_test "Large client packet TLS 1.1 BlockCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007345 "$P_SRV" \
7346 "$P_CLI request_size=16384 force_version=tls1_1 etm=0 \
7347 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007348 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007349 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007350
Hanno Becker32c55012017-11-10 08:42:54 +00007351requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007352run_test "Large client packet TLS 1.1 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007353 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007354 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007355 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007356 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007357 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007358
Hanno Becker32c55012017-11-10 08:42:54 +00007359requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007360run_test "Large client packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007361 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007362 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007363 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007364 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007365 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007366
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007367run_test "Large client packet TLS 1.1 StreamCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007368 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7369 "$P_CLI request_size=16384 force_version=tls1_1 \
7370 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7371 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007372 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7373 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007374
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007375run_test "Large client packet TLS 1.1 StreamCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007376 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007377 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007378 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007379 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007380 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7381 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007382
Hanno Becker278fc7a2017-11-10 09:16:28 +00007383requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007384run_test "Large client packet TLS 1.1 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007385 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007386 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007387 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007388 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007389 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007390
Hanno Becker278fc7a2017-11-10 09:16:28 +00007391requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007392run_test "Large client packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007393 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007394 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007395 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007396 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007397 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7398 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007399
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007400run_test "Large client packet TLS 1.2 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007401 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007402 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007403 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7404 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007405 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7406 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007407
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007408run_test "Large client packet TLS 1.2 BlockCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007409 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007410 "$P_CLI request_size=16384 force_version=tls12 etm=0 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007411 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7412 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007413 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007414
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007415run_test "Large client packet TLS 1.2 BlockCipher larger MAC" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007416 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007417 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01007418 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007419 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007420 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7421 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007422
Hanno Becker32c55012017-11-10 08:42:54 +00007423requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007424run_test "Large client packet TLS 1.2 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007425 "$P_SRV trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007426 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007427 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007428 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007429 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007430
Hanno Becker278fc7a2017-11-10 09:16:28 +00007431requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007432run_test "Large client packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007433 "$P_SRV trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007434 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007435 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007436 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007437 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7438 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007439
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007440run_test "Large client packet TLS 1.2 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01007441 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007442 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007443 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7444 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007445 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7446 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007447
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007448run_test "Large client packet TLS 1.2 StreamCipher, without EtM" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01007449 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007450 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007451 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7452 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007453 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007454
Hanno Becker32c55012017-11-10 08:42:54 +00007455requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007456run_test "Large client packet TLS 1.2 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007457 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007458 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007459 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007460 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007461 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007462
Hanno Becker278fc7a2017-11-10 09:16:28 +00007463requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007464run_test "Large client packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007465 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007466 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007467 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007468 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007469 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7470 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007471
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007472run_test "Large client packet TLS 1.2 AEAD" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007473 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007474 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007475 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
7476 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007477 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7478 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007479
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007480run_test "Large client packet TLS 1.2 AEAD shorter tag" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007481 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007482 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007483 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
7484 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007485 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7486 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007487
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007488# Test for large server packets
Yuto Takanoa49124e2021-07-08 15:56:33 +01007489# The tests below fail when the server's OUT_CONTENT_LEN is less than 16384.
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007490run_test "Large server packet SSLv3 StreamCipher" \
7491 "$P_SRV response_size=16384 min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7492 "$P_CLI force_version=ssl3 \
7493 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7494 0 \
7495 -c "Read from server: 16384 bytes read"
7496
Andrzej Kurek6a4f2242018-08-27 08:00:13 -04007497# Checking next 4 tests logs for 1n-1 split against BEAST too
Andrzej Kurek6a4f2242018-08-27 08:00:13 -04007498run_test "Large server packet SSLv3 BlockCipher" \
7499 "$P_SRV response_size=16384 min_version=ssl3" \
7500 "$P_CLI force_version=ssl3 recsplit=0 \
7501 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7502 0 \
7503 -c "Read from server: 1 bytes read"\
7504 -c "16383 bytes read"\
7505 -C "Read from server: 16384 bytes read"
7506
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007507run_test "Large server packet TLS 1.0 BlockCipher" \
7508 "$P_SRV response_size=16384" \
7509 "$P_CLI force_version=tls1 recsplit=0 \
7510 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7511 0 \
7512 -c "Read from server: 1 bytes read"\
7513 -c "16383 bytes read"\
7514 -C "Read from server: 16384 bytes read"
7515
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007516run_test "Large server packet TLS 1.0 BlockCipher, without EtM" \
7517 "$P_SRV response_size=16384" \
7518 "$P_CLI force_version=tls1 etm=0 recsplit=0 \
7519 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7520 0 \
7521 -c "Read from server: 1 bytes read"\
7522 -c "16383 bytes read"\
7523 -C "Read from server: 16384 bytes read"
7524
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007525requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7526run_test "Large server packet TLS 1.0 BlockCipher truncated MAC" \
7527 "$P_SRV response_size=16384" \
7528 "$P_CLI force_version=tls1 recsplit=0 \
7529 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
7530 trunc_hmac=1" \
7531 0 \
7532 -c "Read from server: 1 bytes read"\
7533 -c "16383 bytes read"\
7534 -C "Read from server: 16384 bytes read"
7535
7536requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7537run_test "Large server packet TLS 1.0 StreamCipher truncated MAC" \
7538 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7539 "$P_CLI force_version=tls1 \
7540 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
7541 trunc_hmac=1" \
7542 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007543 -s "16384 bytes written in 1 fragments" \
7544 -c "Read from server: 16384 bytes read"
7545
7546run_test "Large server packet TLS 1.0 StreamCipher" \
7547 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7548 "$P_CLI force_version=tls1 \
7549 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7550 0 \
7551 -s "16384 bytes written in 1 fragments" \
7552 -c "Read from server: 16384 bytes read"
7553
7554run_test "Large server packet TLS 1.0 StreamCipher, without EtM" \
7555 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7556 "$P_CLI force_version=tls1 \
7557 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7558 0 \
7559 -s "16384 bytes written in 1 fragments" \
7560 -c "Read from server: 16384 bytes read"
7561
7562requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7563run_test "Large server packet TLS 1.0 StreamCipher, truncated MAC" \
7564 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7565 "$P_CLI force_version=tls1 \
7566 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7567 0 \
7568 -s "16384 bytes written in 1 fragments" \
7569 -c "Read from server: 16384 bytes read"
7570
7571requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7572run_test "Large server packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
7573 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7574 "$P_CLI force_version=tls1 \
7575 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7576 0 \
7577 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007578 -c "Read from server: 16384 bytes read"
7579
7580run_test "Large server packet TLS 1.1 BlockCipher" \
7581 "$P_SRV response_size=16384" \
7582 "$P_CLI force_version=tls1_1 \
7583 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7584 0 \
7585 -c "Read from server: 16384 bytes read"
7586
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007587run_test "Large server packet TLS 1.1 BlockCipher, without EtM" \
7588 "$P_SRV response_size=16384" \
7589 "$P_CLI force_version=tls1_1 etm=0 \
7590 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007591 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007592 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007593 -c "Read from server: 16384 bytes read"
7594
7595requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7596run_test "Large server packet TLS 1.1 BlockCipher truncated MAC" \
7597 "$P_SRV response_size=16384" \
7598 "$P_CLI force_version=tls1_1 \
7599 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
7600 trunc_hmac=1" \
7601 0 \
7602 -c "Read from server: 16384 bytes read"
7603
7604requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007605run_test "Large server packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
7606 "$P_SRV response_size=16384 trunc_hmac=1" \
7607 "$P_CLI force_version=tls1_1 \
7608 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
7609 0 \
7610 -s "16384 bytes written in 1 fragments" \
7611 -c "Read from server: 16384 bytes read"
7612
7613run_test "Large server packet TLS 1.1 StreamCipher" \
7614 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7615 "$P_CLI force_version=tls1_1 \
7616 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7617 0 \
7618 -c "Read from server: 16384 bytes read"
7619
7620run_test "Large server packet TLS 1.1 StreamCipher, without EtM" \
7621 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7622 "$P_CLI force_version=tls1_1 \
7623 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7624 0 \
7625 -s "16384 bytes written in 1 fragments" \
7626 -c "Read from server: 16384 bytes read"
7627
7628requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007629run_test "Large server packet TLS 1.1 StreamCipher truncated MAC" \
7630 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7631 "$P_CLI force_version=tls1_1 \
7632 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
7633 trunc_hmac=1" \
7634 0 \
7635 -c "Read from server: 16384 bytes read"
7636
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007637run_test "Large server packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
7638 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7639 "$P_CLI force_version=tls1_1 \
7640 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7641 0 \
7642 -s "16384 bytes written in 1 fragments" \
7643 -c "Read from server: 16384 bytes read"
7644
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007645run_test "Large server packet TLS 1.2 BlockCipher" \
7646 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007647 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007648 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7649 0 \
7650 -c "Read from server: 16384 bytes read"
7651
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007652run_test "Large server packet TLS 1.2 BlockCipher, without EtM" \
7653 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007654 "$P_CLI force_version=tls12 etm=0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007655 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7656 0 \
7657 -s "16384 bytes written in 1 fragments" \
7658 -c "Read from server: 16384 bytes read"
7659
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007660run_test "Large server packet TLS 1.2 BlockCipher larger MAC" \
7661 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007662 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007663 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
7664 0 \
7665 -c "Read from server: 16384 bytes read"
7666
7667requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7668run_test "Large server packet TLS 1.2 BlockCipher truncated MAC" \
7669 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007670 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007671 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
7672 trunc_hmac=1" \
7673 0 \
7674 -c "Read from server: 16384 bytes read"
7675
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007676run_test "Large server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
7677 "$P_SRV response_size=16384 trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007678 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007679 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
7680 0 \
7681 -s "16384 bytes written in 1 fragments" \
7682 -c "Read from server: 16384 bytes read"
7683
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007684run_test "Large server packet TLS 1.2 StreamCipher" \
7685 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007686 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007687 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7688 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007689 -s "16384 bytes written in 1 fragments" \
7690 -c "Read from server: 16384 bytes read"
7691
7692run_test "Large server packet TLS 1.2 StreamCipher, without EtM" \
7693 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007694 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007695 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7696 0 \
7697 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007698 -c "Read from server: 16384 bytes read"
7699
7700requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7701run_test "Large server packet TLS 1.2 StreamCipher truncated MAC" \
7702 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007703 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007704 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
7705 trunc_hmac=1" \
7706 0 \
7707 -c "Read from server: 16384 bytes read"
7708
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007709requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7710run_test "Large server packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
7711 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007712 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007713 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7714 0 \
7715 -s "16384 bytes written in 1 fragments" \
7716 -c "Read from server: 16384 bytes read"
7717
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007718run_test "Large server packet TLS 1.2 AEAD" \
7719 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007720 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007721 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
7722 0 \
7723 -c "Read from server: 16384 bytes read"
7724
7725run_test "Large server packet TLS 1.2 AEAD shorter tag" \
7726 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007727 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007728 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
7729 0 \
7730 -c "Read from server: 16384 bytes read"
7731
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007732# Tests for restartable ECC
7733
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007734requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7735requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007736requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7737run_test "EC restart: TLS, default" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007738 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007739 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007740 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007741 debug_level=1" \
7742 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007743 -C "x509_verify_cert.*4b00" \
7744 -C "mbedtls_pk_verify.*4b00" \
7745 -C "mbedtls_ecdh_make_public.*4b00" \
7746 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007747
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007748requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7749requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007750requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7751run_test "EC restart: TLS, max_ops=0" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007752 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007753 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007754 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007755 debug_level=1 ec_max_ops=0" \
7756 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007757 -C "x509_verify_cert.*4b00" \
7758 -C "mbedtls_pk_verify.*4b00" \
7759 -C "mbedtls_ecdh_make_public.*4b00" \
7760 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007761
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007762requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7763requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007764requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7765run_test "EC restart: TLS, max_ops=65535" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007766 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007767 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007768 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007769 debug_level=1 ec_max_ops=65535" \
7770 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007771 -C "x509_verify_cert.*4b00" \
7772 -C "mbedtls_pk_verify.*4b00" \
7773 -C "mbedtls_ecdh_make_public.*4b00" \
7774 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007775
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007776requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7777requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007778requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7779run_test "EC restart: TLS, max_ops=1000" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007780 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007781 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007782 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007783 debug_level=1 ec_max_ops=1000" \
7784 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007785 -c "x509_verify_cert.*4b00" \
7786 -c "mbedtls_pk_verify.*4b00" \
7787 -c "mbedtls_ecdh_make_public.*4b00" \
7788 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007789
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007790requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7791requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007792requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007793run_test "EC restart: TLS, max_ops=1000, badsign" \
7794 "$P_SRV auth_mode=required \
7795 crt_file=data_files/server5-badsign.crt \
7796 key_file=data_files/server5.key" \
7797 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7798 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7799 debug_level=1 ec_max_ops=1000" \
7800 1 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007801 -c "x509_verify_cert.*4b00" \
7802 -C "mbedtls_pk_verify.*4b00" \
7803 -C "mbedtls_ecdh_make_public.*4b00" \
7804 -C "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007805 -c "! The certificate is not correctly signed by the trusted CA" \
7806 -c "! mbedtls_ssl_handshake returned" \
7807 -c "X509 - Certificate verification failed"
7808
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007809requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7810requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007811requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7812run_test "EC restart: TLS, max_ops=1000, auth_mode=optional badsign" \
7813 "$P_SRV auth_mode=required \
7814 crt_file=data_files/server5-badsign.crt \
7815 key_file=data_files/server5.key" \
7816 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7817 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7818 debug_level=1 ec_max_ops=1000 auth_mode=optional" \
7819 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007820 -c "x509_verify_cert.*4b00" \
7821 -c "mbedtls_pk_verify.*4b00" \
7822 -c "mbedtls_ecdh_make_public.*4b00" \
7823 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007824 -c "! The certificate is not correctly signed by the trusted CA" \
7825 -C "! mbedtls_ssl_handshake returned" \
7826 -C "X509 - Certificate verification failed"
7827
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007828requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7829requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007830requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7831run_test "EC restart: TLS, max_ops=1000, auth_mode=none badsign" \
7832 "$P_SRV auth_mode=required \
7833 crt_file=data_files/server5-badsign.crt \
7834 key_file=data_files/server5.key" \
7835 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7836 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7837 debug_level=1 ec_max_ops=1000 auth_mode=none" \
7838 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007839 -C "x509_verify_cert.*4b00" \
7840 -c "mbedtls_pk_verify.*4b00" \
7841 -c "mbedtls_ecdh_make_public.*4b00" \
7842 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007843 -C "! The certificate is not correctly signed by the trusted CA" \
7844 -C "! mbedtls_ssl_handshake returned" \
7845 -C "X509 - Certificate verification failed"
7846
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007847requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7848requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007849requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007850run_test "EC restart: DTLS, max_ops=1000" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007851 "$P_SRV auth_mode=required dtls=1" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007852 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007853 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007854 dtls=1 debug_level=1 ec_max_ops=1000" \
7855 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007856 -c "x509_verify_cert.*4b00" \
7857 -c "mbedtls_pk_verify.*4b00" \
7858 -c "mbedtls_ecdh_make_public.*4b00" \
7859 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007860
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007861requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7862requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02007863requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7864run_test "EC restart: TLS, max_ops=1000 no client auth" \
7865 "$P_SRV" \
7866 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7867 debug_level=1 ec_max_ops=1000" \
7868 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007869 -c "x509_verify_cert.*4b00" \
7870 -c "mbedtls_pk_verify.*4b00" \
7871 -c "mbedtls_ecdh_make_public.*4b00" \
7872 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02007873
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007874
7875# Restartable is only for ECDHE-ECDSA, with another ciphersuite we expect no
7876# restartable behaviour at all (not even client auth).
