TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / b7c12a466f50833b1445d3b8e95371d676b0384d / . / tests / opt-testcases / tls13-compat.sh
blob: 5a71d1c42b6e2fab255e0841ddab2ab68f4e5ea3 [file] [log] [blame]
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1#!/bin/sh
2
3# tls13-compat.sh
4#
5# Copyright The Mbed TLS Contributors
6# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
19#
20# Purpose
21#
22# List TLS1.3 compat test cases. They are generated by
23# `./tests/scripts/generate_tls13_compat_tests.py -a -o tests/opt-testcases/tls13-compat.sh`.
24#
25# PLEASE DO NOT EDIT THIS FILE. IF NEEDED, PLEASE MODIFY `generate_tls13_compat_tests.py`
26# AND REGENERATE THIS FILE.
27#
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]28requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]29requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]30requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
31requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
32requires_openssl_tls1_3
33run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]34 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
35 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]36 0 \
37 -s "Protocol is TLSv1.3" \
38 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
39 -s "received signature algorithm: 0x403" \
40 -s "got named group: secp256r1(0017)" \
41 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]42 -C "received HelloRetryRequest message"
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]43
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]44requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]45requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]46requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
47requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
48requires_openssl_tls1_3
49run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]50 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
51 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]52 0 \
53 -s "Protocol is TLSv1.3" \
54 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
55 -s "received signature algorithm: 0x503" \
56 -s "got named group: secp256r1(0017)" \
57 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]58 -C "received HelloRetryRequest message"
59
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]60requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]61requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]62requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
63requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
64requires_openssl_tls1_3
65run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]66 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
67 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]68 0 \
69 -s "Protocol is TLSv1.3" \
70 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
71 -s "received signature algorithm: 0x603" \
72 -s "got named group: secp256r1(0017)" \
73 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]74 -C "received HelloRetryRequest message"
75
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]76requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]77requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]78requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
79requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
80requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
81requires_openssl_tls1_3
82run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]83 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
84 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]85 0 \
86 -s "Protocol is TLSv1.3" \
87 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
88 -s "received signature algorithm: 0x804" \
89 -s "got named group: secp256r1(0017)" \
90 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]91 -C "received HelloRetryRequest message"
92
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]93requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]94requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]95requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
96requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
97requires_openssl_tls1_3
98run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]99 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
100 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]101 0 \
102 -s "Protocol is TLSv1.3" \
103 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
104 -s "received signature algorithm: 0x403" \
105 -s "got named group: secp384r1(0018)" \
106 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]107 -C "received HelloRetryRequest message"
108
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]109requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]110requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]111requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
112requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
113requires_openssl_tls1_3
114run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]115 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
116 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]117 0 \
118 -s "Protocol is TLSv1.3" \
119 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
120 -s "received signature algorithm: 0x503" \
121 -s "got named group: secp384r1(0018)" \
122 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]123 -C "received HelloRetryRequest message"
124
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]125requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]126requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]127requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
128requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
129requires_openssl_tls1_3
130run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]131 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
132 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]133 0 \
134 -s "Protocol is TLSv1.3" \
135 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
136 -s "received signature algorithm: 0x603" \
137 -s "got named group: secp384r1(0018)" \
138 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]139 -C "received HelloRetryRequest message"
140
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]141requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]142requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]143requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
144requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
145requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
146requires_openssl_tls1_3
147run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]148 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
149 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]150 0 \
151 -s "Protocol is TLSv1.3" \
152 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
153 -s "received signature algorithm: 0x804" \
154 -s "got named group: secp384r1(0018)" \
155 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]156 -C "received HelloRetryRequest message"
157
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]158requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]159requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]160requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
161requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
162requires_openssl_tls1_3
163run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]164 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
165 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]166 0 \
167 -s "Protocol is TLSv1.3" \
168 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
169 -s "received signature algorithm: 0x403" \
170 -s "got named group: secp521r1(0019)" \
171 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]172 -C "received HelloRetryRequest message"
173
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]174requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]175requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]176requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
177requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
178requires_openssl_tls1_3
179run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]180 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
181 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]182 0 \
183 -s "Protocol is TLSv1.3" \
184 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
185 -s "received signature algorithm: 0x503" \
186 -s "got named group: secp521r1(0019)" \
187 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]188 -C "received HelloRetryRequest message"
189
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]190requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]191requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]192requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
193requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
194requires_openssl_tls1_3
195run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]196 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
197 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]198 0 \
199 -s "Protocol is TLSv1.3" \
200 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
201 -s "received signature algorithm: 0x603" \
202 -s "got named group: secp521r1(0019)" \
203 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]204 -C "received HelloRetryRequest message"
205
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]206requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]207requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]208requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
209requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
210requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
211requires_openssl_tls1_3
212run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]213 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
214 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]215 0 \
216 -s "Protocol is TLSv1.3" \
217 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
218 -s "received signature algorithm: 0x804" \
219 -s "got named group: secp521r1(0019)" \
220 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]221 -C "received HelloRetryRequest message"
222
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]223requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]224requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]225requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
226requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
227requires_openssl_tls1_3
228run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]229 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
230 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]231 0 \
232 -s "Protocol is TLSv1.3" \
233 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
234 -s "received signature algorithm: 0x403" \
235 -s "got named group: x25519(001d)" \
236 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]237 -C "received HelloRetryRequest message"
238
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]239requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]240requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]241requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
242requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
243requires_openssl_tls1_3
244run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]245 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
246 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]247 0 \
248 -s "Protocol is TLSv1.3" \
249 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
250 -s "received signature algorithm: 0x503" \
251 -s "got named group: x25519(001d)" \
252 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]253 -C "received HelloRetryRequest message"
254
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]255requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]256requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]257requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
258requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
259requires_openssl_tls1_3
260run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]261 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
262 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]263 0 \
264 -s "Protocol is TLSv1.3" \
265 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
266 -s "received signature algorithm: 0x603" \
267 -s "got named group: x25519(001d)" \
268 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]269 -C "received HelloRetryRequest message"
270
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]271requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]272requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]273requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
274requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
275requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
276requires_openssl_tls1_3
277run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]278 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
279 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]280 0 \
281 -s "Protocol is TLSv1.3" \
282 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
283 -s "received signature algorithm: 0x804" \
284 -s "got named group: x25519(001d)" \
285 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]286 -C "received HelloRetryRequest message"
287
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]288requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]289requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]290requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
291requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
292requires_openssl_tls1_3
293run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]294 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
295 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]296 0 \
297 -s "Protocol is TLSv1.3" \
298 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
299 -s "received signature algorithm: 0x403" \
300 -s "got named group: x448(001e)" \
301 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]302 -C "received HelloRetryRequest message"
303
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]304requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]305requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]306requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
307requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
308requires_openssl_tls1_3
309run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]310 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
311 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]312 0 \
313 -s "Protocol is TLSv1.3" \
314 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
315 -s "received signature algorithm: 0x503" \
316 -s "got named group: x448(001e)" \
317 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]318 -C "received HelloRetryRequest message"
319
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]320requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]321requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]322requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
323requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
324requires_openssl_tls1_3
325run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]326 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
327 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]328 0 \
329 -s "Protocol is TLSv1.3" \
330 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
331 -s "received signature algorithm: 0x603" \
332 -s "got named group: x448(001e)" \
333 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]334 -C "received HelloRetryRequest message"
335
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]336requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]337requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]338requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
339requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
340requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
341requires_openssl_tls1_3
342run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]343 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
344 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]345 0 \
346 -s "Protocol is TLSv1.3" \
347 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
348 -s "received signature algorithm: 0x804" \
349 -s "got named group: x448(001e)" \
350 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]351 -C "received HelloRetryRequest message"
352
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]353requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]354requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]355requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
356requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
357requires_openssl_tls1_3
358run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]359 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
360 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]361 0 \
362 -s "Protocol is TLSv1.3" \
363 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
364 -s "received signature algorithm: 0x403" \
365 -s "got named group: secp256r1(0017)" \
366 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]367 -C "received HelloRetryRequest message"
368
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]369requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]370requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]371requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
372requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
373requires_openssl_tls1_3
374run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]375 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
376 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]377 0 \
378 -s "Protocol is TLSv1.3" \
379 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
380 -s "received signature algorithm: 0x503" \
381 -s "got named group: secp256r1(0017)" \
382 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]383 -C "received HelloRetryRequest message"
384
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]385requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]386requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]387requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
388requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
389requires_openssl_tls1_3
390run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]391 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
392 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]393 0 \
394 -s "Protocol is TLSv1.3" \
395 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
396 -s "received signature algorithm: 0x603" \
397 -s "got named group: secp256r1(0017)" \
398 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]399 -C "received HelloRetryRequest message"
400
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]401requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]402requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]403requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
404requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
405requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
406requires_openssl_tls1_3
407run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]408 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
409 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]410 0 \
411 -s "Protocol is TLSv1.3" \
412 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
413 -s "received signature algorithm: 0x804" \
414 -s "got named group: secp256r1(0017)" \
415 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]416 -C "received HelloRetryRequest message"
417
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]418requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]419requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]420requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
421requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
422requires_openssl_tls1_3
423run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]424 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
425 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]426 0 \
427 -s "Protocol is TLSv1.3" \
428 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
429 -s "received signature algorithm: 0x403" \
430 -s "got named group: secp384r1(0018)" \
431 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]432 -C "received HelloRetryRequest message"
433
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]434requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]435requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]436requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
437requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
438requires_openssl_tls1_3
439run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]440 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
441 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]442 0 \
443 -s "Protocol is TLSv1.3" \
444 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
445 -s "received signature algorithm: 0x503" \
446 -s "got named group: secp384r1(0018)" \
447 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]448 -C "received HelloRetryRequest message"
449
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]450requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]451requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]452requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
453requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
454requires_openssl_tls1_3
455run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]456 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
457 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]458 0 \
459 -s "Protocol is TLSv1.3" \
460 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
461 -s "received signature algorithm: 0x603" \
462 -s "got named group: secp384r1(0018)" \
463 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]464 -C "received HelloRetryRequest message"
465
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]466requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]467requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]468requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
469requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
470requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
471requires_openssl_tls1_3
472run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]473 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
474 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]475 0 \
476 -s "Protocol is TLSv1.3" \
477 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
478 -s "received signature algorithm: 0x804" \
479 -s "got named group: secp384r1(0018)" \
480 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]481 -C "received HelloRetryRequest message"
482
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]483requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]484requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]485requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
486requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
487requires_openssl_tls1_3
488run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]489 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
490 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]491 0 \
492 -s "Protocol is TLSv1.3" \
493 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
494 -s "received signature algorithm: 0x403" \
495 -s "got named group: secp521r1(0019)" \
496 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]497 -C "received HelloRetryRequest message"
498
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]499requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]500requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]501requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
502requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
503requires_openssl_tls1_3
504run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]505 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
506 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]507 0 \
508 -s "Protocol is TLSv1.3" \
509 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
510 -s "received signature algorithm: 0x503" \
511 -s "got named group: secp521r1(0019)" \
512 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]513 -C "received HelloRetryRequest message"
514
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]515requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]516requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]517requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
518requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
519requires_openssl_tls1_3
520run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]521 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
522 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]523 0 \
524 -s "Protocol is TLSv1.3" \
525 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
526 -s "received signature algorithm: 0x603" \
527 -s "got named group: secp521r1(0019)" \
528 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]529 -C "received HelloRetryRequest message"
530
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]531requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]532requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]533requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
534requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
535requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
536requires_openssl_tls1_3
537run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]538 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
539 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]540 0 \
541 -s "Protocol is TLSv1.3" \
542 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
543 -s "received signature algorithm: 0x804" \
544 -s "got named group: secp521r1(0019)" \
545 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]546 -C "received HelloRetryRequest message"
547
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]548requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]549requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]550requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
551requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
552requires_openssl_tls1_3
553run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]554 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
555 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]556 0 \
557 -s "Protocol is TLSv1.3" \
558 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
559 -s "received signature algorithm: 0x403" \
560 -s "got named group: x25519(001d)" \
561 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]562 -C "received HelloRetryRequest message"
563
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]564requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]565requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]566requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
567requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
568requires_openssl_tls1_3
569run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]570 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
571 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]572 0 \
573 -s "Protocol is TLSv1.3" \
574 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
575 -s "received signature algorithm: 0x503" \
576 -s "got named group: x25519(001d)" \
577 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]578 -C "received HelloRetryRequest message"
579
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]580requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]581requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]582requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
583requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
584requires_openssl_tls1_3
585run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]586 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
587 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]588 0 \
589 -s "Protocol is TLSv1.3" \
590 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
591 -s "received signature algorithm: 0x603" \
592 -s "got named group: x25519(001d)" \
593 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]594 -C "received HelloRetryRequest message"
595
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]596requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]597requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]598requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
599requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
600requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
601requires_openssl_tls1_3
602run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]603 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
604 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]605 0 \
606 -s "Protocol is TLSv1.3" \
607 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
608 -s "received signature algorithm: 0x804" \
609 -s "got named group: x25519(001d)" \
610 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]611 -C "received HelloRetryRequest message"
612
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]613requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]614requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]615requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
616requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
617requires_openssl_tls1_3
618run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]619 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
620 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]621 0 \
622 -s "Protocol is TLSv1.3" \
623 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
624 -s "received signature algorithm: 0x403" \
625 -s "got named group: x448(001e)" \
626 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]627 -C "received HelloRetryRequest message"
628
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]629requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]630requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]631requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
632requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
633requires_openssl_tls1_3
634run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]635 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
636 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]637 0 \
638 -s "Protocol is TLSv1.3" \
639 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
640 -s "received signature algorithm: 0x503" \
641 -s "got named group: x448(001e)" \
642 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]643 -C "received HelloRetryRequest message"
644
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]645requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]646requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]647requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
648requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
649requires_openssl_tls1_3
650run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]651 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
652 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]653 0 \
654 -s "Protocol is TLSv1.3" \
655 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
656 -s "received signature algorithm: 0x603" \
657 -s "got named group: x448(001e)" \
658 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]659 -C "received HelloRetryRequest message"
660
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]661requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]662requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]663requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
664requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
665requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
666requires_openssl_tls1_3
667run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]668 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
669 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]670 0 \
671 -s "Protocol is TLSv1.3" \
672 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
673 -s "received signature algorithm: 0x804" \
674 -s "got named group: x448(001e)" \
675 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]676 -C "received HelloRetryRequest message"
677
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]678requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]679requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]680requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
681requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
682requires_openssl_tls1_3
683run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]684 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
685 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]686 0 \
687 -s "Protocol is TLSv1.3" \
688 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
689 -s "received signature algorithm: 0x403" \
690 -s "got named group: secp256r1(0017)" \
691 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]692 -C "received HelloRetryRequest message"
693
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]694requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]695requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]696requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
697requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
698requires_openssl_tls1_3
699run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]700 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
701 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]702 0 \
703 -s "Protocol is TLSv1.3" \
704 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
705 -s "received signature algorithm: 0x503" \
706 -s "got named group: secp256r1(0017)" \
707 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]708 -C "received HelloRetryRequest message"
709
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]710requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]711requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]712requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
713requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
714requires_openssl_tls1_3
715run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]716 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
717 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]718 0 \
719 -s "Protocol is TLSv1.3" \
720 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
721 -s "received signature algorithm: 0x603" \
722 -s "got named group: secp256r1(0017)" \
723 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]724 -C "received HelloRetryRequest message"
725
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]726requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]727requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]728requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
729requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
730requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
731requires_openssl_tls1_3
732run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]733 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
734 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]735 0 \
736 -s "Protocol is TLSv1.3" \
737 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
738 -s "received signature algorithm: 0x804" \
739 -s "got named group: secp256r1(0017)" \
740 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]741 -C "received HelloRetryRequest message"
742
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]743requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]744requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]745requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
746requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
747requires_openssl_tls1_3
748run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]749 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
750 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]751 0 \
752 -s "Protocol is TLSv1.3" \
753 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
754 -s "received signature algorithm: 0x403" \
755 -s "got named group: secp384r1(0018)" \
756 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]757 -C "received HelloRetryRequest message"
758
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]759requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]760requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]761requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
762requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
763requires_openssl_tls1_3
764run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]765 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
766 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]767 0 \
768 -s "Protocol is TLSv1.3" \
769 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
770 -s "received signature algorithm: 0x503" \
771 -s "got named group: secp384r1(0018)" \
772 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]773 -C "received HelloRetryRequest message"
774
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]775requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]776requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]777requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
778requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
779requires_openssl_tls1_3
780run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]781 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
782 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]783 0 \
784 -s "Protocol is TLSv1.3" \
785 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
786 -s "received signature algorithm: 0x603" \
787 -s "got named group: secp384r1(0018)" \
788 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]789 -C "received HelloRetryRequest message"
790
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]791requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]792requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]793requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
794requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
795requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
796requires_openssl_tls1_3
797run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]798 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
799 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]800 0 \
801 -s "Protocol is TLSv1.3" \
802 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
803 -s "received signature algorithm: 0x804" \
804 -s "got named group: secp384r1(0018)" \
805 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]806 -C "received HelloRetryRequest message"
807
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]808requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]809requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]810requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
811requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
812requires_openssl_tls1_3
813run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]814 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
815 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]816 0 \
817 -s "Protocol is TLSv1.3" \
818 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
819 -s "received signature algorithm: 0x403" \
820 -s "got named group: secp521r1(0019)" \
821 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]822 -C "received HelloRetryRequest message"
823
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]824requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]825requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]826requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
827requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
828requires_openssl_tls1_3
829run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]830 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
831 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]832 0 \
833 -s "Protocol is TLSv1.3" \
834 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
835 -s "received signature algorithm: 0x503" \
836 -s "got named group: secp521r1(0019)" \
837 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]838 -C "received HelloRetryRequest message"
839
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]840requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]841requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]842requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
843requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
844requires_openssl_tls1_3
845run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]846 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
847 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]848 0 \
849 -s "Protocol is TLSv1.3" \
850 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
851 -s "received signature algorithm: 0x603" \