7877# This is the same as "EC restart: TLS, max_ops=1000" except with ECDHE-RSA,
7878# and all 4 assertions negated.
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02007879requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard875d1eb2022-12-06 10:42:44 +01007880requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
7881requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7882run_test "EC restart: TLS, max_ops=1000, ECDHE-RSA" \
7883 "$P_SRV curves=secp256r1 auth_mode=required" \
7884 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 \
7885 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7886 debug_level=1 ec_max_ops=1000" \
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02007887 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007888 -C "x509_verify_cert.*4b00" \
7889 -C "mbedtls_pk_verify.*4b00" \
7890 -C "mbedtls_ecdh_make_public.*4b00" \
7891 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02007892
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007893# Tests of asynchronous private key support in SSL
7894
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007895requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007896run_test "SSL async private: sign, delay=0" \
7897 "$P_SRV \
7898 async_operations=s async_private_delay1=0 async_private_delay2=0" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007899 "$P_CLI" \
7900 0 \
7901 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007902 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007903
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007904requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007905run_test "SSL async private: sign, delay=1" \
7906 "$P_SRV \
7907 async_operations=s async_private_delay1=1 async_private_delay2=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007908 "$P_CLI" \
7909 0 \
7910 -s "Async sign callback: using key slot " \
7911 -s "Async resume (slot [0-9]): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007912 -s "Async resume (slot [0-9]): sign done, status=0"
7913
Gilles Peskine12d0cc12018-04-26 15:06:56 +02007914requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
7915run_test "SSL async private: sign, delay=2" \
7916 "$P_SRV \
7917 async_operations=s async_private_delay1=2 async_private_delay2=2" \
7918 "$P_CLI" \
7919 0 \
7920 -s "Async sign callback: using key slot " \
7921 -U "Async sign callback: using key slot " \
7922 -s "Async resume (slot [0-9]): call 1 more times." \
7923 -s "Async resume (slot [0-9]): call 0 more times." \
7924 -s "Async resume (slot [0-9]): sign done, status=0"
7925
Gilles Peskined3268832018-04-26 06:23:59 +02007926# Test that the async callback correctly signs the 36-byte hash of TLS 1.0/1.1
7927# with RSA PKCS#1v1.5 as used in TLS 1.0/1.1.
7928requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskined3268832018-04-26 06:23:59 +02007929run_test "SSL async private: sign, RSA, TLS 1.1" \
7930 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt \
7931 async_operations=s async_private_delay1=0 async_private_delay2=0" \
7932 "$P_CLI force_version=tls1_1" \
7933 0 \
7934 -s "Async sign callback: using key slot " \
7935 -s "Async resume (slot [0-9]): sign done, status=0"
7936
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007937requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine807d74a2018-04-30 10:30:49 +02007938run_test "SSL async private: sign, SNI" \
7939 "$P_SRV debug_level=3 \
7940 async_operations=s async_private_delay1=0 async_private_delay2=0 \
7941 crt_file=data_files/server5.crt key_file=data_files/server5.key \
7942 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
7943 "$P_CLI server_name=polarssl.example" \
7944 0 \
7945 -s "Async sign callback: using key slot " \
7946 -s "Async resume (slot [0-9]): sign done, status=0" \
7947 -s "parse ServerName extension" \
7948 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
7949 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
7950
7951requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007952run_test "SSL async private: decrypt, delay=0" \
7953 "$P_SRV \
7954 async_operations=d async_private_delay1=0 async_private_delay2=0" \
7955 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7956 0 \
7957 -s "Async decrypt callback: using key slot " \
7958 -s "Async resume (slot [0-9]): decrypt done, status=0"
7959
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007960requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007961run_test "SSL async private: decrypt, delay=1" \
7962 "$P_SRV \
7963 async_operations=d async_private_delay1=1 async_private_delay2=1" \
7964 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7965 0 \
7966 -s "Async decrypt callback: using key slot " \
7967 -s "Async resume (slot [0-9]): call 0 more times." \
7968 -s "Async resume (slot [0-9]): decrypt done, status=0"
7969
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007970requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007971run_test "SSL async private: decrypt RSA-PSK, delay=0" \
7972 "$P_SRV psk=abc123 \
7973 async_operations=d async_private_delay1=0 async_private_delay2=0" \
7974 "$P_CLI psk=abc123 \
7975 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
7976 0 \
7977 -s "Async decrypt callback: using key slot " \
7978 -s "Async resume (slot [0-9]): decrypt done, status=0"
7979
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007980requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007981run_test "SSL async private: decrypt RSA-PSK, delay=1" \
7982 "$P_SRV psk=abc123 \
7983 async_operations=d async_private_delay1=1 async_private_delay2=1" \
7984 "$P_CLI psk=abc123 \
7985 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
7986 0 \
7987 -s "Async decrypt callback: using key slot " \
7988 -s "Async resume (slot [0-9]): call 0 more times." \
7989 -s "Async resume (slot [0-9]): decrypt done, status=0"
7990
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007991requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007992run_test "SSL async private: sign callback not present" \
7993 "$P_SRV \
7994 async_operations=d async_private_delay1=1 async_private_delay2=1" \
7995 "$P_CLI; [ \$? -eq 1 ] &&
7996 $P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7997 0 \
7998 -S "Async sign callback" \
7999 -s "! mbedtls_ssl_handshake returned" \
8000 -s "The own private key or pre-shared key is not set, but needed" \
8001 -s "Async resume (slot [0-9]): decrypt done, status=0" \
8002 -s "Successful connection"
8003
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008004requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008005run_test "SSL async private: decrypt callback not present" \
8006 "$P_SRV debug_level=1 \
8007 async_operations=s async_private_delay1=1 async_private_delay2=1" \
8008 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA;
8009 [ \$? -eq 1 ] && $P_CLI" \
8010 0 \
8011 -S "Async decrypt callback" \
8012 -s "! mbedtls_ssl_handshake returned" \
8013 -s "got no RSA private key" \
8014 -s "Async resume (slot [0-9]): sign done, status=0" \
8015 -s "Successful connection"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008016
8017# key1: ECDSA, key2: RSA; use key1 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008018requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008019run_test "SSL async private: slot 0 used with key1" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008020 "$P_SRV \
8021 async_operations=s async_private_delay1=1 \
8022 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8023 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008024 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
8025 0 \
8026 -s "Async sign callback: using key slot 0," \
8027 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008028 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008029
8030# key1: ECDSA, key2: RSA; use key2 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008031requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008032run_test "SSL async private: slot 0 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008033 "$P_SRV \
8034 async_operations=s async_private_delay2=1 \
8035 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8036 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008037 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8038 0 \
8039 -s "Async sign callback: using key slot 0," \
8040 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008041 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008042
8043# key1: ECDSA, key2: RSA; use key2 from slot 1
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008044requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinead28bf02018-04-26 00:19:16 +02008045run_test "SSL async private: slot 1 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008046 "$P_SRV \
Gilles Peskine168dae82018-04-25 23:35:42 +02008047 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008048 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8049 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008050 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8051 0 \
8052 -s "Async sign callback: using key slot 1," \
8053 -s "Async resume (slot 1): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008054 -s "Async resume (slot 1): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008055
8056# key1: ECDSA, key2: RSA; use key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008057requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008058run_test "SSL async private: fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008059 "$P_SRV \
8060 async_operations=s async_private_delay1=1 \
8061 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8062 key_file2=data_files/server2.key crt_file2=data_files/server2.crt " \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008063 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8064 0 \
8065 -s "Async sign callback: no key matches this certificate."
8066
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008067requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008068run_test "SSL async private: sign, error in start" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008069 "$P_SRV \
8070 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8071 async_private_error=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008072 "$P_CLI" \
8073 1 \
8074 -s "Async sign callback: injected error" \
8075 -S "Async resume" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02008076 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008077 -s "! mbedtls_ssl_handshake returned"
8078
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008079requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008080run_test "SSL async private: sign, cancel after start" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008081 "$P_SRV \
8082 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8083 async_private_error=2" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008084 "$P_CLI" \
8085 1 \
8086 -s "Async sign callback: using key slot " \
8087 -S "Async resume" \
8088 -s "Async cancel"
8089
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008090requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008091run_test "SSL async private: sign, error in resume" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008092 "$P_SRV \
8093 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8094 async_private_error=3" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008095 "$P_CLI" \
8096 1 \
8097 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008098 -s "Async resume callback: sign done but injected error" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02008099 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008100 -s "! mbedtls_ssl_handshake returned"
8101
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008102requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008103run_test "SSL async private: decrypt, error in start" \
8104 "$P_SRV \
8105 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8106 async_private_error=1" \
8107 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8108 1 \
8109 -s "Async decrypt callback: injected error" \
8110 -S "Async resume" \
8111 -S "Async cancel" \
8112 -s "! mbedtls_ssl_handshake returned"
8113
8114requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
8115run_test "SSL async private: decrypt, cancel after start" \
8116 "$P_SRV \
8117 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8118 async_private_error=2" \
8119 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8120 1 \
8121 -s "Async decrypt callback: using key slot " \
8122 -S "Async resume" \
8123 -s "Async cancel"
8124
8125requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
8126run_test "SSL async private: decrypt, error in resume" \
8127 "$P_SRV \
8128 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8129 async_private_error=3" \
8130 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8131 1 \
8132 -s "Async decrypt callback: using key slot " \
8133 -s "Async resume callback: decrypt done but injected error" \
8134 -S "Async cancel" \
8135 -s "! mbedtls_ssl_handshake returned"
8136
8137requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008138run_test "SSL async private: cancel after start then operate correctly" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008139 "$P_SRV \
8140 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8141 async_private_error=-2" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008142 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
8143 0 \
8144 -s "Async cancel" \
8145 -s "! mbedtls_ssl_handshake returned" \
8146 -s "Async resume" \
8147 -s "Successful connection"
8148
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008149requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008150run_test "SSL async private: error in resume then operate correctly" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008151 "$P_SRV \
8152 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8153 async_private_error=-3" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008154 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
8155 0 \
8156 -s "! mbedtls_ssl_handshake returned" \
8157 -s "Async resume" \
8158 -s "Successful connection"
8159
8160# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008161requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008162run_test "SSL async private: cancel after start then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008163 "$P_SRV \
8164 async_operations=s async_private_delay1=1 async_private_error=-2 \
8165 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8166 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008167 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
8168 [ \$? -eq 1 ] &&
8169 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8170 0 \
Gilles Peskinededa75a2018-04-30 10:02:45 +02008171 -s "Async sign callback: using key slot 0" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008172 -S "Async resume" \
8173 -s "Async cancel" \
8174 -s "! mbedtls_ssl_handshake returned" \
8175 -s "Async sign callback: no key matches this certificate." \
8176 -s "Successful connection"
8177
8178# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008179requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008180run_test "SSL async private: sign, error in resume then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008181 "$P_SRV \
8182 async_operations=s async_private_delay1=1 async_private_error=-3 \
8183 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8184 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008185 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
8186 [ \$? -eq 1 ] &&
8187 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8188 0 \
8189 -s "Async resume" \
8190 -s "! mbedtls_ssl_handshake returned" \
8191 -s "Async sign callback: no key matches this certificate." \
8192 -s "Successful connection"
8193
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008194requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008195requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008196run_test "SSL async private: renegotiation: client-initiated, sign" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008197 "$P_SRV \
8198 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008199 exchanges=2 renegotiation=1" \
8200 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1" \
8201 0 \
8202 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008203 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008204
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008205requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008206requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008207run_test "SSL async private: renegotiation: server-initiated, sign" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008208 "$P_SRV \
8209 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008210 exchanges=2 renegotiation=1 renegotiate=1" \
8211 "$P_CLI exchanges=2 renegotiation=1" \
8212 0 \
8213 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008214 -s "Async resume (slot [0-9]): sign done, status=0"
8215
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008216requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008217requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008218run_test "SSL async private: renegotiation: client-initiated, decrypt" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008219 "$P_SRV \
8220 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8221 exchanges=2 renegotiation=1" \
8222 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1 \
8223 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8224 0 \
8225 -s "Async decrypt callback: using key slot " \
8226 -s "Async resume (slot [0-9]): decrypt done, status=0"
8227
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008228requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008229requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008230run_test "SSL async private: renegotiation: server-initiated, decrypt" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008231 "$P_SRV \
8232 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8233 exchanges=2 renegotiation=1 renegotiate=1" \
8234 "$P_CLI exchanges=2 renegotiation=1 \
8235 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8236 0 \
8237 -s "Async decrypt callback: using key slot " \
8238 -s "Async resume (slot [0-9]): decrypt done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008239
Ron Eldor58093c82018-06-28 13:22:05 +03008240# Tests for ECC extensions (rfc 4492)
8241
Ron Eldor643df7c2018-06-28 16:17:00 +03008242requires_config_enabled MBEDTLS_AES_C
8243requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
8244requires_config_enabled MBEDTLS_SHA256_C
8245requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03008246run_test "Force a non ECC ciphersuite in the client side" \
8247 "$P_SRV debug_level=3" \
Ron Eldor643df7c2018-06-28 16:17:00 +03008248 "$P_CLI debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03008249 0 \
8250 -C "client hello, adding supported_elliptic_curves extension" \
8251 -C "client hello, adding supported_point_formats extension" \
8252 -S "found supported elliptic curves extension" \
8253 -S "found supported point formats extension"
8254
Ron Eldor643df7c2018-06-28 16:17:00 +03008255requires_config_enabled MBEDTLS_AES_C
8256requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
8257requires_config_enabled MBEDTLS_SHA256_C
8258requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03008259run_test "Force a non ECC ciphersuite in the server side" \
Ron Eldor643df7c2018-06-28 16:17:00 +03008260 "$P_SRV debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03008261 "$P_CLI debug_level=3" \
8262 0 \
8263 -C "found supported_point_formats extension" \
8264 -S "server hello, supported_point_formats extension"
8265
Ron Eldor643df7c2018-06-28 16:17:00 +03008266requires_config_enabled MBEDTLS_AES_C
8267requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
8268requires_config_enabled MBEDTLS_SHA256_C
8269requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03008270run_test "Force an ECC ciphersuite in the client side" \
8271 "$P_SRV debug_level=3" \
8272 "$P_CLI debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
8273 0 \
8274 -c "client hello, adding supported_elliptic_curves extension" \
8275 -c "client hello, adding supported_point_formats extension" \
8276 -s "found supported elliptic curves extension" \
8277 -s "found supported point formats extension"
8278
Ron Eldor643df7c2018-06-28 16:17:00 +03008279requires_config_enabled MBEDTLS_AES_C
8280requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
8281requires_config_enabled MBEDTLS_SHA256_C
8282requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03008283run_test "Force an ECC ciphersuite in the server side" \
8284 "$P_SRV debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
8285 "$P_CLI debug_level=3" \
8286 0 \
8287 -c "found supported_point_formats extension" \
8288 -s "server hello, supported_point_formats extension"
8289
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008290# Tests for DTLS HelloVerifyRequest
8291
8292run_test "DTLS cookie: enabled" \
8293 "$P_SRV dtls=1 debug_level=2" \
8294 "$P_CLI dtls=1 debug_level=2" \
8295 0 \
8296 -s "cookie verification failed" \
8297 -s "cookie verification passed" \
8298 -S "cookie verification skipped" \
8299 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008300 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008301 -S "SSL - The requested feature is not available"
8302
8303run_test "DTLS cookie: disabled" \
8304 "$P_SRV dtls=1 debug_level=2 cookies=0" \
8305 "$P_CLI dtls=1 debug_level=2" \
8306 0 \
8307 -S "cookie verification failed" \
8308 -S "cookie verification passed" \
8309 -s "cookie verification skipped" \
8310 -C "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008311 -S "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008312 -S "SSL - The requested feature is not available"
8313
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008314run_test "DTLS cookie: default (failing)" \
8315 "$P_SRV dtls=1 debug_level=2 cookies=-1" \
8316 "$P_CLI dtls=1 debug_level=2 hs_timeout=100-400" \
8317 1 \
8318 -s "cookie verification failed" \
8319 -S "cookie verification passed" \
8320 -S "cookie verification skipped" \
8321 -C "received hello verify request" \
8322 -S "hello verification requested" \
8323 -s "SSL - The requested feature is not available"
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008324
8325requires_ipv6
8326run_test "DTLS cookie: enabled, IPv6" \
8327 "$P_SRV dtls=1 debug_level=2 server_addr=::1" \
8328 "$P_CLI dtls=1 debug_level=2 server_addr=::1" \
8329 0 \
8330 -s "cookie verification failed" \
8331 -s "cookie verification passed" \
8332 -S "cookie verification skipped" \
8333 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008334 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008335 -S "SSL - The requested feature is not available"
8336
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02008337run_test "DTLS cookie: enabled, nbio" \
8338 "$P_SRV dtls=1 nbio=2 debug_level=2" \
8339 "$P_CLI dtls=1 nbio=2 debug_level=2" \
8340 0 \
8341 -s "cookie verification failed" \
8342 -s "cookie verification passed" \
8343 -S "cookie verification skipped" \
8344 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008345 -s "hello verification requested" \
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02008346 -S "SSL - The requested feature is not available"
8347
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008348# Tests for client reconnecting from the same port with DTLS
8349
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008350not_with_valgrind # spurious resend
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008351run_test "DTLS client reconnect from same port: reference" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +02008352 "$P_SRV dtls=1 exchanges=2 read_timeout=20000 hs_timeout=10000-20000" \
8353 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008354 0 \
8355 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008356 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008357 -S "Client initiated reconnection from same port"
8358
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008359not_with_valgrind # spurious resend
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008360run_test "DTLS client reconnect from same port: reconnect" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +02008361 "$P_SRV dtls=1 exchanges=2 read_timeout=20000 hs_timeout=10000-20000" \
8362 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=10000-20000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008363 0 \
8364 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008365 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008366 -s "Client initiated reconnection from same port"
8367
Paul Bakker362689d2016-05-13 10:33:25 +01008368not_with_valgrind # server/client too slow to respond in time (next test has higher timeouts)
8369run_test "DTLS client reconnect from same port: reconnect, nbio, no valgrind" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008370 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 nbio=2" \
8371 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008372 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008373 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008374 -s "Client initiated reconnection from same port"
8375
Paul Bakker362689d2016-05-13 10:33:25 +01008376only_with_valgrind # Only with valgrind, do previous test but with higher read_timeout and hs_timeout
8377run_test "DTLS client reconnect from same port: reconnect, nbio, valgrind" \
8378 "$P_SRV dtls=1 exchanges=2 read_timeout=2000 nbio=2 hs_timeout=1500-6000" \
8379 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=1500-3000 reconnect_hard=1" \
8380 0 \
8381 -S "The operation timed out" \
8382 -s "Client initiated reconnection from same port"
8383
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008384run_test "DTLS client reconnect from same port: no cookies" \
8385 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 cookies=0" \
Manuel Pégourié-Gonnard6ad23b92015-09-15 12:57:46 +02008386 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-8000 reconnect_hard=1" \
8387 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008388 -s "The operation timed out" \
8389 -S "Client initiated reconnection from same port"
8390
Manuel Pégourié-Gonnardbaad2de2020-03-13 11:11:02 +01008391run_test "DTLS client reconnect from same port: attacker-injected" \
8392 -p "$P_PXY inject_clihlo=1" \
8393 "$P_SRV dtls=1 exchanges=2 debug_level=1" \
8394 "$P_CLI dtls=1 exchanges=2" \
8395 0 \
8396 -s "possible client reconnect from the same port" \
8397 -S "Client initiated reconnection from same port"
8398
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02008399# Tests for various cases of client authentication with DTLS
8400# (focused on handshake flows and message parsing)
8401
8402run_test "DTLS client auth: required" \
8403 "$P_SRV dtls=1 auth_mode=required" \
8404 "$P_CLI dtls=1" \
8405 0 \
8406 -s "Verifying peer X.509 certificate... ok"
8407
8408run_test "DTLS client auth: optional, client has no cert" \
8409 "$P_SRV dtls=1 auth_mode=optional" \
8410 "$P_CLI dtls=1 crt_file=none key_file=none" \
8411 0 \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01008412 -s "! Certificate was missing"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02008413
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01008414run_test "DTLS client auth: none, client has no cert" \
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02008415 "$P_SRV dtls=1 auth_mode=none" \
8416 "$P_CLI dtls=1 crt_file=none key_file=none debug_level=2" \
8417 0 \
8418 -c "skip write certificate$" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01008419 -s "! Certificate verification was skipped"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02008420
Manuel Pégourié-Gonnard0a885742015-08-04 12:08:35 +02008421run_test "DTLS wrong PSK: badmac alert" \
8422 "$P_SRV dtls=1 psk=abc123 force_ciphersuite=TLS-PSK-WITH-AES-128-GCM-SHA256" \
8423 "$P_CLI dtls=1 psk=abc124" \
8424 1 \
8425 -s "SSL - Verification of the message MAC failed" \
8426 -c "SSL - A fatal alert message was received from our peer"
8427
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02008428# Tests for receiving fragmented handshake messages with DTLS
8429
8430requires_gnutls
8431run_test "DTLS reassembly: no fragmentation (gnutls server)" \
8432 "$G_SRV -u --mtu 2048 -a" \
8433 "$P_CLI dtls=1 debug_level=2" \
8434 0 \
8435 -C "found fragmented DTLS handshake message" \
8436 -C "error"
8437
8438requires_gnutls
8439run_test "DTLS reassembly: some fragmentation (gnutls server)" \
8440 "$G_SRV -u --mtu 512" \
8441 "$P_CLI dtls=1 debug_level=2" \
8442 0 \
8443 -c "found fragmented DTLS handshake message" \
8444 -C "error"
8445
8446requires_gnutls
8447run_test "DTLS reassembly: more fragmentation (gnutls server)" \
8448 "$G_SRV -u --mtu 128" \
8449 "$P_CLI dtls=1 debug_level=2" \
8450 0 \
8451 -c "found fragmented DTLS handshake message" \
8452 -C "error"
8453
8454requires_gnutls
8455run_test "DTLS reassembly: more fragmentation, nbio (gnutls server)" \
8456 "$G_SRV -u --mtu 128" \
8457 "$P_CLI dtls=1 nbio=2 debug_level=2" \
8458 0 \
8459 -c "found fragmented DTLS handshake message" \
8460 -C "error"
8461
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008462requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01008463requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008464run_test "DTLS reassembly: fragmentation, renego (gnutls server)" \
8465 "$G_SRV -u --mtu 256" \
8466 "$P_CLI debug_level=3 dtls=1 renegotiation=1 renegotiate=1" \
8467 0 \
8468 -c "found fragmented DTLS handshake message" \
8469 -c "client hello, adding renegotiation extension" \
8470 -c "found renegotiation extension" \
8471 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008472 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008473 -C "error" \
8474 -s "Extra-header:"
8475
8476requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01008477requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008478run_test "DTLS reassembly: fragmentation, nbio, renego (gnutls server)" \
8479 "$G_SRV -u --mtu 256" \
8480 "$P_CLI debug_level=3 nbio=2 dtls=1 renegotiation=1 renegotiate=1" \
8481 0 \
8482 -c "found fragmented DTLS handshake message" \
8483 -c "client hello, adding renegotiation extension" \
8484 -c "found renegotiation extension" \
8485 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008486 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008487 -C "error" \
8488 -s "Extra-header:"
8489
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02008490run_test "DTLS reassembly: no fragmentation (openssl server)" \
8491 "$O_SRV -dtls1 -mtu 2048" \
8492 "$P_CLI dtls=1 debug_level=2" \
8493 0 \
8494 -C "found fragmented DTLS handshake message" \
8495 -C "error"
8496
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008497run_test "DTLS reassembly: some fragmentation (openssl server)" \
8498 "$O_SRV -dtls1 -mtu 768" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +02008499 "$P_CLI dtls=1 debug_level=2" \
8500 0 \
8501 -c "found fragmented DTLS handshake message" \
8502 -C "error"
8503
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008504run_test "DTLS reassembly: more fragmentation (openssl server)" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +02008505 "$O_SRV -dtls1 -mtu 256" \
8506 "$P_CLI dtls=1 debug_level=2" \
8507 0 \
8508 -c "found fragmented DTLS handshake message" \
8509 -C "error"
8510
8511run_test "DTLS reassembly: fragmentation, nbio (openssl server)" \
8512 "$O_SRV -dtls1 -mtu 256" \
8513 "$P_CLI dtls=1 nbio=2 debug_level=2" \
8514 0 \
8515 -c "found fragmented DTLS handshake message" \
8516 -C "error"
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02008517
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008518# Tests for sending fragmented handshake messages with DTLS
8519#
8520# Use client auth when we need the client to send large messages,
8521# and use large cert chains on both sides too (the long chains we have all use
8522# both RSA and ECDSA, but ideally we should have long chains with either).
8523# Sizes reached (UDP payload):
8524# - 2037B for server certificate
8525# - 1542B for client certificate
8526# - 1013B for newsessionticket
8527# - all others below 512B
8528# All those tests assume MAX_CONTENT_LEN is at least 2048
8529
8530requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8531requires_config_enabled MBEDTLS_RSA_C
8532requires_config_enabled MBEDTLS_ECDSA_C
8533requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008534requires_max_content_len 4096
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008535run_test "DTLS fragmenting: none (for reference)" \
8536 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8537 crt_file=data_files/server7_int-ca.crt \
8538 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008539 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008540 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008541 "$P_CLI dtls=1 debug_level=2 \
8542 crt_file=data_files/server8_int-ca2.crt \
8543 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008544 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008545 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008546 0 \
8547 -S "found fragmented DTLS handshake message" \
8548 -C "found fragmented DTLS handshake message" \
8549 -C "error"
8550
8551requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8552requires_config_enabled MBEDTLS_RSA_C
8553requires_config_enabled MBEDTLS_ECDSA_C
8554requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008555requires_max_content_len 2048
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008556run_test "DTLS fragmenting: server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008557 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8558 crt_file=data_files/server7_int-ca.crt \
8559 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008560 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008561 max_frag_len=1024" \
8562 "$P_CLI dtls=1 debug_level=2 \
8563 crt_file=data_files/server8_int-ca2.crt \
8564 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008565 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008566 max_frag_len=2048" \
8567 0 \
8568 -S "found fragmented DTLS handshake message" \
8569 -c "found fragmented DTLS handshake message" \
8570 -C "error"
8571
Hanno Becker69ca0ad2018-08-24 12:11:35 +01008572# With the MFL extension, the server has no way of forcing
8573# the client to not exceed a certain MTU; hence, the following
8574# test can't be replicated with an MTU proxy such as the one
8575# `client-initiated, server only (max_frag_len)` below.