852 -s "got named group: secp521r1(0019)" \
853 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]854 -C "received HelloRetryRequest message"
855
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]856requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]857requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]858requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
859requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
860requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
861requires_openssl_tls1_3
862run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]863 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
864 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]865 0 \
866 -s "Protocol is TLSv1.3" \
867 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
868 -s "received signature algorithm: 0x804" \
869 -s "got named group: secp521r1(0019)" \
870 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]871 -C "received HelloRetryRequest message"
872
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]873requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]874requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]875requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
876requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
877requires_openssl_tls1_3
878run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]879 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
880 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]881 0 \
882 -s "Protocol is TLSv1.3" \
883 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
884 -s "received signature algorithm: 0x403" \
885 -s "got named group: x25519(001d)" \
886 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]887 -C "received HelloRetryRequest message"
888
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]889requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]890requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]891requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
892requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
893requires_openssl_tls1_3
894run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]895 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
896 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]897 0 \
898 -s "Protocol is TLSv1.3" \
899 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
900 -s "received signature algorithm: 0x503" \
901 -s "got named group: x25519(001d)" \
902 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]903 -C "received HelloRetryRequest message"
904
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]905requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]906requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]907requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
908requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
909requires_openssl_tls1_3
910run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]911 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
912 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]913 0 \
914 -s "Protocol is TLSv1.3" \
915 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
916 -s "received signature algorithm: 0x603" \
917 -s "got named group: x25519(001d)" \
918 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]919 -C "received HelloRetryRequest message"
920
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]921requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]922requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]923requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
924requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
925requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
926requires_openssl_tls1_3
927run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]928 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
929 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]930 0 \
931 -s "Protocol is TLSv1.3" \
932 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
933 -s "received signature algorithm: 0x804" \
934 -s "got named group: x25519(001d)" \
935 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]936 -C "received HelloRetryRequest message"
937
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]938requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]939requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]940requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
941requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
942requires_openssl_tls1_3
943run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]944 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
945 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]946 0 \
947 -s "Protocol is TLSv1.3" \
948 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
949 -s "received signature algorithm: 0x403" \
950 -s "got named group: x448(001e)" \
951 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]952 -C "received HelloRetryRequest message"
953
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]954requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]955requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]956requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
957requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
958requires_openssl_tls1_3
959run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]960 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
961 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]962 0 \
963 -s "Protocol is TLSv1.3" \
964 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
965 -s "received signature algorithm: 0x503" \
966 -s "got named group: x448(001e)" \
967 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]968 -C "received HelloRetryRequest message"
969
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]970requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]971requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]972requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
973requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
974requires_openssl_tls1_3
975run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]976 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
977 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]978 0 \
979 -s "Protocol is TLSv1.3" \
980 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
981 -s "received signature algorithm: 0x603" \
982 -s "got named group: x448(001e)" \
983 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]984 -C "received HelloRetryRequest message"
985
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]986requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]987requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]988requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
989requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
990requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
991requires_openssl_tls1_3
992run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]993 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
994 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]995 0 \
996 -s "Protocol is TLSv1.3" \
997 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
998 -s "received signature algorithm: 0x804" \
999 -s "got named group: x448(001e)" \
1000 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1001 -C "received HelloRetryRequest message"
1002
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1003requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1004requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1005requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1006requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1007requires_openssl_tls1_3
1008run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1009 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1010 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1011 0 \
1012 -s "Protocol is TLSv1.3" \
1013 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1014 -s "received signature algorithm: 0x403" \
1015 -s "got named group: secp256r1(0017)" \
1016 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1017 -C "received HelloRetryRequest message"
1018
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1019requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1020requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1021requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1022requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1023requires_openssl_tls1_3
1024run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1025 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1026 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1027 0 \
1028 -s "Protocol is TLSv1.3" \
1029 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1030 -s "received signature algorithm: 0x503" \
1031 -s "got named group: secp256r1(0017)" \
1032 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1033 -C "received HelloRetryRequest message"
1034
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1035requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1036requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1037requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1038requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1039requires_openssl_tls1_3
1040run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1041 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1042 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1043 0 \
1044 -s "Protocol is TLSv1.3" \
1045 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1046 -s "received signature algorithm: 0x603" \
1047 -s "got named group: secp256r1(0017)" \
1048 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1049 -C "received HelloRetryRequest message"
1050
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1051requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1052requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1053requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1054requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1055requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1056requires_openssl_tls1_3
1057run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1058 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1059 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1060 0 \
1061 -s "Protocol is TLSv1.3" \
1062 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1063 -s "received signature algorithm: 0x804" \
1064 -s "got named group: secp256r1(0017)" \
1065 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1066 -C "received HelloRetryRequest message"
1067
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1068requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1069requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1070requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1071requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1072requires_openssl_tls1_3
1073run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1074 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1075 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1076 0 \
1077 -s "Protocol is TLSv1.3" \
1078 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1079 -s "received signature algorithm: 0x403" \
1080 -s "got named group: secp384r1(0018)" \
1081 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1082 -C "received HelloRetryRequest message"
1083
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1084requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1085requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1086requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1087requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1088requires_openssl_tls1_3
1089run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1090 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1091 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1092 0 \
1093 -s "Protocol is TLSv1.3" \
1094 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1095 -s "received signature algorithm: 0x503" \
1096 -s "got named group: secp384r1(0018)" \
1097 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1098 -C "received HelloRetryRequest message"
1099
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1100requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1101requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1102requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1103requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1104requires_openssl_tls1_3
1105run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1106 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1107 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1108 0 \
1109 -s "Protocol is TLSv1.3" \
1110 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1111 -s "received signature algorithm: 0x603" \
1112 -s "got named group: secp384r1(0018)" \
1113 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1114 -C "received HelloRetryRequest message"
1115
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1116requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1117requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1118requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1119requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1120requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1121requires_openssl_tls1_3
1122run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1123 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1124 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1125 0 \
1126 -s "Protocol is TLSv1.3" \
1127 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1128 -s "received signature algorithm: 0x804" \
1129 -s "got named group: secp384r1(0018)" \
1130 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1131 -C "received HelloRetryRequest message"
1132
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1133requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1134requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1135requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1136requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1137requires_openssl_tls1_3
1138run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1139 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1140 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1141 0 \
1142 -s "Protocol is TLSv1.3" \
1143 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1144 -s "received signature algorithm: 0x403" \
1145 -s "got named group: secp521r1(0019)" \
1146 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1147 -C "received HelloRetryRequest message"
1148
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1149requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1150requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1151requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1152requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1153requires_openssl_tls1_3
1154run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1155 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1156 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1157 0 \
1158 -s "Protocol is TLSv1.3" \
1159 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1160 -s "received signature algorithm: 0x503" \
1161 -s "got named group: secp521r1(0019)" \
1162 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1163 -C "received HelloRetryRequest message"
1164
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1165requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1166requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1167requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1168requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1169requires_openssl_tls1_3
1170run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1171 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1172 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1173 0 \
1174 -s "Protocol is TLSv1.3" \
1175 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1176 -s "received signature algorithm: 0x603" \
1177 -s "got named group: secp521r1(0019)" \
1178 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1179 -C "received HelloRetryRequest message"
1180
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1181requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1182requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1183requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1184requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1185requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1186requires_openssl_tls1_3
1187run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1188 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1189 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1190 0 \
1191 -s "Protocol is TLSv1.3" \
1192 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1193 -s "received signature algorithm: 0x804" \
1194 -s "got named group: secp521r1(0019)" \
1195 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1196 -C "received HelloRetryRequest message"
1197
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1198requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1199requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1200requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1201requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1202requires_openssl_tls1_3
1203run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1204 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1205 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1206 0 \
1207 -s "Protocol is TLSv1.3" \
1208 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1209 -s "received signature algorithm: 0x403" \
1210 -s "got named group: x25519(001d)" \
1211 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1212 -C "received HelloRetryRequest message"
1213
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1214requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1215requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1216requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1217requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1218requires_openssl_tls1_3
1219run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1220 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1221 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1222 0 \
1223 -s "Protocol is TLSv1.3" \
1224 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1225 -s "received signature algorithm: 0x503" \
1226 -s "got named group: x25519(001d)" \
1227 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1228 -C "received HelloRetryRequest message"
1229
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1230requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1231requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1232requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1233requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1234requires_openssl_tls1_3
1235run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1236 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1237 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1238 0 \
1239 -s "Protocol is TLSv1.3" \
1240 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1241 -s "received signature algorithm: 0x603" \
1242 -s "got named group: x25519(001d)" \
1243 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1244 -C "received HelloRetryRequest message"
1245
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1246requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1247requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1248requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1249requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1250requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1251requires_openssl_tls1_3
1252run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1253 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1254 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1255 0 \
1256 -s "Protocol is TLSv1.3" \
1257 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1258 -s "received signature algorithm: 0x804" \
1259 -s "got named group: x25519(001d)" \
1260 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1261 -C "received HelloRetryRequest message"
1262
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1263requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1264requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1265requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1266requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1267requires_openssl_tls1_3
1268run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1269 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1270 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1271 0 \
1272 -s "Protocol is TLSv1.3" \
1273 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1274 -s "received signature algorithm: 0x403" \
1275 -s "got named group: x448(001e)" \
1276 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1277 -C "received HelloRetryRequest message"
1278
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1279requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1280requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1281requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1282requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1283requires_openssl_tls1_3
1284run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1285 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1286 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1287 0 \
1288 -s "Protocol is TLSv1.3" \
1289 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1290 -s "received signature algorithm: 0x503" \
1291 -s "got named group: x448(001e)" \
1292 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1293 -C "received HelloRetryRequest message"
1294
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1295requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1296requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1297requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1298requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1299requires_openssl_tls1_3
1300run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1301 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1302 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1303 0 \
1304 -s "Protocol is TLSv1.3" \
1305 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1306 -s "received signature algorithm: 0x603" \
1307 -s "got named group: x448(001e)" \
1308 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1309 -C "received HelloRetryRequest message"
1310
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1311requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1312requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1313requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1314requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1315requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1316requires_openssl_tls1_3
1317run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1318 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1319 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1320 0 \
1321 -s "Protocol is TLSv1.3" \
1322 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1323 -s "received signature algorithm: 0x804" \
1324 -s "got named group: x448(001e)" \
1325 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1326 -C "received HelloRetryRequest message"
1327
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1328requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1329requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1330requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1331requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1332requires_openssl_tls1_3
1333run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1334 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1335 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1336 0 \
1337 -s "Protocol is TLSv1.3" \
1338 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1339 -s "received signature algorithm: 0x403" \
1340 -s "got named group: secp256r1(0017)" \
1341 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1342 -C "received HelloRetryRequest message"
1343
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1344requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1345requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1346requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1347requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1348requires_openssl_tls1_3
1349run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1350 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1351 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1352 0 \
1353 -s "Protocol is TLSv1.3" \
1354 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1355 -s "received signature algorithm: 0x503" \
1356 -s "got named group: secp256r1(0017)" \
1357 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1358 -C "received HelloRetryRequest message"
1359
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1360requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1361requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1362requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1363requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1364requires_openssl_tls1_3
1365run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1366 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1367 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1368 0 \
1369 -s "Protocol is TLSv1.3" \
1370 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1371 -s "received signature algorithm: 0x603" \
1372 -s "got named group: secp256r1(0017)" \
1373 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1374 -C "received HelloRetryRequest message"
1375
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1376requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1377requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1378requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1379requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1380requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1381requires_openssl_tls1_3
1382run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1383 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1384 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1385 0 \
1386 -s "Protocol is TLSv1.3" \
1387 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1388 -s "received signature algorithm: 0x804" \
1389 -s "got named group: secp256r1(0017)" \
1390 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1391 -C "received HelloRetryRequest message"
1392
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1393requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1394requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1395requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1396requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1397requires_openssl_tls1_3
1398run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1399 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1400 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1401 0 \
1402 -s "Protocol is TLSv1.3" \
1403 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1404 -s "received signature algorithm: 0x403" \
1405 -s "got named group: secp384r1(0018)" \
1406 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1407 -C "received HelloRetryRequest message"
1408
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1409requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1410requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1411requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1412requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1413requires_openssl_tls1_3
1414run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1415 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1416 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1417 0 \
1418 -s "Protocol is TLSv1.3" \
1419 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1420 -s "received signature algorithm: 0x503" \
1421 -s "got named group: secp384r1(0018)" \
1422 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1423 -C "received HelloRetryRequest message"
1424
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1425requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1426requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1427requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1428requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1429requires_openssl_tls1_3
1430run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1431 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1432 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1433 0 \
1434 -s "Protocol is TLSv1.3" \
1435 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1436 -s "received signature algorithm: 0x603" \
1437 -s "got named group: secp384r1(0018)" \
1438 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1439 -C "received HelloRetryRequest message"
1440
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1441requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1442requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1443requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1444requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1445requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1446requires_openssl_tls1_3
1447run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1448 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1449 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1450 0 \
1451 -s "Protocol is TLSv1.3" \
1452 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1453 -s "received signature algorithm: 0x804" \
1454 -s "got named group: secp384r1(0018)" \
1455 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1456 -C "received HelloRetryRequest message"
1457
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1458requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1459requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1460requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1461requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1462requires_openssl_tls1_3
1463run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1464 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1465 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1466 0 \
1467 -s "Protocol is TLSv1.3" \
1468 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1469 -s "received signature algorithm: 0x403" \
1470 -s "got named group: secp521r1(0019)" \
1471 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1472 -C "received HelloRetryRequest message"
1473
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1474requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1475requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1476requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1477requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1478requires_openssl_tls1_3
1479run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1480 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1481 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1482 0 \
1483 -s "Protocol is TLSv1.3" \
1484 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1485 -s "received signature algorithm: 0x503" \
1486 -s "got named group: secp521r1(0019)" \
1487 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1488 -C "received HelloRetryRequest message"
1489
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1490requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1491requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1492requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1493requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1494requires_openssl_tls1_3
1495run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1496 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1497 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1498 0 \
1499 -s "Protocol is TLSv1.3" \
1500 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1501 -s "received signature algorithm: 0x603" \
1502 -s "got named group: secp521r1(0019)" \
1503 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1504 -C "received HelloRetryRequest message"
1505
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1506requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1507requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1508requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1509requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1510requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1511requires_openssl_tls1_3
1512run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1513 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1514 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1515 0 \
1516 -s "Protocol is TLSv1.3" \
1517 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1518 -s "received signature algorithm: 0x804" \
1519 -s "got named group: secp521r1(0019)" \
1520 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1521 -C "received HelloRetryRequest message"
1522
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1523requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1524requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1525requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1526requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1527requires_openssl_tls1_3
1528run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1529 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1530 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1531 0 \
1532 -s "Protocol is TLSv1.3" \
1533 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1534 -s "received signature algorithm: 0x403" \
1535 -s "got named group: x25519(001d)" \
1536 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1537 -C "received HelloRetryRequest message"
1538
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1539requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1540requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1541requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1542requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1543requires_openssl_tls1_3
1544run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1545 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1546 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1547 0 \
1548 -s "Protocol is TLSv1.3" \
1549 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1550 -s "received signature algorithm: 0x503" \
1551 -s "got named group: x25519(001d)" \
1552 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1553 -C "received HelloRetryRequest message"
1554
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1555requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1556requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1557requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1558requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1559requires_openssl_tls1_3
1560run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1561 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1562 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1563 0 \
1564 -s "Protocol is TLSv1.3" \
1565 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1566 -s "received signature algorithm: 0x603" \
1567 -s "got named group: x25519(001d)" \
1568 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1569 -C "received HelloRetryRequest message"
1570
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1571requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1572requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1573requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1574requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1575requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1576requires_openssl_tls1_3
1577run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1578 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1579 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1580 0 \
1581 -s "Protocol is TLSv1.3" \
1582 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1583 -s "received signature algorithm: 0x804" \
1584 -s "got named group: x25519(001d)" \
1585 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1586 -C "received HelloRetryRequest message"
1587
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1588requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1589requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1590requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1591requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1592requires_openssl_tls1_3
1593run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1594 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1595 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1596 0 \
1597 -s "Protocol is TLSv1.3" \
1598 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1599 -s "received signature algorithm: 0x403" \
1600 -s "got named group: x448(001e)" \
1601 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1602 -C "received HelloRetryRequest message"
1603
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1604requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1605requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1606requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1607requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1608requires_openssl_tls1_3
1609run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1610 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1611 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1612 0 \
1613 -s "Protocol is TLSv1.3" \
1614 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1615 -s "received signature algorithm: 0x503" \
1616 -s "got named group: x448(001e)" \
1617 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1618 -C "received HelloRetryRequest message"
1619
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1620requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1621requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1622requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1623requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1624requires_openssl_tls1_3
1625run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1626 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1627 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1628 0 \
1629 -s "Protocol is TLSv1.3" \
1630 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1631 -s "received signature algorithm: 0x603" \
1632 -s "got named group: x448(001e)" \
1633 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1634 -C "received HelloRetryRequest message"
1635
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1636requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1637requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1638requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1639requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1640requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1641requires_openssl_tls1_3
1642run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1643 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1644 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1645 0 \
1646 -s "Protocol is TLSv1.3" \
1647 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1648 -s "received signature algorithm: 0x804" \
1649 -s "got named group: x448(001e)" \
1650 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1651 -C "received HelloRetryRequest message"
1652
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1653requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1654requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1655requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1656requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1657requires_gnutls_tls1_3
1658requires_gnutls_next_no_ticket
1659requires_gnutls_next_disable_tls13_compat
1660run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1661 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1662 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1663 0 \
1664 -s "Protocol is TLSv1.3" \
1665 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1666 -s "received signature algorithm: 0x403" \
1667 -s "got named group: secp256r1(0017)" \
1668 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1669 -C "received HelloRetryRequest message"
1670
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1671requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1672requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1673requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1674requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1675requires_gnutls_tls1_3
1676requires_gnutls_next_no_ticket
1677requires_gnutls_next_disable_tls13_compat
1678run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1679 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1680 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1681 0 \
1682 -s "Protocol is TLSv1.3" \
1683 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1684 -s "received signature algorithm: 0x503" \
1685 -s "got named group: secp256r1(0017)" \