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008576requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8577requires_config_enabled MBEDTLS_RSA_C
8578requires_config_enabled MBEDTLS_ECDSA_C
8579requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008580requires_max_content_len 4096
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008581run_test "DTLS fragmenting: server only (more) (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008582 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8583 crt_file=data_files/server7_int-ca.crt \
8584 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008585 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008586 max_frag_len=512" \
8587 "$P_CLI dtls=1 debug_level=2 \
8588 crt_file=data_files/server8_int-ca2.crt \
8589 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008590 hs_timeout=2500-60000 \
Hanno Becker69ca0ad2018-08-24 12:11:35 +01008591 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008592 0 \
8593 -S "found fragmented DTLS handshake message" \
8594 -c "found fragmented DTLS handshake message" \
8595 -C "error"
8596
8597requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8598requires_config_enabled MBEDTLS_RSA_C
8599requires_config_enabled MBEDTLS_ECDSA_C
8600requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008601requires_max_content_len 2048
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008602run_test "DTLS fragmenting: client-initiated, server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008603 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
8604 crt_file=data_files/server7_int-ca.crt \
8605 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008606 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008607 max_frag_len=2048" \
8608 "$P_CLI dtls=1 debug_level=2 \
8609 crt_file=data_files/server8_int-ca2.crt \
8610 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008611 hs_timeout=2500-60000 \
8612 max_frag_len=1024" \
8613 0 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008614 -S "found fragmented DTLS handshake message" \
8615 -c "found fragmented DTLS handshake message" \
8616 -C "error"
8617
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008618# While not required by the standard defining the MFL extension
8619# (according to which it only applies to records, not to datagrams),
8620# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
8621# as otherwise there wouldn't be any means to communicate MTU restrictions
8622# to the peer.
8623# The next test checks that no datagrams significantly larger than the
8624# negotiated MFL are sent.
8625requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8626requires_config_enabled MBEDTLS_RSA_C
8627requires_config_enabled MBEDTLS_ECDSA_C
8628requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008629requires_max_content_len 2048
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008630run_test "DTLS fragmenting: client-initiated, server only (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04008631 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008632 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
8633 crt_file=data_files/server7_int-ca.crt \
8634 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008635 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008636 max_frag_len=2048" \
8637 "$P_CLI dtls=1 debug_level=2 \
8638 crt_file=data_files/server8_int-ca2.crt \
8639 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008640 hs_timeout=2500-60000 \
8641 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008642 0 \
8643 -S "found fragmented DTLS handshake message" \
8644 -c "found fragmented DTLS handshake message" \
8645 -C "error"
8646
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008647requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8648requires_config_enabled MBEDTLS_RSA_C
8649requires_config_enabled MBEDTLS_ECDSA_C
8650requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008651requires_max_content_len 2048
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008652run_test "DTLS fragmenting: client-initiated, both (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008653 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8654 crt_file=data_files/server7_int-ca.crt \
8655 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008656 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008657 max_frag_len=2048" \
8658 "$P_CLI dtls=1 debug_level=2 \
8659 crt_file=data_files/server8_int-ca2.crt \
8660 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008661 hs_timeout=2500-60000 \
8662 max_frag_len=1024" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008663 0 \
8664 -s "found fragmented DTLS handshake message" \
8665 -c "found fragmented DTLS handshake message" \
8666 -C "error"
8667
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008668# While not required by the standard defining the MFL extension
8669# (according to which it only applies to records, not to datagrams),
8670# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
8671# as otherwise there wouldn't be any means to communicate MTU restrictions
8672# to the peer.
8673# The next test checks that no datagrams significantly larger than the
8674# negotiated MFL are sent.
8675requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8676requires_config_enabled MBEDTLS_RSA_C
8677requires_config_enabled MBEDTLS_ECDSA_C
8678requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008679requires_max_content_len 2048
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008680run_test "DTLS fragmenting: client-initiated, both (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04008681 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008682 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8683 crt_file=data_files/server7_int-ca.crt \
8684 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008685 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008686 max_frag_len=2048" \
8687 "$P_CLI dtls=1 debug_level=2 \
8688 crt_file=data_files/server8_int-ca2.crt \
8689 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008690 hs_timeout=2500-60000 \
8691 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008692 0 \
8693 -s "found fragmented DTLS handshake message" \
8694 -c "found fragmented DTLS handshake message" \
8695 -C "error"
8696
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008697requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8698requires_config_enabled MBEDTLS_RSA_C
8699requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008700requires_max_content_len 4096
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008701run_test "DTLS fragmenting: none (for reference) (MTU)" \
8702 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8703 crt_file=data_files/server7_int-ca.crt \
8704 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008705 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008706 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008707 "$P_CLI dtls=1 debug_level=2 \
8708 crt_file=data_files/server8_int-ca2.crt \
8709 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008710 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008711 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008712 0 \
8713 -S "found fragmented DTLS handshake message" \
8714 -C "found fragmented DTLS handshake message" \
8715 -C "error"
8716
8717requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8718requires_config_enabled MBEDTLS_RSA_C
8719requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008720requires_max_content_len 4096
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008721run_test "DTLS fragmenting: client (MTU)" \
8722 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8723 crt_file=data_files/server7_int-ca.crt \
8724 key_file=data_files/server7.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008725 hs_timeout=3500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008726 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008727 "$P_CLI dtls=1 debug_level=2 \
8728 crt_file=data_files/server8_int-ca2.crt \
8729 key_file=data_files/server8.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008730 hs_timeout=3500-60000 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008731 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008732 0 \
8733 -s "found fragmented DTLS handshake message" \
8734 -C "found fragmented DTLS handshake message" \
8735 -C "error"
8736
8737requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8738requires_config_enabled MBEDTLS_RSA_C
8739requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008740requires_max_content_len 2048
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008741run_test "DTLS fragmenting: server (MTU)" \
8742 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8743 crt_file=data_files/server7_int-ca.crt \
8744 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008745 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008746 mtu=512" \
8747 "$P_CLI dtls=1 debug_level=2 \
8748 crt_file=data_files/server8_int-ca2.crt \
8749 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008750 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008751 mtu=2048" \
8752 0 \
8753 -S "found fragmented DTLS handshake message" \
8754 -c "found fragmented DTLS handshake message" \
8755 -C "error"
8756
8757requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8758requires_config_enabled MBEDTLS_RSA_C
8759requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008760requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008761run_test "DTLS fragmenting: both (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008762 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008763 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8764 crt_file=data_files/server7_int-ca.crt \
8765 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008766 hs_timeout=2500-60000 \
Andrzej Kurek95805282018-10-11 08:55:37 -04008767 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008768 "$P_CLI dtls=1 debug_level=2 \
8769 crt_file=data_files/server8_int-ca2.crt \
8770 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008771 hs_timeout=2500-60000 \
8772 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008773 0 \
8774 -s "found fragmented DTLS handshake message" \
8775 -c "found fragmented DTLS handshake message" \
8776 -C "error"
8777
Andrzej Kurek77826052018-10-11 07:34:08 -04008778# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04008779requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8780requires_config_enabled MBEDTLS_RSA_C
8781requires_config_enabled MBEDTLS_ECDSA_C
8782requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008783requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008784requires_config_enabled MBEDTLS_AES_C
8785requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008786requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008787run_test "DTLS fragmenting: both (MTU=512)" \
Hanno Becker8d832182018-03-15 10:14:19 +00008788 -p "$P_PXY mtu=512" \
Hanno Becker72a4f032017-11-15 16:39:20 +00008789 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8790 crt_file=data_files/server7_int-ca.crt \
8791 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008792 hs_timeout=2500-60000 \
Hanno Becker72a4f032017-11-15 16:39:20 +00008793 mtu=512" \
8794 "$P_CLI dtls=1 debug_level=2 \
8795 crt_file=data_files/server8_int-ca2.crt \
8796 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008797 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8798 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008799 mtu=512" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02008800 0 \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02008801 -s "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008802 -c "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008803 -C "error"
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02008804
Andrzej Kurek7311c782018-10-11 06:49:41 -04008805# Test for automatic MTU reduction on repeated resend.
Andrzej Kurek77826052018-10-11 07:34:08 -04008806# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04008807# The ratio of max/min timeout should ideally equal 4 to accept two
8808# retransmissions, but in some cases (like both the server and client using
8809# fragmentation and auto-reduction) an extra retransmission might occur,
8810# hence the ratio of 8.
Hanno Becker37029eb2018-08-29 17:01:40 +01008811not_with_valgrind
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02008812requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8813requires_config_enabled MBEDTLS_RSA_C
8814requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008815requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008816requires_config_enabled MBEDTLS_AES_C
8817requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008818requires_max_content_len 2048
Gilles Peskine0d8b86a2019-09-20 18:03:11 +02008819run_test "DTLS fragmenting: proxy MTU: auto-reduction (not valgrind)" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02008820 -p "$P_PXY mtu=508" \
8821 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8822 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008823 key_file=data_files/server7.key \
8824 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02008825 "$P_CLI dtls=1 debug_level=2 \
8826 crt_file=data_files/server8_int-ca2.crt \
8827 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008828 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8829 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02008830 0 \
8831 -s "found fragmented DTLS handshake message" \
8832 -c "found fragmented DTLS handshake message" \
8833 -C "error"
8834
Andrzej Kurek77826052018-10-11 07:34:08 -04008835# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Hanno Becker108992e2018-08-29 17:04:18 +01008836only_with_valgrind
8837requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8838requires_config_enabled MBEDTLS_RSA_C
8839requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008840requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008841requires_config_enabled MBEDTLS_AES_C
8842requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008843requires_max_content_len 2048
Gilles Peskine0d8b86a2019-09-20 18:03:11 +02008844run_test "DTLS fragmenting: proxy MTU: auto-reduction (with valgrind)" \
Hanno Becker108992e2018-08-29 17:04:18 +01008845 -p "$P_PXY mtu=508" \
8846 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8847 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008848 key_file=data_files/server7.key \
Hanno Becker108992e2018-08-29 17:04:18 +01008849 hs_timeout=250-10000" \
8850 "$P_CLI dtls=1 debug_level=2 \
8851 crt_file=data_files/server8_int-ca2.crt \
8852 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008853 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Hanno Becker108992e2018-08-29 17:04:18 +01008854 hs_timeout=250-10000" \
8855 0 \
8856 -s "found fragmented DTLS handshake message" \
8857 -c "found fragmented DTLS handshake message" \
8858 -C "error"
8859
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008860# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
Manuel Pégourié-Gonnard3d183ce2018-08-22 09:56:22 +02008861# OTOH the client might resend if the server is to slow to reset after sending
8862# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008863not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008864requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8865requires_config_enabled MBEDTLS_RSA_C
8866requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008867requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008868run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008869 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008870 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8871 crt_file=data_files/server7_int-ca.crt \
8872 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008873 hs_timeout=10000-60000 \
8874 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008875 "$P_CLI dtls=1 debug_level=2 \
8876 crt_file=data_files/server8_int-ca2.crt \
8877 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008878 hs_timeout=10000-60000 \
8879 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008880 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008881 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008882 -s "found fragmented DTLS handshake message" \
8883 -c "found fragmented DTLS handshake message" \
8884 -C "error"
8885
Andrzej Kurek77826052018-10-11 07:34:08 -04008886# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04008887# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
8888# OTOH the client might resend if the server is to slow to reset after sending
8889# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008890not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008891requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8892requires_config_enabled MBEDTLS_RSA_C
8893requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008894requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008895requires_config_enabled MBEDTLS_AES_C
8896requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008897requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008898run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=512)" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008899 -p "$P_PXY mtu=512" \
8900 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8901 crt_file=data_files/server7_int-ca.crt \
8902 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008903 hs_timeout=10000-60000 \
8904 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008905 "$P_CLI dtls=1 debug_level=2 \
8906 crt_file=data_files/server8_int-ca2.crt \
8907 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008908 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8909 hs_timeout=10000-60000 \
8910 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008911 0 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008912 -S "autoreduction" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008913 -s "found fragmented DTLS handshake message" \
8914 -c "found fragmented DTLS handshake message" \
8915 -C "error"
8916
Andrzej Kurek7311c782018-10-11 06:49:41 -04008917not_with_valgrind # spurious autoreduction due to timeout
8918requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8919requires_config_enabled MBEDTLS_RSA_C
8920requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008921requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008922run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008923 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008924 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8925 crt_file=data_files/server7_int-ca.crt \
8926 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008927 hs_timeout=10000-60000 \
8928 mtu=1024 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008929 "$P_CLI dtls=1 debug_level=2 \
8930 crt_file=data_files/server8_int-ca2.crt \
8931 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008932 hs_timeout=10000-60000 \
8933 mtu=1024 nbio=2" \
8934 0 \
8935 -S "autoreduction" \
8936 -s "found fragmented DTLS handshake message" \
8937 -c "found fragmented DTLS handshake message" \
8938 -C "error"
8939
Andrzej Kurek77826052018-10-11 07:34:08 -04008940# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04008941not_with_valgrind # spurious autoreduction due to timeout
8942requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8943requires_config_enabled MBEDTLS_RSA_C
8944requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008945requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008946requires_config_enabled MBEDTLS_AES_C
8947requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008948requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008949run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=512)" \
8950 -p "$P_PXY mtu=512" \
8951 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8952 crt_file=data_files/server7_int-ca.crt \
8953 key_file=data_files/server7.key \
8954 hs_timeout=10000-60000 \
8955 mtu=512 nbio=2" \
8956 "$P_CLI dtls=1 debug_level=2 \
8957 crt_file=data_files/server8_int-ca2.crt \
8958 key_file=data_files/server8.key \
8959 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8960 hs_timeout=10000-60000 \
8961 mtu=512 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008962 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008963 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008964 -s "found fragmented DTLS handshake message" \
8965 -c "found fragmented DTLS handshake message" \
8966 -C "error"
8967
Andrzej Kurek77826052018-10-11 07:34:08 -04008968# Forcing ciphersuite for this test to fit the MTU of 1450 with full config.