1686 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1687 -C "received HelloRetryRequest message"
1688
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1689requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1690requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1691requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1692requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1693requires_gnutls_tls1_3
1694requires_gnutls_next_no_ticket
1695requires_gnutls_next_disable_tls13_compat
1696run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1697 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1698 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1699 0 \
1700 -s "Protocol is TLSv1.3" \
1701 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1702 -s "received signature algorithm: 0x603" \
1703 -s "got named group: secp256r1(0017)" \
1704 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1705 -C "received HelloRetryRequest message"
1706
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1707requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1708requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1709requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1710requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1711requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1712requires_gnutls_tls1_3
1713requires_gnutls_next_no_ticket
1714requires_gnutls_next_disable_tls13_compat
1715run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1716 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1717 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1718 0 \
1719 -s "Protocol is TLSv1.3" \
1720 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1721 -s "received signature algorithm: 0x804" \
1722 -s "got named group: secp256r1(0017)" \
1723 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1724 -C "received HelloRetryRequest message"
1725
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1726requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1727requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1728requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1729requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1730requires_gnutls_tls1_3
1731requires_gnutls_next_no_ticket
1732requires_gnutls_next_disable_tls13_compat
1733run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1734 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1735 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1736 0 \
1737 -s "Protocol is TLSv1.3" \
1738 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1739 -s "received signature algorithm: 0x403" \
1740 -s "got named group: secp384r1(0018)" \
1741 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1742 -C "received HelloRetryRequest message"
1743
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1744requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1745requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1746requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1747requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1748requires_gnutls_tls1_3
1749requires_gnutls_next_no_ticket
1750requires_gnutls_next_disable_tls13_compat
1751run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1752 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1753 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1754 0 \
1755 -s "Protocol is TLSv1.3" \
1756 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1757 -s "received signature algorithm: 0x503" \
1758 -s "got named group: secp384r1(0018)" \
1759 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1760 -C "received HelloRetryRequest message"
1761
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1762requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1763requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1764requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1765requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1766requires_gnutls_tls1_3
1767requires_gnutls_next_no_ticket
1768requires_gnutls_next_disable_tls13_compat
1769run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1770 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1771 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1772 0 \
1773 -s "Protocol is TLSv1.3" \
1774 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1775 -s "received signature algorithm: 0x603" \
1776 -s "got named group: secp384r1(0018)" \
1777 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1778 -C "received HelloRetryRequest message"
1779
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1780requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1781requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1782requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1783requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1784requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1785requires_gnutls_tls1_3
1786requires_gnutls_next_no_ticket
1787requires_gnutls_next_disable_tls13_compat
1788run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1789 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1790 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1791 0 \
1792 -s "Protocol is TLSv1.3" \
1793 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1794 -s "received signature algorithm: 0x804" \
1795 -s "got named group: secp384r1(0018)" \
1796 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1797 -C "received HelloRetryRequest message"
1798
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1799requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1800requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1801requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1802requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1803requires_gnutls_tls1_3
1804requires_gnutls_next_no_ticket
1805requires_gnutls_next_disable_tls13_compat
1806run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1807 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1808 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1809 0 \
1810 -s "Protocol is TLSv1.3" \
1811 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1812 -s "received signature algorithm: 0x403" \
1813 -s "got named group: secp521r1(0019)" \
1814 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1815 -C "received HelloRetryRequest message"
1816
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1817requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1818requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1819requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1820requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1821requires_gnutls_tls1_3
1822requires_gnutls_next_no_ticket
1823requires_gnutls_next_disable_tls13_compat
1824run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1825 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1826 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1827 0 \
1828 -s "Protocol is TLSv1.3" \
1829 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1830 -s "received signature algorithm: 0x503" \
1831 -s "got named group: secp521r1(0019)" \
1832 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1833 -C "received HelloRetryRequest message"
1834
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1835requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1836requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1837requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1838requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1839requires_gnutls_tls1_3
1840requires_gnutls_next_no_ticket
1841requires_gnutls_next_disable_tls13_compat
1842run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1843 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1844 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1845 0 \
1846 -s "Protocol is TLSv1.3" \
1847 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1848 -s "received signature algorithm: 0x603" \
1849 -s "got named group: secp521r1(0019)" \
1850 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1851 -C "received HelloRetryRequest message"
1852
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1853requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1854requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1855requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1856requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1857requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1858requires_gnutls_tls1_3
1859requires_gnutls_next_no_ticket
1860requires_gnutls_next_disable_tls13_compat
1861run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1862 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1863 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1864 0 \
1865 -s "Protocol is TLSv1.3" \
1866 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1867 -s "received signature algorithm: 0x804" \
1868 -s "got named group: secp521r1(0019)" \
1869 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1870 -C "received HelloRetryRequest message"
1871
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1872requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1873requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1874requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1875requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1876requires_gnutls_tls1_3
1877requires_gnutls_next_no_ticket
1878requires_gnutls_next_disable_tls13_compat
1879run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1880 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1881 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1882 0 \
1883 -s "Protocol is TLSv1.3" \
1884 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1885 -s "received signature algorithm: 0x403" \
1886 -s "got named group: x25519(001d)" \
1887 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1888 -C "received HelloRetryRequest message"
1889
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1890requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1891requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1892requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1893requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1894requires_gnutls_tls1_3
1895requires_gnutls_next_no_ticket
1896requires_gnutls_next_disable_tls13_compat
1897run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1898 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1899 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1900 0 \
1901 -s "Protocol is TLSv1.3" \
1902 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1903 -s "received signature algorithm: 0x503" \
1904 -s "got named group: x25519(001d)" \
1905 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1906 -C "received HelloRetryRequest message"
1907
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1908requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1909requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1910requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1911requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1912requires_gnutls_tls1_3
1913requires_gnutls_next_no_ticket
1914requires_gnutls_next_disable_tls13_compat
1915run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1916 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1917 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1918 0 \
1919 -s "Protocol is TLSv1.3" \
1920 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1921 -s "received signature algorithm: 0x603" \
1922 -s "got named group: x25519(001d)" \
1923 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1924 -C "received HelloRetryRequest message"
1925
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1926requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1927requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1928requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1929requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1930requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
1931requires_gnutls_tls1_3
1932requires_gnutls_next_no_ticket
1933requires_gnutls_next_disable_tls13_compat
1934run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1935 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1936 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1937 0 \
1938 -s "Protocol is TLSv1.3" \
1939 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1940 -s "received signature algorithm: 0x804" \
1941 -s "got named group: x25519(001d)" \
1942 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1943 -C "received HelloRetryRequest message"
1944
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1945requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1946requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1947requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1948requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1949requires_gnutls_tls1_3
1950requires_gnutls_next_no_ticket
1951requires_gnutls_next_disable_tls13_compat
1952run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1953 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1954 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1955 0 \
1956 -s "Protocol is TLSv1.3" \
1957 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1958 -s "received signature algorithm: 0x403" \
1959 -s "got named group: x448(001e)" \
1960 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1961 -C "received HelloRetryRequest message"
1962
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1963requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1964requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1965requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1966requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1967requires_gnutls_tls1_3
1968requires_gnutls_next_no_ticket
1969requires_gnutls_next_disable_tls13_compat
1970run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1971 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1972 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1973 0 \
1974 -s "Protocol is TLSv1.3" \
1975 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1976 -s "received signature algorithm: 0x503" \
1977 -s "got named group: x448(001e)" \
1978 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1979 -C "received HelloRetryRequest message"
1980
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1981requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1982requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1983requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1984requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1985requires_gnutls_tls1_3
1986requires_gnutls_next_no_ticket
1987requires_gnutls_next_disable_tls13_compat
1988run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]1989 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
1990 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1991 0 \
1992 -s "Protocol is TLSv1.3" \
1993 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
1994 -s "received signature algorithm: 0x603" \
1995 -s "got named group: x448(001e)" \
1996 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1997 -C "received HelloRetryRequest message"
1998
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1999requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2000requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2001requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2002requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2003requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2004requires_gnutls_tls1_3
2005requires_gnutls_next_no_ticket
2006requires_gnutls_next_disable_tls13_compat
2007run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2008 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2009 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2010 0 \
2011 -s "Protocol is TLSv1.3" \
2012 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2013 -s "received signature algorithm: 0x804" \
2014 -s "got named group: x448(001e)" \
2015 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2016 -C "received HelloRetryRequest message"
2017
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2018requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2019requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2020requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2021requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2022requires_gnutls_tls1_3
2023requires_gnutls_next_no_ticket
2024requires_gnutls_next_disable_tls13_compat
2025run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2026 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2027 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2028 0 \
2029 -s "Protocol is TLSv1.3" \
2030 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2031 -s "received signature algorithm: 0x403" \
2032 -s "got named group: secp256r1(0017)" \
2033 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2034 -C "received HelloRetryRequest message"
2035
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2036requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2037requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2038requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2039requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2040requires_gnutls_tls1_3
2041requires_gnutls_next_no_ticket
2042requires_gnutls_next_disable_tls13_compat
2043run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2044 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2045 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2046 0 \
2047 -s "Protocol is TLSv1.3" \
2048 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2049 -s "received signature algorithm: 0x503" \
2050 -s "got named group: secp256r1(0017)" \
2051 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2052 -C "received HelloRetryRequest message"
2053
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2054requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2055requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2056requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2057requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2058requires_gnutls_tls1_3
2059requires_gnutls_next_no_ticket
2060requires_gnutls_next_disable_tls13_compat
2061run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2062 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2063 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2064 0 \
2065 -s "Protocol is TLSv1.3" \
2066 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2067 -s "received signature algorithm: 0x603" \
2068 -s "got named group: secp256r1(0017)" \
2069 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2070 -C "received HelloRetryRequest message"
2071
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2072requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2073requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2074requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2075requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2076requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2077requires_gnutls_tls1_3
2078requires_gnutls_next_no_ticket
2079requires_gnutls_next_disable_tls13_compat
2080run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2081 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2082 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2083 0 \
2084 -s "Protocol is TLSv1.3" \
2085 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2086 -s "received signature algorithm: 0x804" \
2087 -s "got named group: secp256r1(0017)" \
2088 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2089 -C "received HelloRetryRequest message"
2090
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2091requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2092requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2093requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2094requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2095requires_gnutls_tls1_3
2096requires_gnutls_next_no_ticket
2097requires_gnutls_next_disable_tls13_compat
2098run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2099 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2100 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2101 0 \
2102 -s "Protocol is TLSv1.3" \
2103 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2104 -s "received signature algorithm: 0x403" \
2105 -s "got named group: secp384r1(0018)" \
2106 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2107 -C "received HelloRetryRequest message"
2108
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2109requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2110requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2111requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2112requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2113requires_gnutls_tls1_3
2114requires_gnutls_next_no_ticket
2115requires_gnutls_next_disable_tls13_compat
2116run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2117 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2118 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2119 0 \
2120 -s "Protocol is TLSv1.3" \
2121 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2122 -s "received signature algorithm: 0x503" \
2123 -s "got named group: secp384r1(0018)" \
2124 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2125 -C "received HelloRetryRequest message"
2126
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2127requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2128requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2129requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2130requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2131requires_gnutls_tls1_3
2132requires_gnutls_next_no_ticket
2133requires_gnutls_next_disable_tls13_compat
2134run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2135 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2136 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2137 0 \
2138 -s "Protocol is TLSv1.3" \
2139 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2140 -s "received signature algorithm: 0x603" \
2141 -s "got named group: secp384r1(0018)" \
2142 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2143 -C "received HelloRetryRequest message"
2144
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2145requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2146requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2147requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2148requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2149requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2150requires_gnutls_tls1_3
2151requires_gnutls_next_no_ticket
2152requires_gnutls_next_disable_tls13_compat
2153run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2154 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2155 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2156 0 \
2157 -s "Protocol is TLSv1.3" \
2158 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2159 -s "received signature algorithm: 0x804" \
2160 -s "got named group: secp384r1(0018)" \
2161 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2162 -C "received HelloRetryRequest message"
2163
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2164requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2165requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2166requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2167requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2168requires_gnutls_tls1_3
2169requires_gnutls_next_no_ticket
2170requires_gnutls_next_disable_tls13_compat
2171run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2172 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2173 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2174 0 \
2175 -s "Protocol is TLSv1.3" \
2176 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2177 -s "received signature algorithm: 0x403" \
2178 -s "got named group: secp521r1(0019)" \
2179 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2180 -C "received HelloRetryRequest message"
2181
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2182requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2183requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2184requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2185requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2186requires_gnutls_tls1_3
2187requires_gnutls_next_no_ticket
2188requires_gnutls_next_disable_tls13_compat
2189run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2190 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2191 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2192 0 \
2193 -s "Protocol is TLSv1.3" \
2194 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2195 -s "received signature algorithm: 0x503" \
2196 -s "got named group: secp521r1(0019)" \
2197 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2198 -C "received HelloRetryRequest message"
2199
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2200requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2201requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2202requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2203requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2204requires_gnutls_tls1_3
2205requires_gnutls_next_no_ticket
2206requires_gnutls_next_disable_tls13_compat
2207run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2208 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2209 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2210 0 \
2211 -s "Protocol is TLSv1.3" \
2212 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2213 -s "received signature algorithm: 0x603" \
2214 -s "got named group: secp521r1(0019)" \
2215 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2216 -C "received HelloRetryRequest message"
2217
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2218requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2219requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2220requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2221requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2222requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2223requires_gnutls_tls1_3
2224requires_gnutls_next_no_ticket
2225requires_gnutls_next_disable_tls13_compat
2226run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2227 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2228 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2229 0 \
2230 -s "Protocol is TLSv1.3" \
2231 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2232 -s "received signature algorithm: 0x804" \
2233 -s "got named group: secp521r1(0019)" \
2234 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2235 -C "received HelloRetryRequest message"
2236
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2237requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2238requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2239requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2240requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2241requires_gnutls_tls1_3
2242requires_gnutls_next_no_ticket
2243requires_gnutls_next_disable_tls13_compat
2244run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2245 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2246 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2247 0 \
2248 -s "Protocol is TLSv1.3" \
2249 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2250 -s "received signature algorithm: 0x403" \
2251 -s "got named group: x25519(001d)" \
2252 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2253 -C "received HelloRetryRequest message"
2254
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2255requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2256requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2257requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2258requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2259requires_gnutls_tls1_3
2260requires_gnutls_next_no_ticket
2261requires_gnutls_next_disable_tls13_compat
2262run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2263 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2264 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2265 0 \
2266 -s "Protocol is TLSv1.3" \
2267 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2268 -s "received signature algorithm: 0x503" \
2269 -s "got named group: x25519(001d)" \
2270 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2271 -C "received HelloRetryRequest message"
2272
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2273requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2274requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2275requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2276requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2277requires_gnutls_tls1_3
2278requires_gnutls_next_no_ticket
2279requires_gnutls_next_disable_tls13_compat
2280run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2281 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2282 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2283 0 \
2284 -s "Protocol is TLSv1.3" \
2285 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2286 -s "received signature algorithm: 0x603" \
2287 -s "got named group: x25519(001d)" \
2288 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2289 -C "received HelloRetryRequest message"
2290
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2291requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2292requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2293requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2294requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2295requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2296requires_gnutls_tls1_3
2297requires_gnutls_next_no_ticket
2298requires_gnutls_next_disable_tls13_compat
2299run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2300 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2301 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2302 0 \
2303 -s "Protocol is TLSv1.3" \
2304 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2305 -s "received signature algorithm: 0x804" \
2306 -s "got named group: x25519(001d)" \
2307 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2308 -C "received HelloRetryRequest message"
2309
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2310requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2311requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2312requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2313requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2314requires_gnutls_tls1_3
2315requires_gnutls_next_no_ticket
2316requires_gnutls_next_disable_tls13_compat
2317run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2318 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2319 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2320 0 \
2321 -s "Protocol is TLSv1.3" \
2322 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2323 -s "received signature algorithm: 0x403" \
2324 -s "got named group: x448(001e)" \
2325 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2326 -C "received HelloRetryRequest message"
2327
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2328requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2329requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2330requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2331requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2332requires_gnutls_tls1_3
2333requires_gnutls_next_no_ticket
2334requires_gnutls_next_disable_tls13_compat
2335run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2336 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2337 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2338 0 \
2339 -s "Protocol is TLSv1.3" \
2340 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2341 -s "received signature algorithm: 0x503" \
2342 -s "got named group: x448(001e)" \
2343 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2344 -C "received HelloRetryRequest message"
2345
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2346requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2347requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2348requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2349requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2350requires_gnutls_tls1_3
2351requires_gnutls_next_no_ticket
2352requires_gnutls_next_disable_tls13_compat
2353run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2354 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2355 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2356 0 \
2357 -s "Protocol is TLSv1.3" \
2358 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2359 -s "received signature algorithm: 0x603" \
2360 -s "got named group: x448(001e)" \
2361 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2362 -C "received HelloRetryRequest message"
2363
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2364requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2365requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2366requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2367requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2368requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2369requires_gnutls_tls1_3
2370requires_gnutls_next_no_ticket
2371requires_gnutls_next_disable_tls13_compat
2372run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2373 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2374 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2375 0 \
2376 -s "Protocol is TLSv1.3" \
2377 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2378 -s "received signature algorithm: 0x804" \
2379 -s "got named group: x448(001e)" \
2380 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2381 -C "received HelloRetryRequest message"
2382
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2383requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2384requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2385requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2386requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2387requires_gnutls_tls1_3
2388requires_gnutls_next_no_ticket
2389requires_gnutls_next_disable_tls13_compat
2390run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2391 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2392 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2393 0 \
2394 -s "Protocol is TLSv1.3" \
2395 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2396 -s "received signature algorithm: 0x403" \
2397 -s "got named group: secp256r1(0017)" \
2398 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2399 -C "received HelloRetryRequest message"
2400
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2401requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2402requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2403requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2404requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2405requires_gnutls_tls1_3
2406requires_gnutls_next_no_ticket
2407requires_gnutls_next_disable_tls13_compat
2408run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2409 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2410 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2411 0 \
2412 -s "Protocol is TLSv1.3" \
2413 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2414 -s "received signature algorithm: 0x503" \
2415 -s "got named group: secp256r1(0017)" \
2416 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2417 -C "received HelloRetryRequest message"
2418
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2419requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2420requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2421requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2422requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2423requires_gnutls_tls1_3
2424requires_gnutls_next_no_ticket
2425requires_gnutls_next_disable_tls13_compat
2426run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2427 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2428 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2429 0 \
2430 -s "Protocol is TLSv1.3" \
2431 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2432 -s "received signature algorithm: 0x603" \
2433 -s "got named group: secp256r1(0017)" \
2434 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2435 -C "received HelloRetryRequest message"
2436
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2437requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2438requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2439requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2440requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2441requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2442requires_gnutls_tls1_3
2443requires_gnutls_next_no_ticket
2444requires_gnutls_next_disable_tls13_compat
2445run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2446 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2447 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2448 0 \
2449 -s "Protocol is TLSv1.3" \
2450 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2451 -s "received signature algorithm: 0x804" \
2452 -s "got named group: secp256r1(0017)" \
2453 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2454 -C "received HelloRetryRequest message"
2455
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2456requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2457requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2458requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2459requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2460requires_gnutls_tls1_3
2461requires_gnutls_next_no_ticket
2462requires_gnutls_next_disable_tls13_compat
2463run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2464 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2465 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2466 0 \
2467 -s "Protocol is TLSv1.3" \
2468 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2469 -s "received signature algorithm: 0x403" \
2470 -s "got named group: secp384r1(0018)" \
2471 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2472 -C "received HelloRetryRequest message"
2473
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2474requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2475requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2476requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2477requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2478requires_gnutls_tls1_3
2479requires_gnutls_next_no_ticket
2480requires_gnutls_next_disable_tls13_compat
2481run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2482 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2483 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2484 0 \
2485 -s "Protocol is TLSv1.3" \
2486 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2487 -s "received signature algorithm: 0x503" \
2488 -s "got named group: secp384r1(0018)" \
2489 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2490 -C "received HelloRetryRequest message"
2491
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2492requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2493requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2494requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2495requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2496requires_gnutls_tls1_3
2497requires_gnutls_next_no_ticket
2498requires_gnutls_next_disable_tls13_compat
2499run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2500 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2501 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2502 0 \
2503 -s "Protocol is TLSv1.3" \
2504 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2505 -s "received signature algorithm: 0x603" \
2506 -s "got named group: secp384r1(0018)" \
2507 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2508 -C "received HelloRetryRequest message"
2509
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2510requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2511requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2512requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2513requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2514requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2515requires_gnutls_tls1_3
2516requires_gnutls_next_no_ticket
2517requires_gnutls_next_disable_tls13_compat
2518run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2519 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2520 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2521 0 \
2522 -s "Protocol is TLSv1.3" \
2523 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2524 -s "received signature algorithm: 0x804" \
2525 -s "got named group: secp384r1(0018)" \
2526 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2527 -C "received HelloRetryRequest message"
2528
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2529requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2530requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2531requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2532requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2533requires_gnutls_tls1_3
2534requires_gnutls_next_no_ticket
2535requires_gnutls_next_disable_tls13_compat
2536run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2537 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2538 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2539 0 \
2540 -s "Protocol is TLSv1.3" \
2541 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2542 -s "received signature algorithm: 0x403" \
2543 -s "got named group: secp521r1(0019)" \
2544 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2545 -C "received HelloRetryRequest message"
2546
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2547requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2548requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2549requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2550requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2551requires_gnutls_tls1_3
2552requires_gnutls_next_no_ticket
2553requires_gnutls_next_disable_tls13_compat
2554run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2555 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2556 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2557 0 \
2558 -s "Protocol is TLSv1.3" \
2559 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2560 -s "received signature algorithm: 0x503" \
2561 -s "got named group: secp521r1(0019)" \
2562 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2563 -C "received HelloRetryRequest message"
2564
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2565requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2566requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2567requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2568requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2569requires_gnutls_tls1_3
2570requires_gnutls_next_no_ticket
2571requires_gnutls_next_disable_tls13_compat
2572run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2573 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2574 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2575 0 \
2576 -s "Protocol is TLSv1.3" \
2577 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2578 -s "received signature algorithm: 0x603" \
2579 -s "got named group: secp521r1(0019)" \
2580 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2581 -C "received HelloRetryRequest message"
2582
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2583requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2584requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2585requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2586requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2587requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2588requires_gnutls_tls1_3
2589requires_gnutls_next_no_ticket
2590requires_gnutls_next_disable_tls13_compat
2591run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2592 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2593 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2594 0 \
2595 -s "Protocol is TLSv1.3" \
2596 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2597 -s "received signature algorithm: 0x804" \
2598 -s "got named group: secp521r1(0019)" \
2599 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2600 -C "received HelloRetryRequest message"
2601
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2602requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2603requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2604requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2605requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2606requires_gnutls_tls1_3
2607requires_gnutls_next_no_ticket
2608requires_gnutls_next_disable_tls13_compat
2609run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2610 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2611 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2612 0 \
2613 -s "Protocol is TLSv1.3" \
2614 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2615 -s "received signature algorithm: 0x403" \
2616 -s "got named group: x25519(001d)" \
2617 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2618 -C "received HelloRetryRequest message"
2619
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2620requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2621requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2622requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2623requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2624requires_gnutls_tls1_3
2625requires_gnutls_next_no_ticket
2626requires_gnutls_next_disable_tls13_compat
2627run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2628 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2629 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2630 0 \
2631 -s "Protocol is TLSv1.3" \
2632 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2633 -s "received signature algorithm: 0x503" \
2634 -s "got named group: x25519(001d)" \
2635 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2636 -C "received HelloRetryRequest message"
2637
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2638requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2639requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2640requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2641requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2642requires_gnutls_tls1_3
2643requires_gnutls_next_no_ticket
2644requires_gnutls_next_disable_tls13_compat
2645run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2646 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2647 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2648 0 \
2649 -s "Protocol is TLSv1.3" \
2650 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2651 -s "received signature algorithm: 0x603" \
2652 -s "got named group: x25519(001d)" \
2653 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2654 -C "received HelloRetryRequest message"
2655
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2656requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2657requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2658requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2659requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2660requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2661requires_gnutls_tls1_3
2662requires_gnutls_next_no_ticket
2663requires_gnutls_next_disable_tls13_compat
2664run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2665 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2666 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2667 0 \
2668 -s "Protocol is TLSv1.3" \
2669 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2670 -s "received signature algorithm: 0x804" \
2671 -s "got named group: x25519(001d)" \
2672 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2673 -C "received HelloRetryRequest message"
2674
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2675requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2676requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2677requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2678requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2679requires_gnutls_tls1_3
2680requires_gnutls_next_no_ticket
2681requires_gnutls_next_disable_tls13_compat
2682run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2683 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2684 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2685 0 \
2686 -s "Protocol is TLSv1.3" \
2687 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2688 -s "received signature algorithm: 0x403" \
2689 -s "got named group: x448(001e)" \
2690 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2691 -C "received HelloRetryRequest message"
2692
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2693requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2694requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2695requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2696requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2697requires_gnutls_tls1_3
2698requires_gnutls_next_no_ticket
2699requires_gnutls_next_disable_tls13_compat
2700run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2701 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2702 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2703 0 \
2704 -s "Protocol is TLSv1.3" \
2705 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2706 -s "received signature algorithm: 0x503" \
2707 -s "got named group: x448(001e)" \
2708 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2709 -C "received HelloRetryRequest message"
2710
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2711requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2712requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2713requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2714requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2715requires_gnutls_tls1_3
2716requires_gnutls_next_no_ticket
2717requires_gnutls_next_disable_tls13_compat
2718run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2719 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2720 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2721 0 \
2722 -s "Protocol is TLSv1.3" \
2723 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2724 -s "received signature algorithm: 0x603" \
2725 -s "got named group: x448(001e)" \
2726 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2727 -C "received HelloRetryRequest message"
2728
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2729requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2730requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2731requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2732requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2733requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2734requires_gnutls_tls1_3
2735requires_gnutls_next_no_ticket
2736requires_gnutls_next_disable_tls13_compat
2737run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2738 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2739 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2740 0 \
2741 -s "Protocol is TLSv1.3" \
2742 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
2743 -s "received signature algorithm: 0x804" \
2744 -s "got named group: x448(001e)" \
2745 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2746 -C "received HelloRetryRequest message"
2747
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2748requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2749requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2750requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2751requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2752requires_gnutls_tls1_3
2753requires_gnutls_next_no_ticket
2754requires_gnutls_next_disable_tls13_compat
2755run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2756 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2757 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2758 0 \
2759 -s "Protocol is TLSv1.3" \
2760 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2761 -s "received signature algorithm: 0x403" \
2762 -s "got named group: secp256r1(0017)" \
2763 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2764 -C "received HelloRetryRequest message"
2765
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2766requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2767requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2768requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2769requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2770requires_gnutls_tls1_3
2771requires_gnutls_next_no_ticket
2772requires_gnutls_next_disable_tls13_compat
2773run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2774 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2775 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2776 0 \
2777 -s "Protocol is TLSv1.3" \
2778 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2779 -s "received signature algorithm: 0x503" \
2780 -s "got named group: secp256r1(0017)" \
2781 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2782 -C "received HelloRetryRequest message"
2783
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2784requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2785requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2786requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2787requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2788requires_gnutls_tls1_3
2789requires_gnutls_next_no_ticket
2790requires_gnutls_next_disable_tls13_compat
2791run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2792 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2793 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2794 0 \
2795 -s "Protocol is TLSv1.3" \
2796 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2797 -s "received signature algorithm: 0x603" \
2798 -s "got named group: secp256r1(0017)" \
2799 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2800 -C "received HelloRetryRequest message"
2801
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2802requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2803requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2804requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2805requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2806requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2807requires_gnutls_tls1_3
2808requires_gnutls_next_no_ticket
2809requires_gnutls_next_disable_tls13_compat
2810run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2811 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2812 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2813 0 \
2814 -s "Protocol is TLSv1.3" \
2815 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2816 -s "received signature algorithm: 0x804" \
2817 -s "got named group: secp256r1(0017)" \
2818 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2819 -C "received HelloRetryRequest message"
2820
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2821requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2822requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2823requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2824requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2825requires_gnutls_tls1_3
2826requires_gnutls_next_no_ticket
2827requires_gnutls_next_disable_tls13_compat
2828run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2829 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2830 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2831 0 \
2832 -s "Protocol is TLSv1.3" \
2833 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2834 -s "received signature algorithm: 0x403" \
2835 -s "got named group: secp384r1(0018)" \
2836 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2837 -C "received HelloRetryRequest message"
2838
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2839requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2840requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2841requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2842requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2843requires_gnutls_tls1_3
2844requires_gnutls_next_no_ticket
2845requires_gnutls_next_disable_tls13_compat
2846run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2847 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2848 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2849 0 \
2850 -s "Protocol is TLSv1.3" \
2851 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2852 -s "received signature algorithm: 0x503" \
2853 -s "got named group: secp384r1(0018)" \
2854 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2855 -C "received HelloRetryRequest message"
2856
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2857requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2858requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2859requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2860requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2861requires_gnutls_tls1_3
2862requires_gnutls_next_no_ticket
2863requires_gnutls_next_disable_tls13_compat
2864run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2865 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2866 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2867 0 \
2868 -s "Protocol is TLSv1.3" \
2869 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2870 -s "received signature algorithm: 0x603" \
2871 -s "got named group: secp384r1(0018)" \
2872 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2873 -C "received HelloRetryRequest message"
2874
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2875requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2876requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2877requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2878requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2879requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2880requires_gnutls_tls1_3
2881requires_gnutls_next_no_ticket
2882requires_gnutls_next_disable_tls13_compat
2883run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2884 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2885 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2886 0 \
2887 -s "Protocol is TLSv1.3" \
2888 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2889 -s "received signature algorithm: 0x804" \
2890 -s "got named group: secp384r1(0018)" \
2891 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2892 -C "received HelloRetryRequest message"
2893
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2894requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2895requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2896requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2897requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2898requires_gnutls_tls1_3
2899requires_gnutls_next_no_ticket
2900requires_gnutls_next_disable_tls13_compat
2901run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2902 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2903 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2904 0 \
2905 -s "Protocol is TLSv1.3" \
2906 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2907 -s "received signature algorithm: 0x403" \
2908 -s "got named group: secp521r1(0019)" \
2909 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2910 -C "received HelloRetryRequest message"
2911
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2912requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2913requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2914requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2915requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2916requires_gnutls_tls1_3
2917requires_gnutls_next_no_ticket
2918requires_gnutls_next_disable_tls13_compat
2919run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2920 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2921 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2922 0 \
2923 -s "Protocol is TLSv1.3" \
2924 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2925 -s "received signature algorithm: 0x503" \
2926 -s "got named group: secp521r1(0019)" \
2927 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2928 -C "received HelloRetryRequest message"
2929
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2930requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2931requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2932requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2933requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2934requires_gnutls_tls1_3
2935requires_gnutls_next_no_ticket
2936requires_gnutls_next_disable_tls13_compat
2937run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2938 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2939 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2940 0 \
2941 -s "Protocol is TLSv1.3" \
2942 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2943 -s "received signature algorithm: 0x603" \
2944 -s "got named group: secp521r1(0019)" \
2945 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2946 -C "received HelloRetryRequest message"
2947
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2948requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2949requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2950requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2951requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2952requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
2953requires_gnutls_tls1_3
2954requires_gnutls_next_no_ticket
2955requires_gnutls_next_disable_tls13_compat
2956run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2957 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2958 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2959 0 \
2960 -s "Protocol is TLSv1.3" \
2961 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2962 -s "received signature algorithm: 0x804" \
2963 -s "got named group: secp521r1(0019)" \
2964 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2965 -C "received HelloRetryRequest message"
2966
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2967requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2968requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2969requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2970requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2971requires_gnutls_tls1_3
2972requires_gnutls_next_no_ticket
2973requires_gnutls_next_disable_tls13_compat
2974run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2975 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2976 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2977 0 \
2978 -s "Protocol is TLSv1.3" \
2979 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2980 -s "received signature algorithm: 0x403" \
2981 -s "got named group: x25519(001d)" \
2982 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2983 -C "received HelloRetryRequest message"
2984
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2985requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2986requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2987requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2988requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2989requires_gnutls_tls1_3
2990requires_gnutls_next_no_ticket
2991requires_gnutls_next_disable_tls13_compat
2992run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]2993 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
2994 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2995 0 \
2996 -s "Protocol is TLSv1.3" \
2997 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
2998 -s "received signature algorithm: 0x503" \
2999 -s "got named group: x25519(001d)" \
3000 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3001 -C "received HelloRetryRequest message"
3002
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3003requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3004requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3005requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3006requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3007requires_gnutls_tls1_3
3008requires_gnutls_next_no_ticket
3009requires_gnutls_next_disable_tls13_compat
3010run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3011 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3012 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3013 0 \
3014 -s "Protocol is TLSv1.3" \
3015 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3016 -s "received signature algorithm: 0x603" \
3017 -s "got named group: x25519(001d)" \
3018 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3019 -C "received HelloRetryRequest message"
3020
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3021requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3022requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3023requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3024requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3025requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
3026requires_gnutls_tls1_3
3027requires_gnutls_next_no_ticket
3028requires_gnutls_next_disable_tls13_compat
3029run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3030 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3031 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3032 0 \
3033 -s "Protocol is TLSv1.3" \
3034 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3035 -s "received signature algorithm: 0x804" \
3036 -s "got named group: x25519(001d)" \
3037 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3038 -C "received HelloRetryRequest message"
3039
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3040requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3041requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3042requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3043requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3044requires_gnutls_tls1_3
3045requires_gnutls_next_no_ticket
3046requires_gnutls_next_disable_tls13_compat
3047run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3048 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3049 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3050 0 \
3051 -s "Protocol is TLSv1.3" \
3052 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3053 -s "received signature algorithm: 0x403" \
3054 -s "got named group: x448(001e)" \
3055 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3056 -C "received HelloRetryRequest message"
3057
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3058requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3059requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3060requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3061requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3062requires_gnutls_tls1_3
3063requires_gnutls_next_no_ticket
3064requires_gnutls_next_disable_tls13_compat
3065run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3066 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3067 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3068 0 \
3069 -s "Protocol is TLSv1.3" \
3070 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3071 -s "received signature algorithm: 0x503" \
3072 -s "got named group: x448(001e)" \
3073 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3074 -C "received HelloRetryRequest message"
3075
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3076requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3077requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3078requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3079requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3080requires_gnutls_tls1_3
3081requires_gnutls_next_no_ticket
3082requires_gnutls_next_disable_tls13_compat
3083run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3084 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3085 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3086 0 \
3087 -s "Protocol is TLSv1.3" \
3088 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3089 -s "received signature algorithm: 0x603" \
3090 -s "got named group: x448(001e)" \
3091 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3092 -C "received HelloRetryRequest message"
3093
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3094requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3095requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3096requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3097requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3098requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
3099requires_gnutls_tls1_3
3100requires_gnutls_next_no_ticket
3101requires_gnutls_next_disable_tls13_compat
3102run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3103 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3104 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3105 0 \
3106 -s "Protocol is TLSv1.3" \
3107 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3108 -s "received signature algorithm: 0x804" \
3109 -s "got named group: x448(001e)" \
3110 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3111 -C "received HelloRetryRequest message"
3112
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3113requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3114requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3115requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3116requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3117requires_gnutls_tls1_3
3118requires_gnutls_next_no_ticket
3119requires_gnutls_next_disable_tls13_compat
3120run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3121 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3122 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3123 0 \
3124 -s "Protocol is TLSv1.3" \
3125 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3126 -s "received signature algorithm: 0x403" \
3127 -s "got named group: secp256r1(0017)" \
3128 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3129 -C "received HelloRetryRequest message"
3130
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3131requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3132requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3133requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3134requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3135requires_gnutls_tls1_3
3136requires_gnutls_next_no_ticket
3137requires_gnutls_next_disable_tls13_compat
3138run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3139 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3140 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3141 0 \
3142 -s "Protocol is TLSv1.3" \
3143 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3144 -s "received signature algorithm: 0x503" \
3145 -s "got named group: secp256r1(0017)" \
3146 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3147 -C "received HelloRetryRequest message"
3148
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3149requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3150requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3151requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3152requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3153requires_gnutls_tls1_3
3154requires_gnutls_next_no_ticket
3155requires_gnutls_next_disable_tls13_compat
3156run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3157 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3158 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3159 0 \
3160 -s "Protocol is TLSv1.3" \
3161 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3162 -s "received signature algorithm: 0x603" \
3163 -s "got named group: secp256r1(0017)" \
3164 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3165 -C "received HelloRetryRequest message"
3166
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3167requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3168requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3169requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3170requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3171requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
3172requires_gnutls_tls1_3
3173requires_gnutls_next_no_ticket
3174requires_gnutls_next_disable_tls13_compat
3175run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3176 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3177 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3178 0 \
3179 -s "Protocol is TLSv1.3" \
3180 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3181 -s "received signature algorithm: 0x804" \
3182 -s "got named group: secp256r1(0017)" \
3183 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3184 -C "received HelloRetryRequest message"
3185
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3186requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3187requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3188requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3189requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3190requires_gnutls_tls1_3
3191requires_gnutls_next_no_ticket
3192requires_gnutls_next_disable_tls13_compat
3193run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3194 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3195 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3196 0 \
3197 -s "Protocol is TLSv1.3" \
3198 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3199 -s "received signature algorithm: 0x403" \
3200 -s "got named group: secp384r1(0018)" \
3201 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3202 -C "received HelloRetryRequest message"
3203
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3204requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3205requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3206requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3207requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3208requires_gnutls_tls1_3
3209requires_gnutls_next_no_ticket
3210requires_gnutls_next_disable_tls13_compat
3211run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3212 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3213 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3214 0 \
3215 -s "Protocol is TLSv1.3" \
3216 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3217 -s "received signature algorithm: 0x503" \
3218 -s "got named group: secp384r1(0018)" \
3219 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3220 -C "received HelloRetryRequest message"
3221
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3222requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3223requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3224requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3225requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3226requires_gnutls_tls1_3
3227requires_gnutls_next_no_ticket
3228requires_gnutls_next_disable_tls13_compat
3229run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3230 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3231 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3232 0 \
3233 -s "Protocol is TLSv1.3" \
3234 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3235 -s "received signature algorithm: 0x603" \
3236 -s "got named group: secp384r1(0018)" \
3237 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3238 -C "received HelloRetryRequest message"
3239
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3240requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3241requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3242requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3243requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3244requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
3245requires_gnutls_tls1_3
3246requires_gnutls_next_no_ticket
3247requires_gnutls_next_disable_tls13_compat
3248run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3249 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3250 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3251 0 \
3252 -s "Protocol is TLSv1.3" \
3253 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3254 -s "received signature algorithm: 0x804" \
3255 -s "got named group: secp384r1(0018)" \
3256 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3257 -C "received HelloRetryRequest message"
3258
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3259requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3260requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3261requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3262requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3263requires_gnutls_tls1_3
3264requires_gnutls_next_no_ticket
3265requires_gnutls_next_disable_tls13_compat
3266run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3267 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3268 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3269 0 \
3270 -s "Protocol is TLSv1.3" \
3271 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3272 -s "received signature algorithm: 0x403" \
3273 -s "got named group: secp521r1(0019)" \
3274 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3275 -C "received HelloRetryRequest message"
3276
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3277requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3278requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3279requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3280requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3281requires_gnutls_tls1_3
3282requires_gnutls_next_no_ticket
3283requires_gnutls_next_disable_tls13_compat
3284run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3285 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3286 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3287 0 \
3288 -s "Protocol is TLSv1.3" \
3289 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3290 -s "received signature algorithm: 0x503" \
3291 -s "got named group: secp521r1(0019)" \
3292 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3293 -C "received HelloRetryRequest message"
3294
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3295requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3296requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3297requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3298requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3299requires_gnutls_tls1_3
3300requires_gnutls_next_no_ticket
3301requires_gnutls_next_disable_tls13_compat
3302run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3303 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3304 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3305 0 \
3306 -s "Protocol is TLSv1.3" \
3307 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3308 -s "received signature algorithm: 0x603" \
3309 -s "got named group: secp521r1(0019)" \
3310 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3311 -C "received HelloRetryRequest message"
3312
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3313requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3314requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3315requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3316requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3317requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
3318requires_gnutls_tls1_3
3319requires_gnutls_next_no_ticket
3320requires_gnutls_next_disable_tls13_compat
3321run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3322 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3323 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3324 0 \
3325 -s "Protocol is TLSv1.3" \
3326 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3327 -s "received signature algorithm: 0x804" \
3328 -s "got named group: secp521r1(0019)" \
3329 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3330 -C "received HelloRetryRequest message"
3331
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3332requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3333requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3334requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3335requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3336requires_gnutls_tls1_3
3337requires_gnutls_next_no_ticket
3338requires_gnutls_next_disable_tls13_compat
3339run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3340 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3341 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3342 0 \
3343 -s "Protocol is TLSv1.3" \
3344 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3345 -s "received signature algorithm: 0x403" \
3346 -s "got named group: x25519(001d)" \
3347 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3348 -C "received HelloRetryRequest message"
3349
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3350requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3351requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3352requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3353requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3354requires_gnutls_tls1_3
3355requires_gnutls_next_no_ticket
3356requires_gnutls_next_disable_tls13_compat
3357run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3358 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3359 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3360 0 \
3361 -s "Protocol is TLSv1.3" \
3362 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3363 -s "received signature algorithm: 0x503" \
3364 -s "got named group: x25519(001d)" \
3365 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3366 -C "received HelloRetryRequest message"
3367
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3368requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3369requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3370requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3371requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3372requires_gnutls_tls1_3
3373requires_gnutls_next_no_ticket
3374requires_gnutls_next_disable_tls13_compat
3375run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3376 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3377 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3378 0 \
3379 -s "Protocol is TLSv1.3" \
3380 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3381 -s "received signature algorithm: 0x603" \
3382 -s "got named group: x25519(001d)" \
3383 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3384 -C "received HelloRetryRequest message"
3385
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3386requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3387requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3388requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3389requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3390requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