Hanno Beckerb841b4f2018-08-28 10:25:51 +01008969# This ensures things still work after session_reset().
8970# It also exercises the "resumed handshake" flow.
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008971# Since we don't support reading fragmented ClientHello yet,
8972# up the MTU to 1450 (larger than ClientHello with session ticket,
8973# but still smaller than client's Certificate to ensure fragmentation).
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008974# An autoreduction on the client-side might happen if the server is
8975# slow to reset, therefore omitting '-C "autoreduction"' below.
Manuel Pégourié-Gonnard2f2d9022018-08-21 12:17:54 +02008976# reco_delay avoids races where the client reconnects before the server has
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008977# resumed listening, which would result in a spurious autoreduction.
8978not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008979requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8980requires_config_enabled MBEDTLS_RSA_C
8981requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008982requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008983requires_config_enabled MBEDTLS_AES_C
8984requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008985requires_max_content_len 2048
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008986run_test "DTLS fragmenting: proxy MTU, resumed handshake" \
8987 -p "$P_PXY mtu=1450" \
8988 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8989 crt_file=data_files/server7_int-ca.crt \
8990 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008991 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008992 mtu=1450" \
8993 "$P_CLI dtls=1 debug_level=2 \
8994 crt_file=data_files/server8_int-ca2.crt \
8995 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008996 hs_timeout=10000-60000 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008997 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01008998 mtu=1450 reconnect=1 skip_close_notify=1 reco_delay=1" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008999 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009000 -S "autoreduction" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02009001 -s "found fragmented DTLS handshake message" \
9002 -c "found fragmented DTLS handshake message" \
9003 -C "error"
9004
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009005# An autoreduction on the client-side might happen if the server is
9006# slow to reset, therefore omitting '-C "autoreduction"' below.
9007not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009008requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9009requires_config_enabled MBEDTLS_RSA_C
9010requires_config_enabled MBEDTLS_ECDSA_C
9011requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009012requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009013requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9014requires_config_enabled MBEDTLS_CHACHAPOLY_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01009015requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009016run_test "DTLS fragmenting: proxy MTU, ChachaPoly renego" \
9017 -p "$P_PXY mtu=512" \
9018 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9019 crt_file=data_files/server7_int-ca.crt \
9020 key_file=data_files/server7.key \
9021 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009022 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009023 mtu=512" \
9024 "$P_CLI dtls=1 debug_level=2 \
9025 crt_file=data_files/server8_int-ca2.crt \
9026 key_file=data_files/server8.key \
9027 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009028 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009029 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009030 mtu=512" \
9031 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009032 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009033 -s "found fragmented DTLS handshake message" \
9034 -c "found fragmented DTLS handshake message" \
9035 -C "error"
9036
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009037# An autoreduction on the client-side might happen if the server is
9038# slow to reset, therefore omitting '-C "autoreduction"' below.
9039not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009040requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9041requires_config_enabled MBEDTLS_RSA_C
9042requires_config_enabled MBEDTLS_ECDSA_C
9043requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009044requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009045requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9046requires_config_enabled MBEDTLS_AES_C
9047requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01009048requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009049run_test "DTLS fragmenting: proxy MTU, AES-GCM renego" \
9050 -p "$P_PXY mtu=512" \
9051 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9052 crt_file=data_files/server7_int-ca.crt \
9053 key_file=data_files/server7.key \
9054 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009055 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009056 mtu=512" \
9057 "$P_CLI dtls=1 debug_level=2 \
9058 crt_file=data_files/server8_int-ca2.crt \
9059 key_file=data_files/server8.key \
9060 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009061 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009062 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009063 mtu=512" \
9064 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009065 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009066 -s "found fragmented DTLS handshake message" \
9067 -c "found fragmented DTLS handshake message" \
9068 -C "error"
9069
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009070# An autoreduction on the client-side might happen if the server is
9071# slow to reset, therefore omitting '-C "autoreduction"' below.
9072not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009073requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9074requires_config_enabled MBEDTLS_RSA_C
9075requires_config_enabled MBEDTLS_ECDSA_C
9076requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009077requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009078requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9079requires_config_enabled MBEDTLS_AES_C
9080requires_config_enabled MBEDTLS_CCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01009081requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009082run_test "DTLS fragmenting: proxy MTU, AES-CCM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009083 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009084 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9085 crt_file=data_files/server7_int-ca.crt \
9086 key_file=data_files/server7.key \
9087 exchanges=2 renegotiation=1 \
9088 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009089 hs_timeout=10000-60000 \
9090 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009091 "$P_CLI dtls=1 debug_level=2 \
9092 crt_file=data_files/server8_int-ca2.crt \
9093 key_file=data_files/server8.key \
9094 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009095 hs_timeout=10000-60000 \
9096 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009097 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009098 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009099 -s "found fragmented DTLS handshake message" \
9100 -c "found fragmented DTLS handshake message" \
9101 -C "error"
9102
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009103# An autoreduction on the client-side might happen if the server is
9104# slow to reset, therefore omitting '-C "autoreduction"' below.
9105not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009106requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9107requires_config_enabled MBEDTLS_RSA_C
9108requires_config_enabled MBEDTLS_ECDSA_C
9109requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009110requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009111requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9112requires_config_enabled MBEDTLS_AES_C
9113requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
9114requires_config_enabled MBEDTLS_SSL_ENCRYPT_THEN_MAC
Yuto Takanoa49124e2021-07-08 15:56:33 +01009115requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009116run_test "DTLS fragmenting: proxy MTU, AES-CBC EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009117 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009118 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9119 crt_file=data_files/server7_int-ca.crt \
9120 key_file=data_files/server7.key \
9121 exchanges=2 renegotiation=1 \
9122 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009123 hs_timeout=10000-60000 \
9124 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009125 "$P_CLI dtls=1 debug_level=2 \
9126 crt_file=data_files/server8_int-ca2.crt \
9127 key_file=data_files/server8.key \
9128 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009129 hs_timeout=10000-60000 \
9130 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009131 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009132 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009133 -s "found fragmented DTLS handshake message" \
9134 -c "found fragmented DTLS handshake message" \
9135 -C "error"
9136
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009137# An autoreduction on the client-side might happen if the server is
9138# slow to reset, therefore omitting '-C "autoreduction"' below.
9139not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009140requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9141requires_config_enabled MBEDTLS_RSA_C
9142requires_config_enabled MBEDTLS_ECDSA_C
9143requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009144requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009145requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9146requires_config_enabled MBEDTLS_AES_C
9147requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
Yuto Takanoa49124e2021-07-08 15:56:33 +01009148requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009149run_test "DTLS fragmenting: proxy MTU, AES-CBC non-EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009150 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009151 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9152 crt_file=data_files/server7_int-ca.crt \
9153 key_file=data_files/server7.key \
9154 exchanges=2 renegotiation=1 \
9155 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 etm=0 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009156 hs_timeout=10000-60000 \
9157 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009158 "$P_CLI dtls=1 debug_level=2 \
9159 crt_file=data_files/server8_int-ca2.crt \
9160 key_file=data_files/server8.key \
9161 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009162 hs_timeout=10000-60000 \
9163 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009164 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009165 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009166 -s "found fragmented DTLS handshake message" \
9167 -c "found fragmented DTLS handshake message" \
9168 -C "error"
9169
Andrzej Kurek77826052018-10-11 07:34:08 -04009170# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009171requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9172requires_config_enabled MBEDTLS_RSA_C
9173requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009174requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04009175requires_config_enabled MBEDTLS_AES_C
9176requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009177client_needs_more_time 2
Yuto Takanoa49124e2021-07-08 15:56:33 +01009178requires_max_content_len 2048
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009179run_test "DTLS fragmenting: proxy MTU + 3d" \
9180 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009181 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 auth_mode=required \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009182 crt_file=data_files/server7_int-ca.crt \
9183 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009184 hs_timeout=250-10000 mtu=512" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009185 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009186 crt_file=data_files/server8_int-ca2.crt \
9187 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009188 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009189 hs_timeout=250-10000 mtu=512" \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009190 0 \
9191 -s "found fragmented DTLS handshake message" \
9192 -c "found fragmented DTLS handshake message" \
9193 -C "error"
9194
Andrzej Kurek77826052018-10-11 07:34:08 -04009195# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009196requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9197requires_config_enabled MBEDTLS_RSA_C
9198requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009199requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04009200requires_config_enabled MBEDTLS_AES_C
9201requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009202client_needs_more_time 2
Yuto Takanoa49124e2021-07-08 15:56:33 +01009203requires_max_content_len 2048
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009204run_test "DTLS fragmenting: proxy MTU + 3d, nbio" \
9205 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
9206 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9207 crt_file=data_files/server7_int-ca.crt \
9208 key_file=data_files/server7.key \
9209 hs_timeout=250-10000 mtu=512 nbio=2" \
9210 "$P_CLI dtls=1 debug_level=2 \
9211 crt_file=data_files/server8_int-ca2.crt \
9212 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009213 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009214 hs_timeout=250-10000 mtu=512 nbio=2" \
9215 0 \
9216 -s "found fragmented DTLS handshake message" \
9217 -c "found fragmented DTLS handshake message" \
9218 -C "error"
9219
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009220# interop tests for DTLS fragmentating with reliable connection
9221#
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009222# here and below we just want to test that the we fragment in a way that
9223# pleases other implementations, so we don't need the peer to fragment
9224requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9225requires_config_enabled MBEDTLS_RSA_C
9226requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02009227requires_gnutls
Yuto Takanoa49124e2021-07-08 15:56:33 +01009228requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009229run_test "DTLS fragmenting: gnutls server, DTLS 1.2" \
9230 "$G_SRV -u" \
9231 "$P_CLI dtls=1 debug_level=2 \
9232 crt_file=data_files/server8_int-ca2.crt \
9233 key_file=data_files/server8.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009234 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009235 0 \
9236 -c "fragmenting handshake message" \
9237 -C "error"
9238
9239requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9240requires_config_enabled MBEDTLS_RSA_C
9241requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02009242requires_gnutls
Yuto Takano75ab9282021-07-26 08:27:47 +01009243requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009244run_test "DTLS fragmenting: gnutls server, DTLS 1.0" \
9245 "$G_SRV -u" \
9246 "$P_CLI dtls=1 debug_level=2 \
9247 crt_file=data_files/server8_int-ca2.crt \
9248 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009249 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009250 0 \
9251 -c "fragmenting handshake message" \
9252 -C "error"
9253
Hanno Beckerb9a00862018-08-28 10:20:22 +01009254# We use --insecure for the GnuTLS client because it expects
9255# the hostname / IP it connects to to be the name used in the
9256# certificate obtained from the server. Here, however, it
9257# connects to 127.0.0.1 while our test certificates use 'localhost'
9258# as the server name in the certificate. This will make the
Shaun Case0e7791f2021-12-20 21:14:10 -08009259# certificate validation fail, but passing --insecure makes
Hanno Beckerb9a00862018-08-28 10:20:22 +01009260# GnuTLS continue the connection nonetheless.