3391requires_gnutls_tls1_3
3392requires_gnutls_next_no_ticket
3393requires_gnutls_next_disable_tls13_compat
3394run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3395 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3396 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3397 0 \
3398 -s "Protocol is TLSv1.3" \
3399 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3400 -s "received signature algorithm: 0x804" \
3401 -s "got named group: x25519(001d)" \
3402 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3403 -C "received HelloRetryRequest message"
3404
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3405requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3406requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3407requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3408requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3409requires_gnutls_tls1_3
3410requires_gnutls_next_no_ticket
3411requires_gnutls_next_disable_tls13_compat
3412run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3413 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3414 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3415 0 \
3416 -s "Protocol is TLSv1.3" \
3417 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3418 -s "received signature algorithm: 0x403" \
3419 -s "got named group: x448(001e)" \
3420 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3421 -C "received HelloRetryRequest message"
3422
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3423requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3424requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3425requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3426requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3427requires_gnutls_tls1_3
3428requires_gnutls_next_no_ticket
3429requires_gnutls_next_disable_tls13_compat
3430run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3431 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3432 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3433 0 \
3434 -s "Protocol is TLSv1.3" \
3435 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3436 -s "received signature algorithm: 0x503" \
3437 -s "got named group: x448(001e)" \
3438 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3439 -C "received HelloRetryRequest message"
3440
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3441requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3442requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3443requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3444requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3445requires_gnutls_tls1_3
3446requires_gnutls_next_no_ticket
3447requires_gnutls_next_disable_tls13_compat
3448run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3449 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3450 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3451 0 \
3452 -s "Protocol is TLSv1.3" \
3453 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3454 -s "received signature algorithm: 0x603" \
3455 -s "got named group: x448(001e)" \
3456 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3457 -C "received HelloRetryRequest message"
3458
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3459requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3460requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3461requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3462requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3463requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
3464requires_gnutls_tls1_3
3465requires_gnutls_next_no_ticket
3466requires_gnutls_next_disable_tls13_compat
3467run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3468 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
3469 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3470 0 \
3471 -s "Protocol is TLSv1.3" \
3472 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3473 -s "received signature algorithm: 0x804" \
3474 -s "got named group: x448(001e)" \
3475 -s "Verifying peer X.509 certificate... ok" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3476 -C "received HelloRetryRequest message"
3477
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3478requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3479requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3480requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3481requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3482requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3483run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3484 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3485 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3486 0 \
3487 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3488 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3489 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3490 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3491 -c "NamedGroup: secp256r1 ( 17 )" \
3492 -c "Verifying peer X.509 certificate... ok" \
3493 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3494
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3495requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3496requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3497requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3498requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3499requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3500run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3501 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3502 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3503 0 \
3504 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3505 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3506 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3507 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3508 -c "NamedGroup: secp256r1 ( 17 )" \
3509 -c "Verifying peer X.509 certificate... ok" \
3510 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3511
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3512requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3513requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3514requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3515requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3516requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3517run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3518 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3519 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3520 0 \
3521 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3522 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3523 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3524 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3525 -c "NamedGroup: secp256r1 ( 17 )" \
3526 -c "Verifying peer X.509 certificate... ok" \
3527 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3528
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3529requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3530requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3531requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3532requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3533requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3534requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3535run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3536 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3537 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3538 0 \
3539 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3540 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3541 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3542 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3543 -c "NamedGroup: secp256r1 ( 17 )" \
3544 -c "Verifying peer X.509 certificate... ok" \
3545 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3546
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3547requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3548requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3549requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3550requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3551requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3552run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3553 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3554 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3555 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3556 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3557 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3558 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3559 -c "Certificate Verify: Signature algorithm ( 0403 )" \
3560 -c "NamedGroup: secp384r1 ( 18 )" \
3561 -c "Verifying peer X.509 certificate... ok" \
3562 -C "received HelloRetryRequest message"
3563
3564requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3565requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3566requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3567requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3568requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3569run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3570 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3571 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3572 0 \
3573 -c "HTTP/1.0 200 ok" \
3574 -c "Protocol is TLSv1.3" \
3575 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3576 -c "Certificate Verify: Signature algorithm ( 0503 )" \
3577 -c "NamedGroup: secp384r1 ( 18 )" \
3578 -c "Verifying peer X.509 certificate... ok" \
3579 -C "received HelloRetryRequest message"
3580
3581requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3582requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3583requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3584requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3585requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3586run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3587 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3588 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3589 0 \
3590 -c "HTTP/1.0 200 ok" \
3591 -c "Protocol is TLSv1.3" \
3592 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3593 -c "Certificate Verify: Signature algorithm ( 0603 )" \
3594 -c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3595 -c "Verifying peer X.509 certificate... ok" \
3596 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3597
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3598requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3599requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3600requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3601requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3602requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3603requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3604run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3605 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3606 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3607 0 \
3608 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3609 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3610 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3611 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3612 -c "NamedGroup: secp384r1 ( 18 )" \
3613 -c "Verifying peer X.509 certificate... ok" \
3614 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3615
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3616requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3617requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3618requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3619requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3620requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3621run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3622 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3623 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3624 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3625 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3626 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3627 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3628 -c "Certificate Verify: Signature algorithm ( 0403 )" \
3629 -c "NamedGroup: secp521r1 ( 19 )" \
3630 -c "Verifying peer X.509 certificate... ok" \
3631 -C "received HelloRetryRequest message"
3632
3633requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3634requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3635requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3636requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3637requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3638run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3639 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3640 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3641 0 \
3642 -c "HTTP/1.0 200 ok" \
3643 -c "Protocol is TLSv1.3" \
3644 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3645 -c "Certificate Verify: Signature algorithm ( 0503 )" \
3646 -c "NamedGroup: secp521r1 ( 19 )" \
3647 -c "Verifying peer X.509 certificate... ok" \
3648 -C "received HelloRetryRequest message"
3649
3650requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3651requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3652requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3653requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3654requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3655run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3656 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3657 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3658 0 \
3659 -c "HTTP/1.0 200 ok" \
3660 -c "Protocol is TLSv1.3" \
3661 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3662 -c "Certificate Verify: Signature algorithm ( 0603 )" \
3663 -c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3664 -c "Verifying peer X.509 certificate... ok" \
3665 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3666
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3667requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3668requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3669requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3670requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3671requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3672requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3673run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3674 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3675 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3676 0 \
3677 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3678 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3679 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3680 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3681 -c "NamedGroup: secp521r1 ( 19 )" \
3682 -c "Verifying peer X.509 certificate... ok" \
3683 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3684
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3685requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3686requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3687requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3688requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3689requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3690run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3691 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3692 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3693 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3694 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3695 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3696 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3697 -c "Certificate Verify: Signature algorithm ( 0403 )" \
3698 -c "NamedGroup: x25519 ( 1d )" \
3699 -c "Verifying peer X.509 certificate... ok" \
3700 -C "received HelloRetryRequest message"
3701
3702requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3703requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3704requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3705requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3706requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3707run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3708 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3709 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3710 0 \
3711 -c "HTTP/1.0 200 ok" \
3712 -c "Protocol is TLSv1.3" \
3713 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3714 -c "Certificate Verify: Signature algorithm ( 0503 )" \
3715 -c "NamedGroup: x25519 ( 1d )" \
3716 -c "Verifying peer X.509 certificate... ok" \
3717 -C "received HelloRetryRequest message"
3718
3719requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3720requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3721requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3722requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3723requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3724run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3725 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3726 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3727 0 \
3728 -c "HTTP/1.0 200 ok" \
3729 -c "Protocol is TLSv1.3" \
3730 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3731 -c "Certificate Verify: Signature algorithm ( 0603 )" \
3732 -c "NamedGroup: x25519 ( 1d )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3733 -c "Verifying peer X.509 certificate... ok" \
3734 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3735
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3736requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3737requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3738requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3739requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3740requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3741requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3742run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3743 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3744 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3745 0 \
3746 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3747 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3748 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3749 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3750 -c "NamedGroup: x25519 ( 1d )" \
3751 -c "Verifying peer X.509 certificate... ok" \
3752 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3753
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3754requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3755requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3756requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3757requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3758requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3759run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3760 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3761 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3762 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3763 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3764 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3765 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3766 -c "Certificate Verify: Signature algorithm ( 0403 )" \
3767 -c "NamedGroup: x448 ( 1e )" \
3768 -c "Verifying peer X.509 certificate... ok" \
3769 -C "received HelloRetryRequest message"
3770
3771requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3772requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3773requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3774requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3775requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3776run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3777 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3778 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3779 0 \
3780 -c "HTTP/1.0 200 ok" \
3781 -c "Protocol is TLSv1.3" \
3782 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3783 -c "Certificate Verify: Signature algorithm ( 0503 )" \
3784 -c "NamedGroup: x448 ( 1e )" \
3785 -c "Verifying peer X.509 certificate... ok" \
3786 -C "received HelloRetryRequest message"
3787
3788requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3789requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3790requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3791requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3792requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3793run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3794 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3795 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3796 0 \
3797 -c "HTTP/1.0 200 ok" \
3798 -c "Protocol is TLSv1.3" \
3799 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3800 -c "Certificate Verify: Signature algorithm ( 0603 )" \
3801 -c "NamedGroup: x448 ( 1e )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3802 -c "Verifying peer X.509 certificate... ok" \
3803 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3804
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3805requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3806requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3807requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3808requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3809requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3810requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3811run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3812 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3813 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3814 0 \
3815 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3816 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3817 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
3818 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3819 -c "NamedGroup: x448 ( 1e )" \
3820 -c "Verifying peer X.509 certificate... ok" \
3821 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3822
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3823requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3824requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3825requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3826requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3827requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3828run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3829 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3830 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3831 0 \
3832 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3833 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3834 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
3835 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3836 -c "NamedGroup: secp256r1 ( 17 )" \
3837 -c "Verifying peer X.509 certificate... ok" \
3838 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3839
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3840requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3841requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3842requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3843requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3844requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3845run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3846 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3847 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3848 0 \
3849 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3850 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3851 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
3852 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3853 -c "NamedGroup: secp256r1 ( 17 )" \
3854 -c "Verifying peer X.509 certificate... ok" \
3855 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3856
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3857requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3858requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3859requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3860requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3861requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3862run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3863 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3864 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3865 0 \
3866 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3867 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3868 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
3869 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3870 -c "NamedGroup: secp256r1 ( 17 )" \
3871 -c "Verifying peer X.509 certificate... ok" \
3872 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3873
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3874requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3875requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3876requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3877requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3878requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3879requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3880run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3881 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3882 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3883 0 \
3884 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3885 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3886 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
3887 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3888 -c "NamedGroup: secp256r1 ( 17 )" \
3889 -c "Verifying peer X.509 certificate... ok" \
3890 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3891
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3892requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3893requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3894requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3895requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3896requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3897run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3898 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3899 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3900 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3901 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3902 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3903 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3904 -c "Certificate Verify: Signature algorithm ( 0403 )" \
3905 -c "NamedGroup: secp384r1 ( 18 )" \
3906 -c "Verifying peer X.509 certificate... ok" \
3907 -C "received HelloRetryRequest message"
3908
3909requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3910requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3911requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3912requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3913requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3914run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3915 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3916 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3917 0 \
3918 -c "HTTP/1.0 200 ok" \
3919 -c "Protocol is TLSv1.3" \
3920 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
3921 -c "Certificate Verify: Signature algorithm ( 0503 )" \
3922 -c "NamedGroup: secp384r1 ( 18 )" \
3923 -c "Verifying peer X.509 certificate... ok" \
3924 -C "received HelloRetryRequest message"
3925
3926requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3927requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3928requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3929requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3930requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3931run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3932 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3933 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3934 0 \
3935 -c "HTTP/1.0 200 ok" \
3936 -c "Protocol is TLSv1.3" \
3937 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
3938 -c "Certificate Verify: Signature algorithm ( 0603 )" \
3939 -c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3940 -c "Verifying peer X.509 certificate... ok" \
3941 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3942
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3943requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3944requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3945requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3946requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3947requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3948requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]3949run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3950 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3951 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3952 0 \
3953 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3954 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3955 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
3956 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]3957 -c "NamedGroup: secp384r1 ( 18 )" \
3958 -c "Verifying peer X.509 certificate... ok" \
3959 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]3960
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3961requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]3962requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3963requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]3964requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]3965requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3966run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3967 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3968 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3969 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3970 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]3971 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]3972 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3973 -c "Certificate Verify: Signature algorithm ( 0403 )" \
3974 -c "NamedGroup: secp521r1 ( 19 )" \
3975 -c "Verifying peer X.509 certificate... ok" \
3976 -C "received HelloRetryRequest message"
3977
3978requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3979requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3980requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3981requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3982requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3983run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]3984 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
3985 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3986 0 \
3987 -c "HTTP/1.0 200 ok" \
3988 -c "Protocol is TLSv1.3" \
3989 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
3990 -c "Certificate Verify: Signature algorithm ( 0503 )" \
3991 -c "NamedGroup: secp521r1 ( 19 )" \
3992 -c "Verifying peer X.509 certificate... ok" \
3993 -C "received HelloRetryRequest message"
3994
3995requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3996requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3997requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]3998requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3999requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4000run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4001 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4002 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4003 0 \
4004 -c "HTTP/1.0 200 ok" \
4005 -c "Protocol is TLSv1.3" \
4006 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4007 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4008 -c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4009 -c "Verifying peer X.509 certificate... ok" \
4010 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4011
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4012requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4013requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4014requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4015requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4016requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4017requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4018run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4019 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4020 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4021 0 \
4022 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4023 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4024 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4025 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4026 -c "NamedGroup: secp521r1 ( 19 )" \
4027 -c "Verifying peer X.509 certificate... ok" \
4028 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4029
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4030requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4031requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4032requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4033requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4034requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4035run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4036 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4037 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4038 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4039 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4040 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4041 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4042 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4043 -c "NamedGroup: x25519 ( 1d )" \
4044 -c "Verifying peer X.509 certificate... ok" \
4045 -C "received HelloRetryRequest message"
4046
4047requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4048requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4049requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4050requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4051requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4052run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4053 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4054 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4055 0 \
4056 -c "HTTP/1.0 200 ok" \
4057 -c "Protocol is TLSv1.3" \
4058 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4059 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4060 -c "NamedGroup: x25519 ( 1d )" \
4061 -c "Verifying peer X.509 certificate... ok" \
4062 -C "received HelloRetryRequest message"
4063
4064requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4065requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4066requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4067requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4068requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4069run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4070 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4071 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4072 0 \
4073 -c "HTTP/1.0 200 ok" \
4074 -c "Protocol is TLSv1.3" \
4075 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4076 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4077 -c "NamedGroup: x25519 ( 1d )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4078 -c "Verifying peer X.509 certificate... ok" \
4079 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4080
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4081requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4082requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4083requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4084requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4085requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4086requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4087run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4088 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4089 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4090 0 \
4091 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4092 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4093 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4094 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4095 -c "NamedGroup: x25519 ( 1d )" \
4096 -c "Verifying peer X.509 certificate... ok" \
4097 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4098
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4099requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4100requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4101requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4102requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4103requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4104run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4105 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4106 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4107 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4108 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4109 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4110 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4111 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4112 -c "NamedGroup: x448 ( 1e )" \
4113 -c "Verifying peer X.509 certificate... ok" \
4114 -C "received HelloRetryRequest message"
4115
4116requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4117requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4118requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4119requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4120requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4121run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4122 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4123 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4124 0 \
4125 -c "HTTP/1.0 200 ok" \
4126 -c "Protocol is TLSv1.3" \
4127 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4128 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4129 -c "NamedGroup: x448 ( 1e )" \
4130 -c "Verifying peer X.509 certificate... ok" \
4131 -C "received HelloRetryRequest message"
4132
4133requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4134requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4135requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4136requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4137requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4138run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4139 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4140 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4141 0 \
4142 -c "HTTP/1.0 200 ok" \
4143 -c "Protocol is TLSv1.3" \
4144 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4145 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4146 -c "NamedGroup: x448 ( 1e )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4147 -c "Verifying peer X.509 certificate... ok" \
4148 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4149
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4150requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4151requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4152requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4153requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4154requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4155requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4156run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4157 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4158 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4159 0 \
4160 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4161 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4162 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4163 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4164 -c "NamedGroup: x448 ( 1e )" \
4165 -c "Verifying peer X.509 certificate... ok" \
4166 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4167
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4168requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4169requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4170requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4171requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4172requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4173run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4174 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4175 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4176 0 \
4177 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4178 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4179 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4180 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4181 -c "NamedGroup: secp256r1 ( 17 )" \
4182 -c "Verifying peer X.509 certificate... ok" \