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009261requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9262requires_config_enabled MBEDTLS_RSA_C
9263requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02009264requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -04009265requires_not_i686
Yuto Takanoa49124e2021-07-08 15:56:33 +01009266requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009267run_test "DTLS fragmenting: gnutls client, DTLS 1.2" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009268 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009269 crt_file=data_files/server7_int-ca.crt \
9270 key_file=data_files/server7.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009271 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009272 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009273 0 \
9274 -s "fragmenting handshake message"
9275
Hanno Beckerb9a00862018-08-28 10:20:22 +01009276# See previous test for the reason to use --insecure
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009277requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9278requires_config_enabled MBEDTLS_RSA_C
9279requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02009280requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -04009281requires_not_i686
Yuto Takano75ab9282021-07-26 08:27:47 +01009282requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009283run_test "DTLS fragmenting: gnutls client, DTLS 1.0" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009284 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009285 crt_file=data_files/server7_int-ca.crt \
9286 key_file=data_files/server7.key \
9287 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009288 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009289 0 \
9290 -s "fragmenting handshake message"
9291
9292requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9293requires_config_enabled MBEDTLS_RSA_C
9294requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01009295requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009296run_test "DTLS fragmenting: openssl server, DTLS 1.2" \
9297 "$O_SRV -dtls1_2 -verify 10" \
9298 "$P_CLI dtls=1 debug_level=2 \
9299 crt_file=data_files/server8_int-ca2.crt \
9300 key_file=data_files/server8.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009301 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009302 0 \
9303 -c "fragmenting handshake message" \
9304 -C "error"
9305
9306requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9307requires_config_enabled MBEDTLS_RSA_C
9308requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takano75ab9282021-07-26 08:27:47 +01009309requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009310run_test "DTLS fragmenting: openssl server, DTLS 1.0" \
9311 "$O_SRV -dtls1 -verify 10" \
9312 "$P_CLI dtls=1 debug_level=2 \
9313 crt_file=data_files/server8_int-ca2.crt \
9314 key_file=data_files/server8.key \
9315 mtu=512 force_version=dtls1" \
9316 0 \
9317 -c "fragmenting handshake message" \
9318 -C "error"
9319
9320requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9321requires_config_enabled MBEDTLS_RSA_C
9322requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01009323requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009324run_test "DTLS fragmenting: openssl client, DTLS 1.2" \
9325 "$P_SRV dtls=1 debug_level=2 \
9326 crt_file=data_files/server7_int-ca.crt \
9327 key_file=data_files/server7.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009328 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009329 "$O_CLI -dtls1_2" \
9330 0 \
9331 -s "fragmenting handshake message"
9332
9333requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9334requires_config_enabled MBEDTLS_RSA_C
9335requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takano75ab9282021-07-26 08:27:47 +01009336requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009337run_test "DTLS fragmenting: openssl client, DTLS 1.0" \
9338 "$P_SRV dtls=1 debug_level=2 \
9339 crt_file=data_files/server7_int-ca.crt \
9340 key_file=data_files/server7.key \
9341 mtu=512 force_version=dtls1" \
9342 "$O_CLI -dtls1" \
9343 0 \
9344 -s "fragmenting handshake message"
9345
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009346# interop tests for DTLS fragmentating with unreliable connection
9347#
9348# again we just want to test that the we fragment in a way that
9349# pleases other implementations, so we don't need the peer to fragment
9350requires_gnutls_next
9351requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9352requires_config_enabled MBEDTLS_RSA_C
9353requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009354client_needs_more_time 4
Yuto Takanoa49124e2021-07-08 15:56:33 +01009355requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009356run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.2" \
9357 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9358 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009359 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009360 crt_file=data_files/server8_int-ca2.crt \
9361 key_file=data_files/server8.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009362 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009363 0 \
9364 -c "fragmenting handshake message" \
9365 -C "error"
9366
9367requires_gnutls_next
9368requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9369requires_config_enabled MBEDTLS_RSA_C
9370requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009371client_needs_more_time 4
Yuto Takano75ab9282021-07-26 08:27:47 +01009372requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009373run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.0" \
9374 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9375 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009376 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009377 crt_file=data_files/server8_int-ca2.crt \
9378 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009379 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009380 0 \
9381 -c "fragmenting handshake message" \
9382 -C "error"
9383
k-stachowiak17a38d32019-02-18 15:29:56 +01009384requires_gnutls_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009385requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9386requires_config_enabled MBEDTLS_RSA_C
9387requires_config_enabled MBEDTLS_ECDSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009388client_needs_more_time 4
Yuto Takanoa49124e2021-07-08 15:56:33 +01009389requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009390run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.2" \
9391 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9392 "$P_SRV dtls=1 debug_level=2 \
9393 crt_file=data_files/server7_int-ca.crt \
9394 key_file=data_files/server7.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009395 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
k-stachowiak17a38d32019-02-18 15:29:56 +01009396 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009397 0 \
9398 -s "fragmenting handshake message"
9399
k-stachowiak17a38d32019-02-18 15:29:56 +01009400requires_gnutls_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009401requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9402requires_config_enabled MBEDTLS_RSA_C
9403requires_config_enabled MBEDTLS_ECDSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009404client_needs_more_time 4
Yuto Takano75ab9282021-07-26 08:27:47 +01009405requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009406run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.0" \
9407 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9408 "$P_SRV dtls=1 debug_level=2 \
9409 crt_file=data_files/server7_int-ca.crt \
9410 key_file=data_files/server7.key \
9411 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
k-stachowiak17a38d32019-02-18 15:29:56 +01009412 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009413 0 \
9414 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009415
Zhangsen Wang1c981f52022-08-02 06:18:40 +00009416## The two tests below require 1.1.1a or higher version of openssl, otherwise
Zhangsen Wang7d0e6582022-06-29 07:33:35 +00009417## it might trigger a bug due to openssl (https://github.com/openssl/openssl/issues/6902)
9418requires_openssl_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009419requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9420requires_config_enabled MBEDTLS_RSA_C
9421requires_config_enabled MBEDTLS_ECDSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009422client_needs_more_time 4
Yuto Takanoa49124e2021-07-08 15:56:33 +01009423requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009424run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.2" \
9425 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Zhangsen Wang7d0e6582022-06-29 07:33:35 +00009426 "$O_NEXT_SRV -dtls1_2 -verify 10" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009427 "$P_CLI dtls=1 debug_level=2 \
9428 crt_file=data_files/server8_int-ca2.crt \
9429 key_file=data_files/server8.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009430 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009431 0 \
9432 -c "fragmenting handshake message" \
9433 -C "error"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009434
Zhangsen Wang7d0e6582022-06-29 07:33:35 +00009435requires_openssl_next
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009436requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9437requires_config_enabled MBEDTLS_RSA_C
9438requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009439client_needs_more_time 4
Yuto Takano75ab9282021-07-26 08:27:47 +01009440requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009441run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.0" \
9442 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Zhangsen Wang7d0e6582022-06-29 07:33:35 +00009443 "$O_NEXT_SRV -dtls1 -verify 10" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009444 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009445 crt_file=data_files/server8_int-ca2.crt \
9446 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009447 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009448 0 \
9449 -c "fragmenting handshake message" \
9450 -C "error"
9451
Zhangsen Wang1c981f52022-08-02 06:18:40 +00009452## the two tests below will time out with certain seed.
9453## The cause is an openssl bug (https://github.com/openssl/openssl/issues/18887)
9454skip_next_test
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009455requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9456requires_config_enabled MBEDTLS_RSA_C
9457requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009458client_needs_more_time 4
Yuto Takanoa49124e2021-07-08 15:56:33 +01009459requires_max_content_len 2048
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009460run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.2" \
9461 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9462 "$P_SRV dtls=1 debug_level=2 \
9463 crt_file=data_files/server7_int-ca.crt \
9464 key_file=data_files/server7.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009465 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009466 "$O_CLI -dtls1_2" \
9467 0 \
9468 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009469
9470# -nbio is added to prevent s_client from blocking in case of duplicated
9471# messages at the end of the handshake
Zhangsen Wang1c981f52022-08-02 06:18:40 +00009472skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009473requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9474requires_config_enabled MBEDTLS_RSA_C
9475requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009476client_needs_more_time 4
Yuto Takano75ab9282021-07-26 08:27:47 +01009477requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009478run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.0" \
9479 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009480 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009481 crt_file=data_files/server7_int-ca.crt \
9482 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009483 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009484 "$O_CLI -nbio -dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009485 0 \
9486 -s "fragmenting handshake message"
9487
Ron Eldorb4655392018-07-05 18:25:39 +03009488# Tests for DTLS-SRTP (RFC 5764)
9489requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9490run_test "DTLS-SRTP all profiles supported" \
9491 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9492 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9493 0 \
9494 -s "found use_srtp extension" \
9495 -s "found srtp profile" \
9496 -s "selected srtp profile" \
9497 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009498 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009499 -c "client hello, adding use_srtp extension" \
9500 -c "found use_srtp extension" \
9501 -c "found srtp profile" \
9502 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009503 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009504 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009505 -C "error"
9506
Johan Pascal9bc50b02020-09-24 12:01:13 +02009507
Ron Eldorb4655392018-07-05 18:25:39 +03009508requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9509run_test "DTLS-SRTP server supports all profiles. Client supports one profile." \
9510 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal43f94902020-09-22 12:25:52 +02009511 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=5 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +03009512 0 \
9513 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009514 -s "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
9515 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldorb4655392018-07-05 18:25:39 +03009516 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009517 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009518 -c "client hello, adding use_srtp extension" \
9519 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009520 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldorb4655392018-07-05 18:25:39 +03009521 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009522 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009523 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009524 -C "error"
9525
9526requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009527run_test "DTLS-SRTP server supports one profile. Client supports all profiles." \
Johan Pascal43f94902020-09-22 12:25:52 +02009528 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +03009529 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9530 0 \
9531 -s "found use_srtp extension" \
9532 -s "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009533 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009534 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009535 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009536 -c "client hello, adding use_srtp extension" \
9537 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009538 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009539 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009540 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009541 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009542 -C "error"
9543
9544requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9545run_test "DTLS-SRTP server and Client support only one matching profile." \
9546 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9547 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9548 0 \
9549 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009550 -s "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
9551 -s "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009552 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009553 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009554 -c "client hello, adding use_srtp extension" \
9555 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009556 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009557 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009558 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009559 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009560 -C "error"
9561
9562requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9563run_test "DTLS-SRTP server and Client support only one different profile." \
9564 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
Johan Pascal43f94902020-09-22 12:25:52 +02009565 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +03009566 0 \
9567 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009568 -s "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009569 -S "selected srtp profile" \
9570 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009571 -S "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009572 -c "client hello, adding use_srtp extension" \
9573 -C "found use_srtp extension" \
9574 -C "found srtp profile" \
9575 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009576 -C "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009577 -C "error"
9578
9579requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9580run_test "DTLS-SRTP server doesn't support use_srtp extension." \
9581 "$P_SRV dtls=1 debug_level=3" \
9582 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9583 0 \
9584 -s "found use_srtp extension" \
9585 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009586 -S "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009587 -c "client hello, adding use_srtp extension" \
9588 -C "found use_srtp extension" \
9589 -C "found srtp profile" \
9590 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009591 -C "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009592 -C "error"
9593
9594requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9595run_test "DTLS-SRTP all profiles supported. mki used" \
9596 "$P_SRV dtls=1 use_srtp=1 support_mki=1 debug_level=3" \
9597 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
9598 0 \
9599 -s "found use_srtp extension" \
9600 -s "found srtp profile" \
9601 -s "selected srtp profile" \
9602 -s "server hello, adding use_srtp extension" \
9603 -s "dumping 'using mki' (8 bytes)" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009604 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009605 -c "client hello, adding use_srtp extension" \
9606 -c "found use_srtp extension" \
9607 -c "found srtp profile" \
9608 -c "selected srtp profile" \
9609 -c "dumping 'sending mki' (8 bytes)" \
9610 -c "dumping 'received mki' (8 bytes)" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009611 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009612 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Johan Pascal20c7db32020-10-26 22:45:58 +01009613 -g "find_in_both '^ *DTLS-SRTP mki value: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009614 -C "error"
9615
9616requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9617run_test "DTLS-SRTP all profiles supported. server doesn't support mki." \
9618 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9619 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
9620 0 \
9621 -s "found use_srtp extension" \
9622 -s "found srtp profile" \
9623 -s "selected srtp profile" \
9624 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009625 -s "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +01009626 -s "DTLS-SRTP no mki value negotiated"\
Ron Eldorb4655392018-07-05 18:25:39 +03009627 -S "dumping 'using mki' (8 bytes)" \
9628 -c "client hello, adding use_srtp extension" \
9629 -c "found use_srtp extension" \
9630 -c "found srtp profile" \
9631 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009632 -c "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +01009633 -c "DTLS-SRTP no mki value negotiated"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009634 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009635 -c "dumping 'sending mki' (8 bytes)" \
9636 -C "dumping 'received mki' (8 bytes)" \
9637 -C "error"
9638
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009639requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9640run_test "DTLS-SRTP all profiles supported. openssl client." \
9641 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009642 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009643 0 \
9644 -s "found use_srtp extension" \
9645 -s "found srtp profile" \
9646 -s "selected srtp profile" \
9647 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009648 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009649 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009650 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_80"
9651
9652requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9653run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. openssl client." \
9654 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009655 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_32:SRTP_AES128_CM_SHA1_80 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009656 0 \
9657 -s "found use_srtp extension" \
9658 -s "found srtp profile" \
9659 -s "selected srtp profile" \
9660 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009661 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009662 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009663 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
9664
9665requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9666run_test "DTLS-SRTP server supports all profiles. Client supports one profile. openssl client." \
9667 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009668 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009669 0 \
9670 -s "found use_srtp extension" \
9671 -s "found srtp profile" \
9672 -s "selected srtp profile" \
9673 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009674 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009675 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009676 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
9677
9678requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9679run_test "DTLS-SRTP server supports one profile. Client supports all profiles. openssl client." \
9680 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009681 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009682 0 \
9683 -s "found use_srtp extension" \
9684 -s "found srtp profile" \
9685 -s "selected srtp profile" \
9686 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009687 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009688 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009689 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
9690
9691requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9692run_test "DTLS-SRTP server and Client support only one matching profile. openssl client." \
9693 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009694 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009695 0 \
9696 -s "found use_srtp extension" \
9697 -s "found srtp profile" \
9698 -s "selected srtp profile" \
9699 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009700 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009701 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009702 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
9703
9704requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9705run_test "DTLS-SRTP server and Client support only one different profile. openssl client." \
9706 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009707 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009708 0 \
9709 -s "found use_srtp extension" \
9710 -s "found srtp profile" \
9711 -S "selected srtp profile" \
9712 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009713 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009714 -C "SRTP Extension negotiated, profile"
9715
9716requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9717run_test "DTLS-SRTP server doesn't support use_srtp extension. openssl client" \
9718 "$P_SRV dtls=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009719 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009720 0 \
9721 -s "found use_srtp extension" \
9722 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009723 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009724 -C "SRTP Extension negotiated, profile"
9725
9726requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9727run_test "DTLS-SRTP all profiles supported. openssl server" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009728 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009729 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9730 0 \
9731 -c "client hello, adding use_srtp extension" \