4183 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4184
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4185requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4186requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4187requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4188requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4189requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4190run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4191 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4192 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4193 0 \
4194 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4195 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4196 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4197 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4198 -c "NamedGroup: secp256r1 ( 17 )" \
4199 -c "Verifying peer X.509 certificate... ok" \
4200 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4201
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4202requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4203requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4204requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4205requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4206requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4207run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4208 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4209 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4210 0 \
4211 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4212 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4213 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4214 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4215 -c "NamedGroup: secp256r1 ( 17 )" \
4216 -c "Verifying peer X.509 certificate... ok" \
4217 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4218
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4219requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4220requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4221requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4222requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4223requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4224requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4225run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4226 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4227 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4228 0 \
4229 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4230 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4231 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4232 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4233 -c "NamedGroup: secp256r1 ( 17 )" \
4234 -c "Verifying peer X.509 certificate... ok" \
4235 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4236
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4237requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4238requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4239requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4240requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4241requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4242run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4243 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4244 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4245 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4246 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4247 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4248 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4249 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4250 -c "NamedGroup: secp384r1 ( 18 )" \
4251 -c "Verifying peer X.509 certificate... ok" \
4252 -C "received HelloRetryRequest message"
4253
4254requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4255requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4256requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4257requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4258requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4259run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4260 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4261 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4262 0 \
4263 -c "HTTP/1.0 200 ok" \
4264 -c "Protocol is TLSv1.3" \
4265 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4266 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4267 -c "NamedGroup: secp384r1 ( 18 )" \
4268 -c "Verifying peer X.509 certificate... ok" \
4269 -C "received HelloRetryRequest message"
4270
4271requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4272requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4273requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4274requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4275requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4276run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4277 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4278 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4279 0 \
4280 -c "HTTP/1.0 200 ok" \
4281 -c "Protocol is TLSv1.3" \
4282 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4283 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4284 -c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4285 -c "Verifying peer X.509 certificate... ok" \
4286 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4287
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4288requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4289requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4290requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4291requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4292requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4293requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4294run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4295 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4296 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4297 0 \
4298 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4299 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4300 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4301 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4302 -c "NamedGroup: secp384r1 ( 18 )" \
4303 -c "Verifying peer X.509 certificate... ok" \
4304 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4305
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4306requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4307requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4308requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4309requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4310requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4311run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4312 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4313 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4314 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4315 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4316 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4317 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4318 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4319 -c "NamedGroup: secp521r1 ( 19 )" \
4320 -c "Verifying peer X.509 certificate... ok" \
4321 -C "received HelloRetryRequest message"
4322
4323requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4324requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4325requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4326requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4327requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4328run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4329 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4330 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4331 0 \
4332 -c "HTTP/1.0 200 ok" \
4333 -c "Protocol is TLSv1.3" \
4334 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4335 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4336 -c "NamedGroup: secp521r1 ( 19 )" \
4337 -c "Verifying peer X.509 certificate... ok" \
4338 -C "received HelloRetryRequest message"
4339
4340requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4341requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4342requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4343requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4344requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4345run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4346 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4347 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4348 0 \
4349 -c "HTTP/1.0 200 ok" \
4350 -c "Protocol is TLSv1.3" \
4351 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4352 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4353 -c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4354 -c "Verifying peer X.509 certificate... ok" \
4355 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4356
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4357requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4358requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4359requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4360requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4361requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4362requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4363run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4364 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4365 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4366 0 \
4367 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4368 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4369 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4370 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4371 -c "NamedGroup: secp521r1 ( 19 )" \
4372 -c "Verifying peer X.509 certificate... ok" \
4373 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4374
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4375requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4376requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4377requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4378requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4379requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4380run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4381 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4382 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4383 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4384 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4385 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4386 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4387 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4388 -c "NamedGroup: x25519 ( 1d )" \
4389 -c "Verifying peer X.509 certificate... ok" \
4390 -C "received HelloRetryRequest message"
4391
4392requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4393requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4394requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4395requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4396requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4397run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4398 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4399 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4400 0 \
4401 -c "HTTP/1.0 200 ok" \
4402 -c "Protocol is TLSv1.3" \
4403 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4404 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4405 -c "NamedGroup: x25519 ( 1d )" \
4406 -c "Verifying peer X.509 certificate... ok" \
4407 -C "received HelloRetryRequest message"
4408
4409requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4410requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4411requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4412requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4413requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4414run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4415 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4416 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4417 0 \
4418 -c "HTTP/1.0 200 ok" \
4419 -c "Protocol is TLSv1.3" \
4420 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4421 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4422 -c "NamedGroup: x25519 ( 1d )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4423 -c "Verifying peer X.509 certificate... ok" \
4424 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4425
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4426requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4427requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4428requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4429requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4430requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4431requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4432run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4433 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4434 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4435 0 \
4436 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4437 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4438 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4439 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4440 -c "NamedGroup: x25519 ( 1d )" \
4441 -c "Verifying peer X.509 certificate... ok" \
4442 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4443
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4444requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4445requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4446requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4447requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4448requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4449run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4450 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4451 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4452 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4453 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4454 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4455 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4456 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4457 -c "NamedGroup: x448 ( 1e )" \
4458 -c "Verifying peer X.509 certificate... ok" \
4459 -C "received HelloRetryRequest message"
4460
4461requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4462requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4463requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4464requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4465requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4466run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4467 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4468 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4469 0 \
4470 -c "HTTP/1.0 200 ok" \
4471 -c "Protocol is TLSv1.3" \
4472 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4473 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4474 -c "NamedGroup: x448 ( 1e )" \
4475 -c "Verifying peer X.509 certificate... ok" \
4476 -C "received HelloRetryRequest message"
4477
4478requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4479requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4480requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4481requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4482requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4483run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4484 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4485 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4486 0 \
4487 -c "HTTP/1.0 200 ok" \
4488 -c "Protocol is TLSv1.3" \
4489 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4490 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4491 -c "NamedGroup: x448 ( 1e )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4492 -c "Verifying peer X.509 certificate... ok" \
4493 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4494
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4495requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4496requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4497requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4498requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4499requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4500requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4501run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4502 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4503 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4504 0 \
4505 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4506 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4507 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
4508 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4509 -c "NamedGroup: x448 ( 1e )" \
4510 -c "Verifying peer X.509 certificate... ok" \
4511 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4512
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4513requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4514requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4515requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4516requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4517requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4518run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4519 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4520 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4521 0 \
4522 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4523 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4524 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4525 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4526 -c "NamedGroup: secp256r1 ( 17 )" \
4527 -c "Verifying peer X.509 certificate... ok" \
4528 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4529
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4530requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4531requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4532requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4533requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4534requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4535run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4536 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4537 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4538 0 \
4539 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4540 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4541 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4542 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4543 -c "NamedGroup: secp256r1 ( 17 )" \
4544 -c "Verifying peer X.509 certificate... ok" \
4545 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4546
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4547requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4548requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4549requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4550requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4551requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4552run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4553 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4554 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4555 0 \
4556 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4557 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4558 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4559 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4560 -c "NamedGroup: secp256r1 ( 17 )" \
4561 -c "Verifying peer X.509 certificate... ok" \
4562 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4563
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4564requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4565requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4566requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4567requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4568requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4569requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4570run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4571 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4572 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4573 0 \
4574 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4575 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4576 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4577 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4578 -c "NamedGroup: secp256r1 ( 17 )" \
4579 -c "Verifying peer X.509 certificate... ok" \
4580 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4581
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4582requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4583requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4584requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4585requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4586requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4587run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4588 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4589 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4590 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4591 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4592 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4593 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4594 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4595 -c "NamedGroup: secp384r1 ( 18 )" \
4596 -c "Verifying peer X.509 certificate... ok" \
4597 -C "received HelloRetryRequest message"
4598
4599requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4600requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4601requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4602requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4603requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4604run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4605 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4606 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4607 0 \
4608 -c "HTTP/1.0 200 ok" \
4609 -c "Protocol is TLSv1.3" \
4610 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4611 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4612 -c "NamedGroup: secp384r1 ( 18 )" \
4613 -c "Verifying peer X.509 certificate... ok" \
4614 -C "received HelloRetryRequest message"
4615
4616requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4617requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4618requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4619requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4620requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4621run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4622 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4623 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4624 0 \
4625 -c "HTTP/1.0 200 ok" \
4626 -c "Protocol is TLSv1.3" \
4627 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4628 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4629 -c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4630 -c "Verifying peer X.509 certificate... ok" \
4631 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4632
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4633requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4634requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4635requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4636requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4637requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4638requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4639run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4640 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4641 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4642 0 \
4643 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4644 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4645 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4646 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4647 -c "NamedGroup: secp384r1 ( 18 )" \
4648 -c "Verifying peer X.509 certificate... ok" \
4649 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4650
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4651requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4652requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4653requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4654requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4655requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4656run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4657 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4658 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4659 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4660 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4661 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4662 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4663 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4664 -c "NamedGroup: secp521r1 ( 19 )" \
4665 -c "Verifying peer X.509 certificate... ok" \
4666 -C "received HelloRetryRequest message"
4667
4668requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4669requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4670requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4671requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4672requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4673run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4674 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4675 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4676 0 \
4677 -c "HTTP/1.0 200 ok" \
4678 -c "Protocol is TLSv1.3" \
4679 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4680 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4681 -c "NamedGroup: secp521r1 ( 19 )" \
4682 -c "Verifying peer X.509 certificate... ok" \
4683 -C "received HelloRetryRequest message"
4684
4685requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4686requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4687requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4688requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4689requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4690run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4691 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4692 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4693 0 \
4694 -c "HTTP/1.0 200 ok" \
4695 -c "Protocol is TLSv1.3" \
4696 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4697 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4698 -c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4699 -c "Verifying peer X.509 certificate... ok" \
4700 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4701
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4702requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4703requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4704requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4705requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4706requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4707requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4708run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4709 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4710 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4711 0 \
4712 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4713 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4714 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4715 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4716 -c "NamedGroup: secp521r1 ( 19 )" \
4717 -c "Verifying peer X.509 certificate... ok" \
4718 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4719
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4720requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4721requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4722requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4723requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4724requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4725run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4726 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4727 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4728 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4729 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4730 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4731 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4732 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4733 -c "NamedGroup: x25519 ( 1d )" \
4734 -c "Verifying peer X.509 certificate... ok" \
4735 -C "received HelloRetryRequest message"
4736
4737requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4738requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4739requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4740requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4741requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4742run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4743 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4744 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4745 0 \
4746 -c "HTTP/1.0 200 ok" \
4747 -c "Protocol is TLSv1.3" \
4748 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4749 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4750 -c "NamedGroup: x25519 ( 1d )" \
4751 -c "Verifying peer X.509 certificate... ok" \
4752 -C "received HelloRetryRequest message"
4753
4754requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4755requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4756requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4757requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4758requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4759run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4760 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4761 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4762 0 \
4763 -c "HTTP/1.0 200 ok" \
4764 -c "Protocol is TLSv1.3" \
4765 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4766 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4767 -c "NamedGroup: x25519 ( 1d )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4768 -c "Verifying peer X.509 certificate... ok" \
4769 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4770
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4771requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4772requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4773requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4774requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4775requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4776requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4777run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4778 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4779 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4780 0 \
4781 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4782 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4783 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4784 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4785 -c "NamedGroup: x25519 ( 1d )" \
4786 -c "Verifying peer X.509 certificate... ok" \
4787 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4788
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4789requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4790requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4791requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4792requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4793requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4794run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4795 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4796 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4797 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4798 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4799 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4800 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4801 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4802 -c "NamedGroup: x448 ( 1e )" \
4803 -c "Verifying peer X.509 certificate... ok" \
4804 -C "received HelloRetryRequest message"
4805
4806requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4807requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4808requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4809requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4810requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4811run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4812 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4813 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4814 0 \
4815 -c "HTTP/1.0 200 ok" \
4816 -c "Protocol is TLSv1.3" \
4817 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4818 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4819 -c "NamedGroup: x448 ( 1e )" \
4820 -c "Verifying peer X.509 certificate... ok" \
4821 -C "received HelloRetryRequest message"
4822
4823requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4824requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4825requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4826requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4827requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4828run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4829 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4830 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4831 0 \
4832 -c "HTTP/1.0 200 ok" \
4833 -c "Protocol is TLSv1.3" \
4834 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4835 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4836 -c "NamedGroup: x448 ( 1e )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4837 -c "Verifying peer X.509 certificate... ok" \
4838 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4839
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4840requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4841requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4842requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4843requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4844requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4845requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4846run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4847 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4848 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4849 0 \
4850 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4851 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4852 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
4853 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4854 -c "NamedGroup: x448 ( 1e )" \
4855 -c "Verifying peer X.509 certificate... ok" \
4856 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4857
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4858requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4859requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4860requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4861requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4862requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4863run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4864 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4865 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4866 0 \
4867 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4868 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4869 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
4870 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4871 -c "NamedGroup: secp256r1 ( 17 )" \
4872 -c "Verifying peer X.509 certificate... ok" \
4873 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4874
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4875requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4876requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4877requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4878requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4879requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4880run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4881 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4882 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4883 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4884 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4885 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4886 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4887 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4888 -c "NamedGroup: secp256r1 ( 17 )" \
4889 -c "Verifying peer X.509 certificate... ok" \
4890 -C "received HelloRetryRequest message"
4891
4892requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4893requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4894requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4895requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4896requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4897run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4898 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4899 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4900 0 \
4901 -c "HTTP/1.0 200 ok" \
4902 -c "Protocol is TLSv1.3" \
4903 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
4904 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4905 -c "NamedGroup: secp256r1 ( 17 )" \
4906 -c "Verifying peer X.509 certificate... ok" \
4907 -C "received HelloRetryRequest message"
4908
4909requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4910requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4911requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4912requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4913requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4914requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
4915run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4916 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4917 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4918 0 \
4919 -c "HTTP/1.0 200 ok" \
4920 -c "Protocol is TLSv1.3" \
4921 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
4922 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4923 -c "NamedGroup: secp256r1 ( 17 )" \
4924 -c "Verifying peer X.509 certificate... ok" \
4925 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4926
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4927requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4928requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4929requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4930requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4931requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4932run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4933 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4934 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4935 0 \
4936 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4937 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4938 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
4939 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4940 -c "NamedGroup: secp384r1 ( 18 )" \
4941 -c "Verifying peer X.509 certificate... ok" \
4942 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4943
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4944requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4945requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4946requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4947requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4948requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4949run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4950 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4951 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4952 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4953 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4954 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4955 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4956 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4957 -c "NamedGroup: secp384r1 ( 18 )" \
4958 -c "Verifying peer X.509 certificate... ok" \
4959 -C "received HelloRetryRequest message"
4960
4961requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4962requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4963requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4964requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4965requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4966run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4967 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4968 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4969 0 \
4970 -c "HTTP/1.0 200 ok" \
4971 -c "Protocol is TLSv1.3" \
4972 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
4973 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4974 -c "NamedGroup: secp384r1 ( 18 )" \