9732 -c "found use_srtp extension" \
9733 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009734 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009735 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009736 -C "error"
9737
9738requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9739run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009740 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32:SRTP_AES128_CM_SHA1_80 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009741 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9742 0 \
9743 -c "client hello, adding use_srtp extension" \
9744 -c "found use_srtp extension" \
9745 -c "found srtp profile" \
9746 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009747 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009748 -C "error"
9749
9750requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9751run_test "DTLS-SRTP server supports all profiles. Client supports one profile. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009752 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009753 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9754 0 \
9755 -c "client hello, adding use_srtp extension" \
9756 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009757 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009758 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009759 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009760 -C "error"
9761
9762requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9763run_test "DTLS-SRTP server supports one profile. Client supports all profiles. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009764 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009765 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9766 0 \
9767 -c "client hello, adding use_srtp extension" \
9768 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009769 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009770 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009771 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009772 -C "error"
9773
9774requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9775run_test "DTLS-SRTP server and Client support only one matching profile. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009776 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009777 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9778 0 \
9779 -c "client hello, adding use_srtp extension" \
9780 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009781 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009782 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009783 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009784 -C "error"
9785
9786requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9787run_test "DTLS-SRTP server and Client support only one different profile. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009788 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Johan Pascal43f94902020-09-22 12:25:52 +02009789 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009790 0 \
9791 -c "client hello, adding use_srtp extension" \
9792 -C "found use_srtp extension" \
9793 -C "found srtp profile" \
9794 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009795 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009796 -C "error"
9797
9798requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9799run_test "DTLS-SRTP server doesn't support use_srtp extension. openssl server" \
9800 "$O_SRV -dtls1" \
9801 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9802 0 \
9803 -c "client hello, adding use_srtp extension" \
9804 -C "found use_srtp extension" \
9805 -C "found srtp profile" \
9806 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009807 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009808 -C "error"
9809
9810requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9811run_test "DTLS-SRTP all profiles supported. server doesn't support mki. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009812 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009813 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
9814 0 \
9815 -c "client hello, adding use_srtp extension" \
9816 -c "found use_srtp extension" \
9817 -c "found srtp profile" \
9818 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009819 -c "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +01009820 -c "DTLS-SRTP no mki value negotiated"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009821 -c "dumping 'sending mki' (8 bytes)" \
9822 -C "dumping 'received mki' (8 bytes)" \
9823 -C "error"
9824
9825requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009826requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009827run_test "DTLS-SRTP all profiles supported. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009828 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9829 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009830 0 \
9831 -s "found use_srtp extension" \
9832 -s "found srtp profile" \
9833 -s "selected srtp profile" \
9834 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009835 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009836 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_80"
9837
9838requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009839requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009840run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009841 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9842 "$G_CLI -u --srtp-profiles=SRTP_NULL_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009843 0 \
9844 -s "found use_srtp extension" \
9845 -s "found srtp profile" \
9846 -s "selected srtp profile" \
9847 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009848 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009849 -c "SRTP profile: SRTP_NULL_HMAC_SHA1_80"
9850
9851requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009852requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009853run_test "DTLS-SRTP server supports all profiles. Client supports one profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009854 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9855 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009856 0 \
9857 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009858 -s "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
9859 -s "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009860 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009861 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009862 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_32"
9863
9864requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009865requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009866run_test "DTLS-SRTP server supports one profile. Client supports all profiles. gnutls client." \
Johan Pascal43f94902020-09-22 12:25:52 +02009867 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor5d991c92019-01-15 18:54:03 +02009868 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009869 0 \
9870 -s "found use_srtp extension" \
9871 -s "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009872 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009873 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009874 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009875 -c "SRTP profile: SRTP_NULL_SHA1_32"
9876
9877requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009878requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009879run_test "DTLS-SRTP server and Client support only one matching profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009880 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9881 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009882 0 \
9883 -s "found use_srtp extension" \
9884 -s "found srtp profile" \
9885 -s "selected srtp profile" \
9886 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009887 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009888 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_32"
9889
9890requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009891requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009892run_test "DTLS-SRTP server and Client support only one different profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009893 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=1 debug_level=3" \
9894 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009895 0 \
9896 -s "found use_srtp extension" \
9897 -s "found srtp profile" \
9898 -S "selected srtp profile" \
9899 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009900 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009901 -C "SRTP profile:"
9902
9903requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009904requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009905run_test "DTLS-SRTP server doesn't support use_srtp extension. gnutls client" \
Ron Eldor5d991c92019-01-15 18:54:03 +02009906 "$P_SRV dtls=1 debug_level=3" \
9907 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009908 0 \
9909 -s "found use_srtp extension" \
9910 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009911 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009912 -C "SRTP profile:"
9913
9914requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009915requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009916run_test "DTLS-SRTP all profiles supported. gnutls server" \
9917 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
9918 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9919 0 \
9920 -c "client hello, adding use_srtp extension" \
9921 -c "found use_srtp extension" \
9922 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009923 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009924 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009925 -C "error"
9926
9927requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009928requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009929run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. gnutls server." \
9930 "$G_SRV -u --srtp-profiles=SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
9931 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9932 0 \
9933 -c "client hello, adding use_srtp extension" \
9934 -c "found use_srtp extension" \
9935 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009936 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009937 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009938 -C "error"
9939
9940requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009941requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009942run_test "DTLS-SRTP server supports all profiles. Client supports one profile. gnutls server." \
9943 "$G_SRV -u --srtp-profiles=SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
9944 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9945 0 \
9946 -c "client hello, adding use_srtp extension" \
9947 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009948 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009949 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009950 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009951 -C "error"
9952
9953requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009954requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009955run_test "DTLS-SRTP server supports one profile. Client supports all profiles. gnutls server." \
9956 "$G_SRV -u --srtp-profiles=SRTP_NULL_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009957 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009958 0 \
9959 -c "client hello, adding use_srtp extension" \
9960 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009961 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009962 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009963 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009964 -C "error"
9965
9966requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009967requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009968run_test "DTLS-SRTP server and Client support only one matching profile. gnutls server." \
9969 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32" \
9970 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9971 0 \
9972 -c "client hello, adding use_srtp extension" \
9973 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009974 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009975 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009976 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009977 -C "error"
9978
9979requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009980requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009981run_test "DTLS-SRTP server and Client support only one different profile. gnutls server." \
9982 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32" \
Johan Pascal43f94902020-09-22 12:25:52 +02009983 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009984 0 \
9985 -c "client hello, adding use_srtp extension" \
9986 -C "found use_srtp extension" \
9987 -C "found srtp profile" \
9988 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009989 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009990 -C "error"
9991
9992requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009993requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009994run_test "DTLS-SRTP server doesn't support use_srtp extension. gnutls server" \
9995 "$G_SRV -u" \
9996 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9997 0 \
9998 -c "client hello, adding use_srtp extension" \
9999 -C "found use_srtp extension" \
10000 -C "found srtp profile" \
10001 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010002 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010003 -C "error"
10004
10005requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010006requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010007run_test "DTLS-SRTP all profiles supported. mki used. gnutls server." \
10008 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
10009 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
10010 0 \
10011 -c "client hello, adding use_srtp extension" \
10012 -c "found use_srtp extension" \
10013 -c "found srtp profile" \
10014 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010015 -c "DTLS-SRTP key material is"\
Johan Pascal20c7db32020-10-26 22:45:58 +010010016 -c "DTLS-SRTP mki value:"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010017 -c "dumping 'sending mki' (8 bytes)" \
10018 -c "dumping 'received mki' (8 bytes)" \
10019 -C "error"
10020
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +020010021# Tests for specific things with "unreliable" UDP connection
10022
10023not_with_valgrind # spurious resend due to timeout
10024run_test "DTLS proxy: reference" \
10025 -p "$P_PXY" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +020010026 "$P_SRV dtls=1 debug_level=2 hs_timeout=10000-20000" \
10027 "$P_CLI dtls=1 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +020010028 0 \
10029 -C "replayed record" \
10030 -S "replayed record" \
Hanno Beckerb2a86c32019-07-19 15:43:09 +010010031 -C "Buffer record from epoch" \
10032 -S "Buffer record from epoch" \
10033 -C "ssl_buffer_message" \
10034 -S "ssl_buffer_message" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +020010035 -C "discarding invalid record" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010036 -S "discarding invalid record" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020010037 -S "resend" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010038 -s "Extra-header:" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020010039 -c "HTTP/1.0 200 OK"
10040
10041not_with_valgrind # spurious resend due to timeout
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010042run_test "DTLS proxy: duplicate every packet" \
10043 -p "$P_PXY duplicate=1" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +020010044 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 hs_timeout=10000-20000" \
10045 "$P_CLI dtls=1 dgram_packing=0 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010046 0 \
10047 -c "replayed record" \
10048 -s "replayed record" \
10049 -c "record from another epoch" \
10050 -s "record from another epoch" \
10051 -S "resend" \
10052 -s "Extra-header:" \
10053 -c "HTTP/1.0 200 OK"
10054
10055run_test "DTLS proxy: duplicate every packet, server anti-replay off" \
10056 -p "$P_PXY duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010057 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 anti_replay=0" \
10058 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020010059 0 \
10060 -c "replayed record" \
10061 -S "replayed record" \
10062 -c "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010063 -s "record from another epoch" \
10064 -c "resend" \
10065 -s "resend" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010066 -s "Extra-header:" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010067 -c "HTTP/1.0 200 OK"
10068
10069run_test "DTLS proxy: multiple records in same datagram" \
10070 -p "$P_PXY pack=50" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010071 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
10072 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020010073 0 \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010074 -c "next record in same datagram" \
10075 -s "next record in same datagram"
10076
10077run_test "DTLS proxy: multiple records in same datagram, duplicate every packet" \
10078 -p "$P_PXY pack=50 duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010079 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
10080 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010081 0 \
10082 -c "next record in same datagram" \
10083 -s "next record in same datagram"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010084
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010085run_test "DTLS proxy: inject invalid AD record, default badmac_limit" \
10086 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010087 "$P_SRV dtls=1 dgram_packing=0 debug_level=1" \
10088 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020010089 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010090 -c "discarding invalid record (mac)" \
10091 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010092 -s "Extra-header:" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010093 -c "HTTP/1.0 200 OK" \
10094 -S "too many records with bad MAC" \
10095 -S "Verification of the message MAC failed"
10096
10097run_test "DTLS proxy: inject invalid AD record, badmac_limit 1" \
10098 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010099 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=1" \
10100 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010101 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010102 -C "discarding invalid record (mac)" \
10103 -S "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010104 -S "Extra-header:" \
10105 -C "HTTP/1.0 200 OK" \
10106 -s "too many records with bad MAC" \
10107 -s "Verification of the message MAC failed"
10108
10109run_test "DTLS proxy: inject invalid AD record, badmac_limit 2" \
10110 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010111 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2" \
10112 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010113 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010114 -c "discarding invalid record (mac)" \
10115 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010116 -s "Extra-header:" \
10117 -c "HTTP/1.0 200 OK" \
10118 -S "too many records with bad MAC" \
10119 -S "Verification of the message MAC failed"
10120
10121run_test "DTLS proxy: inject invalid AD record, badmac_limit 2, exchanges 2"\
10122 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010123 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2 exchanges=2" \
10124 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100 exchanges=2" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010125 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010126 -c "discarding invalid record (mac)" \
10127 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010128 -s "Extra-header:" \
10129 -c "HTTP/1.0 200 OK" \
10130 -s "too many records with bad MAC" \
10131 -s "Verification of the message MAC failed"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010132
10133run_test "DTLS proxy: delay ChangeCipherSpec" \
10134 -p "$P_PXY delay_ccs=1" \
Hanno Beckerc4305232018-08-14 13:41:21 +010010135 "$P_SRV dtls=1 debug_level=1 dgram_packing=0" \
10136 "$P_CLI dtls=1 debug_level=1 dgram_packing=0" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010137 0 \
10138 -c "record from another epoch" \
10139 -s "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010140 -s "Extra-header:" \
10141 -c "HTTP/1.0 200 OK"
10142
Hanno Beckeraa5d0c42018-08-16 13:15:19 +010010143# Tests for reordering support with DTLS
10144
Gilles Peskine22cc6492022-03-14 18:21:24 +010010145requires_certificate_authentication
Hanno Becker56cdfd12018-08-17 13:42:15 +010010146run_test "DTLS reordering: Buffer out-of-order handshake message on client" \
10147 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010148 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10149 hs_timeout=2500-60000" \
10150 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10151 hs_timeout=2500-60000" \
Hanno Beckere3842212018-08-16 15:28:59 +010010152 0 \
10153 -c "Buffering HS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010154 -c "Next handshake message has been buffered - load"\
10155 -S "Buffering HS message" \
10156 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010157 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010158 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010159 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010160 -S "Remember CCS message"
Hanno Beckere3842212018-08-16 15:28:59 +010010161
Gilles Peskine22cc6492022-03-14 18:21:24 +010010162requires_certificate_authentication
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010163run_test "DTLS reordering: Buffer out-of-order handshake message fragment on client" \
10164 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010165 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10166 hs_timeout=2500-60000" \
10167 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10168 hs_timeout=2500-60000" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010169 0 \
10170 -c "Buffering HS message" \
10171 -c "found fragmented DTLS handshake message"\
10172 -c "Next handshake message 1 not or only partially bufffered" \
10173 -c "Next handshake message has been buffered - load"\
10174 -S "Buffering HS message" \
10175 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010176 -C "Injecting buffered CCS message" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010177 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010178 -S "Injecting buffered CCS message" \
Hanno Beckeraa5d0c42018-08-16 13:15:19 +010010179 -S "Remember CCS message"
10180
Hanno Beckera1adcca2018-08-24 14:41:07 +010010181# The client buffers the ServerKeyExchange before receiving the fragmented
10182# Certificate message; at the time of writing, together these are aroudn 1200b
10183# in size, so that the bound below ensures that the certificate can be reassembled
10184# while keeping the ServerKeyExchange.
Gilles Peskine22cc6492022-03-14 18:21:24 +010010185requires_certificate_authentication
Hanno Beckera1adcca2018-08-24 14:41:07 +010010186requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1300
10187run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next" \
Hanno Beckere3567052018-08-21 16:50:43 +010010188 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010189 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10190 hs_timeout=2500-60000" \
10191 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10192 hs_timeout=2500-60000" \
Hanno Beckere3567052018-08-21 16:50:43 +010010193 0 \
10194 -c "Buffering HS message" \
10195 -c "Next handshake message has been buffered - load"\
Hanno Beckera1adcca2018-08-24 14:41:07 +010010196 -C "attempt to make space by freeing buffered messages" \
10197 -S "Buffering HS message" \
10198 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010199 -C "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010200 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010201 -S "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010202 -S "Remember CCS message"
10203
10204# The size constraints ensure that the delayed certificate message can't
10205# be reassembled while keeping the ServerKeyExchange message, but it can
10206# when dropping it first.