4975 -c "Verifying peer X.509 certificate... ok" \
4976 -C "received HelloRetryRequest message"
4977
4978requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4979requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4980requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4981requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
4982requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4983requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
4984run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]4985 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
4986 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4987 0 \
4988 -c "HTTP/1.0 200 ok" \
4989 -c "Protocol is TLSv1.3" \
4990 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
4991 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4992 -c "NamedGroup: secp384r1 ( 18 )" \
4993 -c "Verifying peer X.509 certificate... ok" \
4994 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4995
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4996requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4997requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4998requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]4999requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5000requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5001run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5002 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5003 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5004 0 \
5005 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5006 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5007 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
5008 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5009 -c "NamedGroup: secp521r1 ( 19 )" \
5010 -c "Verifying peer X.509 certificate... ok" \
5011 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5012
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5013requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5014requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5015requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]5016requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5017requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5018run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5019 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5020 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5021 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5022 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5023 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5024 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5025 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5026 -c "NamedGroup: secp521r1 ( 19 )" \
5027 -c "Verifying peer X.509 certificate... ok" \
5028 -C "received HelloRetryRequest message"
5029
5030requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5031requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5032requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5033requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5034requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5035run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5036 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5037 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5038 0 \
5039 -c "HTTP/1.0 200 ok" \
5040 -c "Protocol is TLSv1.3" \
5041 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
5042 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5043 -c "NamedGroup: secp521r1 ( 19 )" \
5044 -c "Verifying peer X.509 certificate... ok" \
5045 -C "received HelloRetryRequest message"
5046
5047requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5048requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5049requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5050requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5051requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5052requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5053run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5054 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5055 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5056 0 \
5057 -c "HTTP/1.0 200 ok" \
5058 -c "Protocol is TLSv1.3" \
5059 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
5060 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5061 -c "NamedGroup: secp521r1 ( 19 )" \
5062 -c "Verifying peer X.509 certificate... ok" \
5063 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5064
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5065requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5066requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5067requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]5068requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5069requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5070run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5071 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5072 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5073 0 \
5074 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5075 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5076 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
5077 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5078 -c "NamedGroup: x25519 ( 1d )" \
5079 -c "Verifying peer X.509 certificate... ok" \
5080 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5081
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5082requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5083requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5084requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]5085requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5086requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5087run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5088 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5089 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5090 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5091 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5092 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5093 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5094 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5095 -c "NamedGroup: x25519 ( 1d )" \
5096 -c "Verifying peer X.509 certificate... ok" \
5097 -C "received HelloRetryRequest message"
5098
5099requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5100requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5101requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5102requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5103requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5104run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5105 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5106 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5107 0 \
5108 -c "HTTP/1.0 200 ok" \
5109 -c "Protocol is TLSv1.3" \
5110 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
5111 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5112 -c "NamedGroup: x25519 ( 1d )" \
5113 -c "Verifying peer X.509 certificate... ok" \
5114 -C "received HelloRetryRequest message"
5115
5116requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5117requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5118requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5119requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5120requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5121requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5122run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5123 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5124 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5125 0 \
5126 -c "HTTP/1.0 200 ok" \
5127 -c "Protocol is TLSv1.3" \
5128 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
5129 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5130 -c "NamedGroup: x25519 ( 1d )" \
5131 -c "Verifying peer X.509 certificate... ok" \
5132 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5133
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5134requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5135requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5136requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]5137requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5138requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5139run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5140 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5141 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5142 0 \
5143 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5144 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5145 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
5146 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5147 -c "NamedGroup: x448 ( 1e )" \
5148 -c "Verifying peer X.509 certificate... ok" \
5149 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5150
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5151requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5152requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5153requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]5154requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5155requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5156run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5157 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5158 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5159 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5160 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5161 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5162 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5163 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5164 -c "NamedGroup: x448 ( 1e )" \
5165 -c "Verifying peer X.509 certificate... ok" \
5166 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5167
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5168requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5169requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5170requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]5171requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5172requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5173run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5174 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5175 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5176 0 \
5177 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5178 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5179 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5180 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5181 -c "NamedGroup: x448 ( 1e )" \
5182 -c "Verifying peer X.509 certificate... ok" \
5183 -C "received HelloRetryRequest message"
5184
5185requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5186requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5187requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5188requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5189requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5190requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5191run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5192 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
5193 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5194 0 \
5195 -c "HTTP/1.0 200 ok" \
5196 -c "Protocol is TLSv1.3" \
5197 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
5198 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5199 -c "NamedGroup: x448 ( 1e )" \
5200 -c "Verifying peer X.509 certificate... ok" \
5201 -C "received HelloRetryRequest message"
5202
5203requires_gnutls_tls1_3
5204requires_gnutls_next_no_ticket
5205requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5206requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5207requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5208requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5209requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5210run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5211 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5212 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5213 0 \
5214 -c "HTTP/1.0 200 OK" \
5215 -c "Protocol is TLSv1.3" \
5216 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5217 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5218 -c "NamedGroup: secp256r1 ( 17 )" \
5219 -c "Verifying peer X.509 certificate... ok" \
5220 -C "received HelloRetryRequest message"
5221
5222requires_gnutls_tls1_3
5223requires_gnutls_next_no_ticket
5224requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5225requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5226requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5227requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5228requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5229run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5230 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5231 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5232 0 \
5233 -c "HTTP/1.0 200 OK" \
5234 -c "Protocol is TLSv1.3" \
5235 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5236 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5237 -c "NamedGroup: secp256r1 ( 17 )" \
5238 -c "Verifying peer X.509 certificate... ok" \
5239 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5240
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5241requires_gnutls_tls1_3
5242requires_gnutls_next_no_ticket
5243requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5244requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5245requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]5246requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5247requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5248run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5249 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5250 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5251 0 \
5252 -c "HTTP/1.0 200 OK" \
5253 -c "Protocol is TLSv1.3" \
5254 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5255 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5256 -c "NamedGroup: secp256r1 ( 17 )" \
5257 -c "Verifying peer X.509 certificate... ok" \
5258 -C "received HelloRetryRequest message"
5259
5260requires_gnutls_tls1_3
5261requires_gnutls_next_no_ticket
5262requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5263requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5264requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5265requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5266requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5267requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5268run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5269 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5270 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5271 0 \
5272 -c "HTTP/1.0 200 OK" \
5273 -c "Protocol is TLSv1.3" \
5274 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5275 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5276 -c "NamedGroup: secp256r1 ( 17 )" \
5277 -c "Verifying peer X.509 certificate... ok" \
5278 -C "received HelloRetryRequest message"
5279
5280requires_gnutls_tls1_3
5281requires_gnutls_next_no_ticket
5282requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5283requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5284requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5285requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5286requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5287run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5288 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5289 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5290 0 \
5291 -c "HTTP/1.0 200 OK" \
5292 -c "Protocol is TLSv1.3" \
5293 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5294 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5295 -c "NamedGroup: secp384r1 ( 18 )" \
5296 -c "Verifying peer X.509 certificate... ok" \
5297 -C "received HelloRetryRequest message"
5298
5299requires_gnutls_tls1_3
5300requires_gnutls_next_no_ticket
5301requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5302requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5303requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5304requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5305requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5306run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5307 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5308 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5309 0 \
5310 -c "HTTP/1.0 200 OK" \
5311 -c "Protocol is TLSv1.3" \
5312 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5313 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5314 -c "NamedGroup: secp384r1 ( 18 )" \
5315 -c "Verifying peer X.509 certificate... ok" \
5316 -C "received HelloRetryRequest message"
5317
5318requires_gnutls_tls1_3
5319requires_gnutls_next_no_ticket
5320requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5321requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5322requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5323requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5324requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5325run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5326 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5327 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5328 0 \
5329 -c "HTTP/1.0 200 OK" \
5330 -c "Protocol is TLSv1.3" \
5331 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5332 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5333 -c "NamedGroup: secp384r1 ( 18 )" \
5334 -c "Verifying peer X.509 certificate... ok" \
5335 -C "received HelloRetryRequest message"
5336
5337requires_gnutls_tls1_3
5338requires_gnutls_next_no_ticket
5339requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5340requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5341requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5342requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5343requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5344requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5345run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5346 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5347 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5348 0 \
5349 -c "HTTP/1.0 200 OK" \
5350 -c "Protocol is TLSv1.3" \
5351 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5352 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5353 -c "NamedGroup: secp384r1 ( 18 )" \
5354 -c "Verifying peer X.509 certificate... ok" \
5355 -C "received HelloRetryRequest message"
5356
5357requires_gnutls_tls1_3
5358requires_gnutls_next_no_ticket
5359requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5360requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5361requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5362requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5363requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5364run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5365 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5366 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5367 0 \
5368 -c "HTTP/1.0 200 OK" \
5369 -c "Protocol is TLSv1.3" \
5370 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5371 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5372 -c "NamedGroup: secp521r1 ( 19 )" \
5373 -c "Verifying peer X.509 certificate... ok" \
5374 -C "received HelloRetryRequest message"
5375
5376requires_gnutls_tls1_3
5377requires_gnutls_next_no_ticket
5378requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5379requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5380requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5381requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5382requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5383run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5384 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5385 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5386 0 \
5387 -c "HTTP/1.0 200 OK" \
5388 -c "Protocol is TLSv1.3" \
5389 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5390 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5391 -c "NamedGroup: secp521r1 ( 19 )" \
5392 -c "Verifying peer X.509 certificate... ok" \
5393 -C "received HelloRetryRequest message"
5394
5395requires_gnutls_tls1_3
5396requires_gnutls_next_no_ticket
5397requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5398requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5399requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5400requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5401requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5402run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5403 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5404 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5405 0 \
5406 -c "HTTP/1.0 200 OK" \
5407 -c "Protocol is TLSv1.3" \
5408 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5409 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5410 -c "NamedGroup: secp521r1 ( 19 )" \
5411 -c "Verifying peer X.509 certificate... ok" \
5412 -C "received HelloRetryRequest message"
5413
5414requires_gnutls_tls1_3
5415requires_gnutls_next_no_ticket
5416requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5417requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5418requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5419requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5420requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5421requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5422run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5423 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5424 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5425 0 \
5426 -c "HTTP/1.0 200 OK" \
5427 -c "Protocol is TLSv1.3" \
5428 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5429 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5430 -c "NamedGroup: secp521r1 ( 19 )" \
5431 -c "Verifying peer X.509 certificate... ok" \
5432 -C "received HelloRetryRequest message"
5433
5434requires_gnutls_tls1_3
5435requires_gnutls_next_no_ticket
5436requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5437requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5438requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5439requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5440requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5441run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5442 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5443 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5444 0 \
5445 -c "HTTP/1.0 200 OK" \
5446 -c "Protocol is TLSv1.3" \
5447 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5448 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5449 -c "NamedGroup: x25519 ( 1d )" \
5450 -c "Verifying peer X.509 certificate... ok" \
5451 -C "received HelloRetryRequest message"
5452
5453requires_gnutls_tls1_3
5454requires_gnutls_next_no_ticket
5455requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5456requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5457requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5458requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5459requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5460run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5461 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5462 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5463 0 \
5464 -c "HTTP/1.0 200 OK" \
5465 -c "Protocol is TLSv1.3" \
5466 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5467 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5468 -c "NamedGroup: x25519 ( 1d )" \
5469 -c "Verifying peer X.509 certificate... ok" \
5470 -C "received HelloRetryRequest message"
5471
5472requires_gnutls_tls1_3
5473requires_gnutls_next_no_ticket
5474requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5475requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5476requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5477requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5478requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5479run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5480 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5481 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5482 0 \
5483 -c "HTTP/1.0 200 OK" \
5484 -c "Protocol is TLSv1.3" \
5485 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5486 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5487 -c "NamedGroup: x25519 ( 1d )" \
5488 -c "Verifying peer X.509 certificate... ok" \
5489 -C "received HelloRetryRequest message"
5490
5491requires_gnutls_tls1_3
5492requires_gnutls_next_no_ticket
5493requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5494requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5495requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5496requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5497requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5498requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5499run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5500 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5501 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5502 0 \
5503 -c "HTTP/1.0 200 OK" \
5504 -c "Protocol is TLSv1.3" \
5505 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5506 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5507 -c "NamedGroup: x25519 ( 1d )" \
5508 -c "Verifying peer X.509 certificate... ok" \
5509 -C "received HelloRetryRequest message"
5510
5511requires_gnutls_tls1_3
5512requires_gnutls_next_no_ticket
5513requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5514requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5515requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5516requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5517requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5518run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5519 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5520 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5521 0 \
5522 -c "HTTP/1.0 200 OK" \
5523 -c "Protocol is TLSv1.3" \
5524 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5525 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5526 -c "NamedGroup: x448 ( 1e )" \
5527 -c "Verifying peer X.509 certificate... ok" \
5528 -C "received HelloRetryRequest message"
5529
5530requires_gnutls_tls1_3
5531requires_gnutls_next_no_ticket
5532requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5533requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5534requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5535requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5536requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5537run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5538 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5539 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5540 0 \
5541 -c "HTTP/1.0 200 OK" \
5542 -c "Protocol is TLSv1.3" \
5543 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5544 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5545 -c "NamedGroup: x448 ( 1e )" \
5546 -c "Verifying peer X.509 certificate... ok" \
5547 -C "received HelloRetryRequest message"
5548
5549requires_gnutls_tls1_3
5550requires_gnutls_next_no_ticket
5551requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5552requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5553requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5554requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5555requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5556run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5557 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5558 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5559 0 \
5560 -c "HTTP/1.0 200 OK" \
5561 -c "Protocol is TLSv1.3" \
5562 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5563 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5564 -c "NamedGroup: x448 ( 1e )" \
5565 -c "Verifying peer X.509 certificate... ok" \
5566 -C "received HelloRetryRequest message"
5567
5568requires_gnutls_tls1_3
5569requires_gnutls_next_no_ticket
5570requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5571requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5572requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5573requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5574requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5575requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5576run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5577 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5578 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5579 0 \
5580 -c "HTTP/1.0 200 OK" \
5581 -c "Protocol is TLSv1.3" \
5582 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
5583 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5584 -c "NamedGroup: x448 ( 1e )" \
5585 -c "Verifying peer X.509 certificate... ok" \
5586 -C "received HelloRetryRequest message"
5587
5588requires_gnutls_tls1_3
5589requires_gnutls_next_no_ticket
5590requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5591requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5592requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5593requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5594requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5595run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5596 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5597 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5598 0 \
5599 -c "HTTP/1.0 200 OK" \
5600 -c "Protocol is TLSv1.3" \
5601 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5602 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5603 -c "NamedGroup: secp256r1 ( 17 )" \
5604 -c "Verifying peer X.509 certificate... ok" \
5605 -C "received HelloRetryRequest message"
5606
5607requires_gnutls_tls1_3
5608requires_gnutls_next_no_ticket
5609requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5610requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5611requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5612requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5613requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5614run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5615 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5616 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5617 0 \
5618 -c "HTTP/1.0 200 OK" \
5619 -c "Protocol is TLSv1.3" \
5620 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5621 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5622 -c "NamedGroup: secp256r1 ( 17 )" \
5623 -c "Verifying peer X.509 certificate... ok" \
5624 -C "received HelloRetryRequest message"
5625
5626requires_gnutls_tls1_3
5627requires_gnutls_next_no_ticket
5628requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5629requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5630requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5631requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5632requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5633run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5634 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5635 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5636 0 \
5637 -c "HTTP/1.0 200 OK" \
5638 -c "Protocol is TLSv1.3" \
5639 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5640 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5641 -c "NamedGroup: secp256r1 ( 17 )" \
5642 -c "Verifying peer X.509 certificate... ok" \
5643 -C "received HelloRetryRequest message"
5644
5645requires_gnutls_tls1_3
5646requires_gnutls_next_no_ticket
5647requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5648requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5649requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5650requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5651requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5652requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5653run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5654 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5655 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5656 0 \
5657 -c "HTTP/1.0 200 OK" \
5658 -c "Protocol is TLSv1.3" \
5659 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5660 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5661 -c "NamedGroup: secp256r1 ( 17 )" \
5662 -c "Verifying peer X.509 certificate... ok" \
5663 -C "received HelloRetryRequest message"
5664
5665requires_gnutls_tls1_3
5666requires_gnutls_next_no_ticket
5667requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5668requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5669requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5670requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5671requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5672run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5673 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5674 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5675 0 \
5676 -c "HTTP/1.0 200 OK" \
5677 -c "Protocol is TLSv1.3" \
5678 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5679 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5680 -c "NamedGroup: secp384r1 ( 18 )" \
5681 -c "Verifying peer X.509 certificate... ok" \
5682 -C "received HelloRetryRequest message"
5683
5684requires_gnutls_tls1_3
5685requires_gnutls_next_no_ticket
5686requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5687requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5688requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5689requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5690requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5691run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5692 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5693 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5694 0 \
5695 -c "HTTP/1.0 200 OK" \
5696 -c "Protocol is TLSv1.3" \
5697 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5698 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5699 -c "NamedGroup: secp384r1 ( 18 )" \
5700 -c "Verifying peer X.509 certificate... ok" \
5701 -C "received HelloRetryRequest message"
5702
5703requires_gnutls_tls1_3
5704requires_gnutls_next_no_ticket
5705requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5706requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5707requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5708requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5709requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5710run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5711 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5712 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5713 0 \
5714 -c "HTTP/1.0 200 OK" \
5715 -c "Protocol is TLSv1.3" \
5716 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5717 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5718 -c "NamedGroup: secp384r1 ( 18 )" \
5719 -c "Verifying peer X.509 certificate... ok" \
5720 -C "received HelloRetryRequest message"
5721
5722requires_gnutls_tls1_3
5723requires_gnutls_next_no_ticket
5724requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5725requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5726requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5727requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5728requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5729requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5730run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5731 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5732 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5733 0 \
5734 -c "HTTP/1.0 200 OK" \
5735 -c "Protocol is TLSv1.3" \
5736 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5737 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5738 -c "NamedGroup: secp384r1 ( 18 )" \
5739 -c "Verifying peer X.509 certificate... ok" \
5740 -C "received HelloRetryRequest message"
5741
5742requires_gnutls_tls1_3
5743requires_gnutls_next_no_ticket
5744requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5745requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5746requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5747requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5748requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5749run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5750 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5751 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5752 0 \
5753 -c "HTTP/1.0 200 OK" \
5754 -c "Protocol is TLSv1.3" \
5755 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5756 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5757 -c "NamedGroup: secp521r1 ( 19 )" \
5758 -c "Verifying peer X.509 certificate... ok" \
5759 -C "received HelloRetryRequest message"
5760
5761requires_gnutls_tls1_3
5762requires_gnutls_next_no_ticket
5763requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5764requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5765requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5766requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5767requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5768run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5769 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5770 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5771 0 \
5772 -c "HTTP/1.0 200 OK" \
5773 -c "Protocol is TLSv1.3" \
5774 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5775 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5776 -c "NamedGroup: secp521r1 ( 19 )" \
5777 -c "Verifying peer X.509 certificate... ok" \
5778 -C "received HelloRetryRequest message"
5779
5780requires_gnutls_tls1_3
5781requires_gnutls_next_no_ticket
5782requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5783requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5784requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5785requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5786requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5787run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5788 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5789 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5790 0 \
5791 -c "HTTP/1.0 200 OK" \
5792 -c "Protocol is TLSv1.3" \
5793 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5794 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5795 -c "NamedGroup: secp521r1 ( 19 )" \
5796 -c "Verifying peer X.509 certificate... ok" \
5797 -C "received HelloRetryRequest message"
5798
5799requires_gnutls_tls1_3
5800requires_gnutls_next_no_ticket
5801requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5802requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5803requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5804requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5805requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5806requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5807run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5808 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5809 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5810 0 \
5811 -c "HTTP/1.0 200 OK" \
5812 -c "Protocol is TLSv1.3" \
5813 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5814 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5815 -c "NamedGroup: secp521r1 ( 19 )" \
5816 -c "Verifying peer X.509 certificate... ok" \
5817 -C "received HelloRetryRequest message"
5818
5819requires_gnutls_tls1_3
5820requires_gnutls_next_no_ticket
5821requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5822requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5823requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5824requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5825requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5826run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5827 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5828 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5829 0 \
5830 -c "HTTP/1.0 200 OK" \
5831 -c "Protocol is TLSv1.3" \
5832 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5833 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5834 -c "NamedGroup: x25519 ( 1d )" \
5835 -c "Verifying peer X.509 certificate... ok" \
5836 -C "received HelloRetryRequest message"
5837
5838requires_gnutls_tls1_3
5839requires_gnutls_next_no_ticket
5840requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5841requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5842requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5843requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5844requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5845run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5846 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5847 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5848 0 \
5849 -c "HTTP/1.0 200 OK" \
5850 -c "Protocol is TLSv1.3" \