Gilles Peskine22cc6492022-03-14 18:21:24 +010010207requires_certificate_authentication
Hanno Beckera1adcca2018-08-24 14:41:07 +010010208requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 900
10209requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1299
10210run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg" \
10211 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010212 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10213 hs_timeout=2500-60000" \
10214 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10215 hs_timeout=2500-60000" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010216 0 \
10217 -c "Buffering HS message" \
10218 -c "attempt to make space by freeing buffered future messages" \
10219 -c "Enough space available after freeing buffered HS messages" \
Hanno Beckere3567052018-08-21 16:50:43 +010010220 -S "Buffering HS message" \
10221 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010222 -C "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +010010223 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010224 -S "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +010010225 -S "Remember CCS message"
10226
Gilles Peskine22cc6492022-03-14 18:21:24 +010010227requires_certificate_authentication
Hanno Becker56cdfd12018-08-17 13:42:15 +010010228run_test "DTLS reordering: Buffer out-of-order handshake message on server" \
10229 -p "$P_PXY delay_cli=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010230 "$P_SRV dgram_packing=0 auth_mode=required cookies=0 dtls=1 debug_level=2 \
10231 hs_timeout=2500-60000" \
10232 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10233 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010234 0 \
10235 -C "Buffering HS message" \
10236 -C "Next handshake message has been buffered - load"\
10237 -s "Buffering HS message" \
10238 -s "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010239 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010240 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010241 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010242 -S "Remember CCS message"
10243
Gilles Peskine22cc6492022-03-14 18:21:24 +010010244requires_certificate_authentication
Hanno Becker56cdfd12018-08-17 13:42:15 +010010245run_test "DTLS reordering: Buffer out-of-order CCS message on client"\
10246 -p "$P_PXY delay_srv=NewSessionTicket" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010247 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10248 hs_timeout=2500-60000" \
10249 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10250 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010251 0 \
10252 -C "Buffering HS message" \
10253 -C "Next handshake message has been buffered - load"\
10254 -S "Buffering HS message" \
10255 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010256 -c "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010257 -c "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010258 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010259 -S "Remember CCS message"
10260
Gilles Peskine22cc6492022-03-14 18:21:24 +010010261requires_certificate_authentication
Hanno Becker56cdfd12018-08-17 13:42:15 +010010262run_test "DTLS reordering: Buffer out-of-order CCS message on server"\
10263 -p "$P_PXY delay_cli=ClientKeyExchange" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010264 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10265 hs_timeout=2500-60000" \
10266 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10267 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010268 0 \
10269 -C "Buffering HS message" \
10270 -C "Next handshake message has been buffered - load"\
10271 -S "Buffering HS message" \
10272 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010273 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010274 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010275 -s "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010276 -s "Remember CCS message"
10277
Hanno Beckera1adcca2018-08-24 14:41:07 +010010278run_test "DTLS reordering: Buffer encrypted Finished message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010279 -p "$P_PXY delay_ccs=1" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010280 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10281 hs_timeout=2500-60000" \
10282 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10283 hs_timeout=2500-60000" \
Hanno Beckerb34149c2018-08-16 15:29:06 +010010284 0 \
10285 -s "Buffer record from epoch 1" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010286 -s "Found buffered record from current epoch - load" \
10287 -c "Buffer record from epoch 1" \
10288 -c "Found buffered record from current epoch - load"
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010289
Hanno Beckera1adcca2018-08-24 14:41:07 +010010290# In this test, both the fragmented NewSessionTicket and the ChangeCipherSpec
10291# from the server are delayed, so that the encrypted Finished message
10292# is received and buffered. When the fragmented NewSessionTicket comes
10293# in afterwards, the encrypted Finished message must be freed in order
10294# to make space for the NewSessionTicket to be reassembled.
10295# This works only in very particular circumstances:
10296# - MBEDTLS_SSL_DTLS_MAX_BUFFERING must be large enough to allow buffering
10297# of the NewSessionTicket, but small enough to also allow buffering of
10298# the encrypted Finished message.
10299# - The MTU setting on the server must be so small that the NewSessionTicket
10300# needs to be fragmented.
10301# - All messages sent by the server must be small enough to be either sent
10302# without fragmentation or be reassembled within the bounds of
10303# MBEDTLS_SSL_DTLS_MAX_BUFFERING. Achieve this by testing with a PSK-based
10304# handshake, omitting CRTs.
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +020010305requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 190
10306requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 230
Hanno Beckera1adcca2018-08-24 14:41:07 +010010307run_test "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket" \
10308 -p "$P_PXY delay_srv=NewSessionTicket delay_srv=NewSessionTicket delay_ccs=1" \
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +020010309 "$P_SRV mtu=140 response_size=90 dgram_packing=0 psk=abc123 psk_identity=foo cookies=0 dtls=1 debug_level=2" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010310 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 psk=abc123 psk_identity=foo" \
10311 0 \
10312 -s "Buffer record from epoch 1" \
10313 -s "Found buffered record from current epoch - load" \
10314 -c "Buffer record from epoch 1" \
10315 -C "Found buffered record from current epoch - load" \
10316 -c "Enough space available after freeing future epoch record"
10317
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +020010318# Tests for "randomly unreliable connection": try a variety of flows and peers
10319
10320client_needs_more_time 2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010321run_test "DTLS proxy: 3d (drop, delay, duplicate), \"short\" PSK handshake" \
10322 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010323 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010324 psk=abc123" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010325 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010326 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10327 0 \
10328 -s "Extra-header:" \
10329 -c "HTTP/1.0 200 OK"
10330
Janos Follath74537a62016-09-02 13:45:28 +010010331client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010332run_test "DTLS proxy: 3d, \"short\" RSA handshake" \
10333 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010334 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
10335 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010336 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
10337 0 \
10338 -s "Extra-header:" \
10339 -c "HTTP/1.0 200 OK"
10340
Janos Follath74537a62016-09-02 13:45:28 +010010341client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010342run_test "DTLS proxy: 3d, \"short\" (no ticket, no cli_auth) FS handshake" \
10343 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010344 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
10345 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010346 0 \
10347 -s "Extra-header:" \
10348 -c "HTTP/1.0 200 OK"
10349
Janos Follath74537a62016-09-02 13:45:28 +010010350client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010351run_test "DTLS proxy: 3d, FS, client auth" \
10352 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010353 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=required" \
10354 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010355 0 \
10356 -s "Extra-header:" \
10357 -c "HTTP/1.0 200 OK"
10358
Janos Follath74537a62016-09-02 13:45:28 +010010359client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010360run_test "DTLS proxy: 3d, FS, ticket" \
10361 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010362 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=none" \
10363 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010364 0 \
10365 -s "Extra-header:" \
10366 -c "HTTP/1.0 200 OK"
10367
Janos Follath74537a62016-09-02 13:45:28 +010010368client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010369run_test "DTLS proxy: 3d, max handshake (FS, ticket + client auth)" \
10370 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010371 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=required" \
10372 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010373 0 \
10374 -s "Extra-header:" \
10375 -c "HTTP/1.0 200 OK"
10376
Janos Follath74537a62016-09-02 13:45:28 +010010377client_needs_more_time 2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010378run_test "DTLS proxy: 3d, max handshake, nbio" \
10379 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010380 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010381 auth_mode=required" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010382 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010383 0 \
10384 -s "Extra-header:" \
10385 -c "HTTP/1.0 200 OK"
10386
Janos Follath74537a62016-09-02 13:45:28 +010010387client_needs_more_time 4
Gilles Peskine111fde42022-02-25 19:51:52 +010010388requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020010389run_test "DTLS proxy: 3d, min handshake, resumption" \
10390 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010391 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020010392 psk=abc123 debug_level=3" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010393 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +010010394 debug_level=3 reconnect=1 skip_close_notify=1 read_timeout=1000 max_resend=10 \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020010395 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10396 0 \
10397 -s "a session has been resumed" \
10398 -c "a session has been resumed" \
10399 -s "Extra-header:" \
10400 -c "HTTP/1.0 200 OK"
10401
Janos Follath74537a62016-09-02 13:45:28 +010010402client_needs_more_time 4
Gilles Peskine111fde42022-02-25 19:51:52 +010010403requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020010404run_test "DTLS proxy: 3d, min handshake, resumption, nbio" \
10405 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010406 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020010407 psk=abc123 debug_level=3 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010408 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +010010409 debug_level=3 reconnect=1 skip_close_notify=1 read_timeout=1000 max_resend=10 \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020010410 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 nbio=2" \
10411 0 \
10412 -s "a session has been resumed" \
10413 -c "a session has been resumed" \
10414 -s "Extra-header:" \
10415 -c "HTTP/1.0 200 OK"
10416
Janos Follath74537a62016-09-02 13:45:28 +010010417client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010010418requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010419run_test "DTLS proxy: 3d, min handshake, client-initiated renego" \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +020010420 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010421 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010422 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010423 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010424 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +020010425 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10426 0 \
10427 -c "=> renegotiate" \
10428 -s "=> renegotiate" \
10429 -s "Extra-header:" \
10430 -c "HTTP/1.0 200 OK"
10431
Janos Follath74537a62016-09-02 13:45:28 +010010432client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010010433requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010434run_test "DTLS proxy: 3d, min handshake, client-initiated renego, nbio" \
10435 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010436 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010437 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010438 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010439 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010440 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10441 0 \
10442 -c "=> renegotiate" \
10443 -s "=> renegotiate" \
10444 -s "Extra-header:" \
10445 -c "HTTP/1.0 200 OK"
10446
Janos Follath74537a62016-09-02 13:45:28 +010010447client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010010448requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010449run_test "DTLS proxy: 3d, min handshake, server-initiated renego" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010450 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010451 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010452 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010453 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010454 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010455 renegotiation=1 exchanges=4 debug_level=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010456 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10457 0 \
10458 -c "=> renegotiate" \
10459 -s "=> renegotiate" \
10460 -s "Extra-header:" \
10461 -c "HTTP/1.0 200 OK"
10462
Janos Follath74537a62016-09-02 13:45:28 +010010463client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010010464requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010465run_test "DTLS proxy: 3d, min handshake, server-initiated renego, nbio" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010466 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010467 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010468 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010469 debug_level=2 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010470 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010471 renegotiation=1 exchanges=4 debug_level=2 nbio=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010472 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10473 0 \
10474 -c "=> renegotiate" \
10475 -s "=> renegotiate" \
10476 -s "Extra-header:" \
10477 -c "HTTP/1.0 200 OK"
10478
Zhangsen Wang7d0e6582022-06-29 07:33:35 +000010479## The three tests below require 1.1.1a or higher version of openssl, otherwise
10480## it might trigger a bug due to openssl (https://github.com/openssl/openssl/issues/6902)
10481requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010010482client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010483not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010484run_test "DTLS proxy: 3d, openssl server" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020010485 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Zhangsen Wang7d0e6582022-06-29 07:33:35 +000010486 "$O_NEXT_SRV -dtls1 -mtu 2048" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010487 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020010488 0 \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020010489 -c "HTTP/1.0 200 OK"
10490
Zhangsen Wang7d0e6582022-06-29 07:33:35 +000010491requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010010492client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010493not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010494run_test "DTLS proxy: 3d, openssl server, fragmentation" \
10495 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Zhangsen Wang7d0e6582022-06-29 07:33:35 +000010496 "$O_NEXT_SRV -dtls1 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010497 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010498 0 \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010499 -c "HTTP/1.0 200 OK"
10500
Zhangsen Wang7d0e6582022-06-29 07:33:35 +000010501requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010010502client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010503not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010504run_test "DTLS proxy: 3d, openssl server, fragmentation, nbio" \
10505 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Zhangsen Wang1c981f52022-08-02 06:18:40 +000010506 "$O_NEXT_SRV -dtls1 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010507 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2 tickets=0" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010508 0 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010509 -c "HTTP/1.0 200 OK"
10510
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +000010511requires_gnutls
Janos Follath74537a62016-09-02 13:45:28 +010010512client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010513not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010514run_test "DTLS proxy: 3d, gnutls server" \
10515 -p "$P_PXY drop=5 delay=5 duplicate=5" \
10516 "$G_SRV -u --mtu 2048 -a" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010517 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010518 0 \
10519 -s "Extra-header:" \
10520 -c "Extra-header:"
10521
k-stachowiak17a38d32019-02-18 15:29:56 +010010522requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +010010523client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010524not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010525run_test "DTLS proxy: 3d, gnutls server, fragmentation" \
10526 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +010010527 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010528 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010529 0 \
10530 -s "Extra-header:" \
10531 -c "Extra-header:"
10532
k-stachowiak17a38d32019-02-18 15:29:56 +010010533requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +010010534client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010535not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010536run_test "DTLS proxy: 3d, gnutls server, fragmentation, nbio" \
10537 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +010010538 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010539 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010540 0 \
10541 -s "Extra-header:" \
10542 -c "Extra-header:"
10543
Ron Eldorf75e2522019-05-14 20:38:49 +030010544requires_config_enabled MBEDTLS_SSL_EXPORT_KEYS
10545run_test "export keys functionality" \
10546 "$P_SRV eap_tls=1 debug_level=3" \
10547 "$P_CLI eap_tls=1 debug_level=3" \
10548 0 \
10549 -s "exported maclen is " \
10550 -s "exported keylen is " \
10551 -s "exported ivlen is " \
10552 -c "exported maclen is " \
10553 -c "exported keylen is " \
Ron Eldor65d8c262019-06-04 13:05:36 +030010554 -c "exported ivlen is " \
10555 -c "EAP-TLS key material is:"\
10556 -s "EAP-TLS key material is:"\
10557 -c "EAP-TLS IV is:" \
10558 -s "EAP-TLS IV is:"
Ron Eldorf75e2522019-05-14 20:38:49 +030010559
Piotr Nowicki0937ed22019-11-26 16:32:40 +010010560# Test heap memory usage after handshake
10561requires_config_enabled MBEDTLS_MEMORY_DEBUG
10562requires_config_enabled MBEDTLS_MEMORY_BUFFER_ALLOC_C
10563requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +010010564requires_max_content_len 16384
Piotr Nowicki0937ed22019-11-26 16:32:40 +010010565run_tests_memory_after_hanshake
10566
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +010010567# Final report
10568
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010010569echo "------------------------------------------------------------------------"
10570
10571if [ $FAILS = 0 ]; then
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +010010572 printf "PASSED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010010573else
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +010010574 printf "FAILED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010010575fi
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +020010576PASSES=$(( $TESTS - $FAILS ))
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +020010577echo " ($PASSES / $TESTS tests ($SKIPS skipped))"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010010578
10579exit $FAILS