5851 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5852 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5853 -c "NamedGroup: x25519 ( 1d )" \
5854 -c "Verifying peer X.509 certificate... ok" \
5855 -C "received HelloRetryRequest message"
5856
5857requires_gnutls_tls1_3
5858requires_gnutls_next_no_ticket
5859requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5860requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5861requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5862requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5863requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5864run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5865 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5866 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5867 0 \
5868 -c "HTTP/1.0 200 OK" \
5869 -c "Protocol is TLSv1.3" \
5870 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5871 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5872 -c "NamedGroup: x25519 ( 1d )" \
5873 -c "Verifying peer X.509 certificate... ok" \
5874 -C "received HelloRetryRequest message"
5875
5876requires_gnutls_tls1_3
5877requires_gnutls_next_no_ticket
5878requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5879requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5880requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5881requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5882requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5883requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5884run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5885 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5886 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5887 0 \
5888 -c "HTTP/1.0 200 OK" \
5889 -c "Protocol is TLSv1.3" \
5890 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5891 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5892 -c "NamedGroup: x25519 ( 1d )" \
5893 -c "Verifying peer X.509 certificate... ok" \
5894 -C "received HelloRetryRequest message"
5895
5896requires_gnutls_tls1_3
5897requires_gnutls_next_no_ticket
5898requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5899requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5900requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5901requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5902requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5903run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5904 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5905 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5906 0 \
5907 -c "HTTP/1.0 200 OK" \
5908 -c "Protocol is TLSv1.3" \
5909 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5910 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5911 -c "NamedGroup: x448 ( 1e )" \
5912 -c "Verifying peer X.509 certificate... ok" \
5913 -C "received HelloRetryRequest message"
5914
5915requires_gnutls_tls1_3
5916requires_gnutls_next_no_ticket
5917requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5918requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5919requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5920requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5921requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5922run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5923 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5924 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5925 0 \
5926 -c "HTTP/1.0 200 OK" \
5927 -c "Protocol is TLSv1.3" \
5928 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5929 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5930 -c "NamedGroup: x448 ( 1e )" \
5931 -c "Verifying peer X.509 certificate... ok" \
5932 -C "received HelloRetryRequest message"
5933
5934requires_gnutls_tls1_3
5935requires_gnutls_next_no_ticket
5936requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5937requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5938requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5939requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5940requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5941run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5942 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5943 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5944 0 \
5945 -c "HTTP/1.0 200 OK" \
5946 -c "Protocol is TLSv1.3" \
5947 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5948 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5949 -c "NamedGroup: x448 ( 1e )" \
5950 -c "Verifying peer X.509 certificate... ok" \
5951 -C "received HelloRetryRequest message"
5952
5953requires_gnutls_tls1_3
5954requires_gnutls_next_no_ticket
5955requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5956requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5957requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5958requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5959requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5960requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
5961run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5962 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5963 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5964 0 \
5965 -c "HTTP/1.0 200 OK" \
5966 -c "Protocol is TLSv1.3" \
5967 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5968 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5969 -c "NamedGroup: x448 ( 1e )" \
5970 -c "Verifying peer X.509 certificate... ok" \
5971 -C "received HelloRetryRequest message"
5972
5973requires_gnutls_tls1_3
5974requires_gnutls_next_no_ticket
5975requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5976requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5977requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5978requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5979requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5980run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]5981 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]5982 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5983 0 \
5984 -c "HTTP/1.0 200 OK" \
5985 -c "Protocol is TLSv1.3" \
5986 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5987 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5988 -c "NamedGroup: secp256r1 ( 17 )" \
5989 -c "Verifying peer X.509 certificate... ok" \
5990 -C "received HelloRetryRequest message"
5991
5992requires_gnutls_tls1_3
5993requires_gnutls_next_no_ticket
5994requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5995requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5996requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5997requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
5998requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5999run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6000 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6001 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6002 0 \
6003 -c "HTTP/1.0 200 OK" \
6004 -c "Protocol is TLSv1.3" \
6005 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6006 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6007 -c "NamedGroup: secp256r1 ( 17 )" \
6008 -c "Verifying peer X.509 certificate... ok" \
6009 -C "received HelloRetryRequest message"
6010
6011requires_gnutls_tls1_3
6012requires_gnutls_next_no_ticket
6013requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6014requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6015requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6016requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6017requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6018run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6019 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6020 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6021 0 \
6022 -c "HTTP/1.0 200 OK" \
6023 -c "Protocol is TLSv1.3" \
6024 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6025 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6026 -c "NamedGroup: secp256r1 ( 17 )" \
6027 -c "Verifying peer X.509 certificate... ok" \
6028 -C "received HelloRetryRequest message"
6029
6030requires_gnutls_tls1_3
6031requires_gnutls_next_no_ticket
6032requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6033requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6034requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6035requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6036requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6037requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6038run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6039 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6040 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6041 0 \
6042 -c "HTTP/1.0 200 OK" \
6043 -c "Protocol is TLSv1.3" \
6044 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6045 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6046 -c "NamedGroup: secp256r1 ( 17 )" \
6047 -c "Verifying peer X.509 certificate... ok" \
6048 -C "received HelloRetryRequest message"
6049
6050requires_gnutls_tls1_3
6051requires_gnutls_next_no_ticket
6052requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6053requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6054requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6055requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6056requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6057run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6058 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6059 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6060 0 \
6061 -c "HTTP/1.0 200 OK" \
6062 -c "Protocol is TLSv1.3" \
6063 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6064 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6065 -c "NamedGroup: secp384r1 ( 18 )" \
6066 -c "Verifying peer X.509 certificate... ok" \
6067 -C "received HelloRetryRequest message"
6068
6069requires_gnutls_tls1_3
6070requires_gnutls_next_no_ticket
6071requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6072requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6073requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6074requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6075requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6076run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6077 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6078 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6079 0 \
6080 -c "HTTP/1.0 200 OK" \
6081 -c "Protocol is TLSv1.3" \
6082 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6083 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6084 -c "NamedGroup: secp384r1 ( 18 )" \
6085 -c "Verifying peer X.509 certificate... ok" \
6086 -C "received HelloRetryRequest message"
6087
6088requires_gnutls_tls1_3
6089requires_gnutls_next_no_ticket
6090requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6091requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6092requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6093requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6094requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6095run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6096 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6097 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6098 0 \
6099 -c "HTTP/1.0 200 OK" \
6100 -c "Protocol is TLSv1.3" \
6101 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6102 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6103 -c "NamedGroup: secp384r1 ( 18 )" \
6104 -c "Verifying peer X.509 certificate... ok" \
6105 -C "received HelloRetryRequest message"
6106
6107requires_gnutls_tls1_3
6108requires_gnutls_next_no_ticket
6109requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6110requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6111requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6112requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6113requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6114requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6115run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6116 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6117 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6118 0 \
6119 -c "HTTP/1.0 200 OK" \
6120 -c "Protocol is TLSv1.3" \
6121 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6122 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6123 -c "NamedGroup: secp384r1 ( 18 )" \
6124 -c "Verifying peer X.509 certificate... ok" \
6125 -C "received HelloRetryRequest message"
6126
6127requires_gnutls_tls1_3
6128requires_gnutls_next_no_ticket
6129requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6130requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6131requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6132requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6133requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6134run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6135 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6136 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6137 0 \
6138 -c "HTTP/1.0 200 OK" \
6139 -c "Protocol is TLSv1.3" \
6140 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6141 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6142 -c "NamedGroup: secp521r1 ( 19 )" \
6143 -c "Verifying peer X.509 certificate... ok" \
6144 -C "received HelloRetryRequest message"
6145
6146requires_gnutls_tls1_3
6147requires_gnutls_next_no_ticket
6148requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6149requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6150requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6151requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6152requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6153run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6154 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6155 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6156 0 \
6157 -c "HTTP/1.0 200 OK" \
6158 -c "Protocol is TLSv1.3" \
6159 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6160 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6161 -c "NamedGroup: secp521r1 ( 19 )" \
6162 -c "Verifying peer X.509 certificate... ok" \
6163 -C "received HelloRetryRequest message"
6164
6165requires_gnutls_tls1_3
6166requires_gnutls_next_no_ticket
6167requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6168requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6169requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6170requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6171requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6172run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6173 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6174 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6175 0 \
6176 -c "HTTP/1.0 200 OK" \
6177 -c "Protocol is TLSv1.3" \
6178 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6179 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6180 -c "NamedGroup: secp521r1 ( 19 )" \
6181 -c "Verifying peer X.509 certificate... ok" \
6182 -C "received HelloRetryRequest message"
6183
6184requires_gnutls_tls1_3
6185requires_gnutls_next_no_ticket
6186requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6187requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6188requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6189requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6190requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6191requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6192run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6193 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6194 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6195 0 \
6196 -c "HTTP/1.0 200 OK" \
6197 -c "Protocol is TLSv1.3" \
6198 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6199 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6200 -c "NamedGroup: secp521r1 ( 19 )" \
6201 -c "Verifying peer X.509 certificate... ok" \
6202 -C "received HelloRetryRequest message"
6203
6204requires_gnutls_tls1_3
6205requires_gnutls_next_no_ticket
6206requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6207requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6208requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6209requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6210requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6211run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6212 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6213 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6214 0 \
6215 -c "HTTP/1.0 200 OK" \
6216 -c "Protocol is TLSv1.3" \
6217 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6218 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6219 -c "NamedGroup: x25519 ( 1d )" \
6220 -c "Verifying peer X.509 certificate... ok" \
6221 -C "received HelloRetryRequest message"
6222
6223requires_gnutls_tls1_3
6224requires_gnutls_next_no_ticket
6225requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6226requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6227requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6228requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6229requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6230run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6231 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6232 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6233 0 \
6234 -c "HTTP/1.0 200 OK" \
6235 -c "Protocol is TLSv1.3" \
6236 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6237 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6238 -c "NamedGroup: x25519 ( 1d )" \
6239 -c "Verifying peer X.509 certificate... ok" \
6240 -C "received HelloRetryRequest message"
6241
6242requires_gnutls_tls1_3
6243requires_gnutls_next_no_ticket
6244requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6245requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6246requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6247requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6248requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6249run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6250 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6251 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6252 0 \
6253 -c "HTTP/1.0 200 OK" \
6254 -c "Protocol is TLSv1.3" \
6255 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6256 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6257 -c "NamedGroup: x25519 ( 1d )" \
6258 -c "Verifying peer X.509 certificate... ok" \
6259 -C "received HelloRetryRequest message"
6260
6261requires_gnutls_tls1_3
6262requires_gnutls_next_no_ticket
6263requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6264requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6265requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6266requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6267requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6268requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6269run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6270 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6271 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6272 0 \
6273 -c "HTTP/1.0 200 OK" \
6274 -c "Protocol is TLSv1.3" \
6275 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6276 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6277 -c "NamedGroup: x25519 ( 1d )" \
6278 -c "Verifying peer X.509 certificate... ok" \
6279 -C "received HelloRetryRequest message"
6280
6281requires_gnutls_tls1_3
6282requires_gnutls_next_no_ticket
6283requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6284requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6285requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6286requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6287requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6288run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6289 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6290 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6291 0 \
6292 -c "HTTP/1.0 200 OK" \
6293 -c "Protocol is TLSv1.3" \
6294 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6295 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6296 -c "NamedGroup: x448 ( 1e )" \
6297 -c "Verifying peer X.509 certificate... ok" \
6298 -C "received HelloRetryRequest message"
6299
6300requires_gnutls_tls1_3
6301requires_gnutls_next_no_ticket
6302requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6303requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6304requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6305requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6306requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6307run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6308 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6309 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6310 0 \
6311 -c "HTTP/1.0 200 OK" \
6312 -c "Protocol is TLSv1.3" \
6313 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6314 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6315 -c "NamedGroup: x448 ( 1e )" \
6316 -c "Verifying peer X.509 certificate... ok" \
6317 -C "received HelloRetryRequest message"
6318
6319requires_gnutls_tls1_3
6320requires_gnutls_next_no_ticket
6321requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6322requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6323requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6324requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6325requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6326run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6327 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6328 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6329 0 \
6330 -c "HTTP/1.0 200 OK" \
6331 -c "Protocol is TLSv1.3" \
6332 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6333 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6334 -c "NamedGroup: x448 ( 1e )" \
6335 -c "Verifying peer X.509 certificate... ok" \
6336 -C "received HelloRetryRequest message"
6337
6338requires_gnutls_tls1_3
6339requires_gnutls_next_no_ticket
6340requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6341requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6342requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6343requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6344requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6345requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6346run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6347 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6348 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6349 0 \
6350 -c "HTTP/1.0 200 OK" \
6351 -c "Protocol is TLSv1.3" \
6352 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
6353 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6354 -c "NamedGroup: x448 ( 1e )" \
6355 -c "Verifying peer X.509 certificate... ok" \
6356 -C "received HelloRetryRequest message"
6357
6358requires_gnutls_tls1_3
6359requires_gnutls_next_no_ticket
6360requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6361requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6362requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6363requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6364requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6365run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6366 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6367 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6368 0 \
6369 -c "HTTP/1.0 200 OK" \
6370 -c "Protocol is TLSv1.3" \
6371 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6372 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6373 -c "NamedGroup: secp256r1 ( 17 )" \
6374 -c "Verifying peer X.509 certificate... ok" \
6375 -C "received HelloRetryRequest message"
6376
6377requires_gnutls_tls1_3
6378requires_gnutls_next_no_ticket
6379requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6380requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6381requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6382requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6383requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6384run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6385 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6386 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6387 0 \
6388 -c "HTTP/1.0 200 OK" \
6389 -c "Protocol is TLSv1.3" \
6390 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6391 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6392 -c "NamedGroup: secp256r1 ( 17 )" \
6393 -c "Verifying peer X.509 certificate... ok" \
6394 -C "received HelloRetryRequest message"
6395
6396requires_gnutls_tls1_3
6397requires_gnutls_next_no_ticket
6398requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6399requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6400requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6401requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6402requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6403run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6404 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6405 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6406 0 \
6407 -c "HTTP/1.0 200 OK" \
6408 -c "Protocol is TLSv1.3" \
6409 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6410 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6411 -c "NamedGroup: secp256r1 ( 17 )" \
6412 -c "Verifying peer X.509 certificate... ok" \
6413 -C "received HelloRetryRequest message"
6414
6415requires_gnutls_tls1_3
6416requires_gnutls_next_no_ticket
6417requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6418requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6419requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6420requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6421requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6422requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6423run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6424 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6425 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6426 0 \
6427 -c "HTTP/1.0 200 OK" \
6428 -c "Protocol is TLSv1.3" \
6429 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6430 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6431 -c "NamedGroup: secp256r1 ( 17 )" \
6432 -c "Verifying peer X.509 certificate... ok" \
6433 -C "received HelloRetryRequest message"
6434
6435requires_gnutls_tls1_3
6436requires_gnutls_next_no_ticket
6437requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6438requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6439requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6440requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6441requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6442run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6443 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6444 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6445 0 \
6446 -c "HTTP/1.0 200 OK" \
6447 -c "Protocol is TLSv1.3" \
6448 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6449 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6450 -c "NamedGroup: secp384r1 ( 18 )" \
6451 -c "Verifying peer X.509 certificate... ok" \
6452 -C "received HelloRetryRequest message"
6453
6454requires_gnutls_tls1_3
6455requires_gnutls_next_no_ticket
6456requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6457requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6458requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6459requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6460requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6461run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6462 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6463 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6464 0 \
6465 -c "HTTP/1.0 200 OK" \
6466 -c "Protocol is TLSv1.3" \
6467 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6468 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6469 -c "NamedGroup: secp384r1 ( 18 )" \
6470 -c "Verifying peer X.509 certificate... ok" \
6471 -C "received HelloRetryRequest message"
6472
6473requires_gnutls_tls1_3
6474requires_gnutls_next_no_ticket
6475requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6476requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6477requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6478requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6479requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6480run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6481 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6482 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6483 0 \
6484 -c "HTTP/1.0 200 OK" \
6485 -c "Protocol is TLSv1.3" \
6486 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6487 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6488 -c "NamedGroup: secp384r1 ( 18 )" \
6489 -c "Verifying peer X.509 certificate... ok" \
6490 -C "received HelloRetryRequest message"
6491
6492requires_gnutls_tls1_3
6493requires_gnutls_next_no_ticket
6494requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6495requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6496requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6497requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6498requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6499requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6500run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6501 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6502 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6503 0 \
6504 -c "HTTP/1.0 200 OK" \
6505 -c "Protocol is TLSv1.3" \
6506 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6507 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6508 -c "NamedGroup: secp384r1 ( 18 )" \
6509 -c "Verifying peer X.509 certificate... ok" \
6510 -C "received HelloRetryRequest message"
6511
6512requires_gnutls_tls1_3
6513requires_gnutls_next_no_ticket
6514requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6515requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6516requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6517requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6518requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6519run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6520 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6521 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6522 0 \
6523 -c "HTTP/1.0 200 OK" \
6524 -c "Protocol is TLSv1.3" \
6525 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6526 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6527 -c "NamedGroup: secp521r1 ( 19 )" \
6528 -c "Verifying peer X.509 certificate... ok" \
6529 -C "received HelloRetryRequest message"
6530
6531requires_gnutls_tls1_3
6532requires_gnutls_next_no_ticket
6533requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6534requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6535requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6536requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6537requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6538run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6539 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6540 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6541 0 \
6542 -c "HTTP/1.0 200 OK" \
6543 -c "Protocol is TLSv1.3" \
6544 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6545 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6546 -c "NamedGroup: secp521r1 ( 19 )" \
6547 -c "Verifying peer X.509 certificate... ok" \
6548 -C "received HelloRetryRequest message"
6549
6550requires_gnutls_tls1_3
6551requires_gnutls_next_no_ticket
6552requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6553requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6554requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6555requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6556requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6557run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6558 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6559 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6560 0 \
6561 -c "HTTP/1.0 200 OK" \
6562 -c "Protocol is TLSv1.3" \
6563 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6564 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6565 -c "NamedGroup: secp521r1 ( 19 )" \
6566 -c "Verifying peer X.509 certificate... ok" \
6567 -C "received HelloRetryRequest message"
6568
6569requires_gnutls_tls1_3
6570requires_gnutls_next_no_ticket
6571requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6572requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6573requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6574requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6575requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6576requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6577run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6578 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6579 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6580 0 \
6581 -c "HTTP/1.0 200 OK" \
6582 -c "Protocol is TLSv1.3" \
6583 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6584 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6585 -c "NamedGroup: secp521r1 ( 19 )" \
6586 -c "Verifying peer X.509 certificate... ok" \
6587 -C "received HelloRetryRequest message"
6588
6589requires_gnutls_tls1_3
6590requires_gnutls_next_no_ticket
6591requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6592requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6593requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6594requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6595requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6596run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6597 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6598 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6599 0 \
6600 -c "HTTP/1.0 200 OK" \
6601 -c "Protocol is TLSv1.3" \
6602 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6603 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6604 -c "NamedGroup: x25519 ( 1d )" \
6605 -c "Verifying peer X.509 certificate... ok" \
6606 -C "received HelloRetryRequest message"
6607
6608requires_gnutls_tls1_3
6609requires_gnutls_next_no_ticket
6610requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6611requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6612requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6613requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6614requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6615run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6616 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6617 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6618 0 \
6619 -c "HTTP/1.0 200 OK" \
6620 -c "Protocol is TLSv1.3" \
6621 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6622 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6623 -c "NamedGroup: x25519 ( 1d )" \
6624 -c "Verifying peer X.509 certificate... ok" \
6625 -C "received HelloRetryRequest message"
6626
6627requires_gnutls_tls1_3
6628requires_gnutls_next_no_ticket
6629requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6630requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6631requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6632requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6633requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6634run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6635 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6636 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6637 0 \
6638 -c "HTTP/1.0 200 OK" \
6639 -c "Protocol is TLSv1.3" \
6640 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6641 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6642 -c "NamedGroup: x25519 ( 1d )" \
6643 -c "Verifying peer X.509 certificate... ok" \
6644 -C "received HelloRetryRequest message"
6645
6646requires_gnutls_tls1_3
6647requires_gnutls_next_no_ticket
6648requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6649requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6650requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6651requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6652requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6653requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6654run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6655 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6656 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6657 0 \
6658 -c "HTTP/1.0 200 OK" \
6659 -c "Protocol is TLSv1.3" \
6660 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6661 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6662 -c "NamedGroup: x25519 ( 1d )" \
6663 -c "Verifying peer X.509 certificate... ok" \
6664 -C "received HelloRetryRequest message"
6665
6666requires_gnutls_tls1_3
6667requires_gnutls_next_no_ticket
6668requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6669requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6670requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6671requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6672requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6673run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6674 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6675 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6676 0 \
6677 -c "HTTP/1.0 200 OK" \
6678 -c "Protocol is TLSv1.3" \
6679 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6680 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6681 -c "NamedGroup: x448 ( 1e )" \
6682 -c "Verifying peer X.509 certificate... ok" \
6683 -C "received HelloRetryRequest message"
6684
6685requires_gnutls_tls1_3
6686requires_gnutls_next_no_ticket
6687requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6688requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6689requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6690requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6691requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6692run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6693 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6694 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6695 0 \
6696 -c "HTTP/1.0 200 OK" \
6697 -c "Protocol is TLSv1.3" \
6698 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6699 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6700 -c "NamedGroup: x448 ( 1e )" \
6701 -c "Verifying peer X.509 certificate... ok" \
6702 -C "received HelloRetryRequest message"
6703
6704requires_gnutls_tls1_3
6705requires_gnutls_next_no_ticket
6706requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6707requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6708requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6709requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6710requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6711run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6712 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6713 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6714 0 \
6715 -c "HTTP/1.0 200 OK" \
6716 -c "Protocol is TLSv1.3" \
6717 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6718 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6719 -c "NamedGroup: x448 ( 1e )" \
6720 -c "Verifying peer X.509 certificate... ok" \
6721 -C "received HelloRetryRequest message"
6722
6723requires_gnutls_tls1_3
6724requires_gnutls_next_no_ticket
6725requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6726requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6727requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6728requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6729requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6730requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
6731run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6732 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6733 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6734 0 \
6735 -c "HTTP/1.0 200 OK" \
6736 -c "Protocol is TLSv1.3" \
6737 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6738 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6739 -c "NamedGroup: x448 ( 1e )" \
6740 -c "Verifying peer X.509 certificate... ok" \
6741 -C "received HelloRetryRequest message"
6742
6743requires_gnutls_tls1_3
6744requires_gnutls_next_no_ticket
6745requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6746requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6747requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6748requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6749requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6750run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6751 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6752 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6753 0 \
6754 -c "HTTP/1.0 200 OK" \
6755 -c "Protocol is TLSv1.3" \
6756 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6757 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6758 -c "NamedGroup: secp256r1 ( 17 )" \
6759 -c "Verifying peer X.509 certificate... ok" \
6760 -C "received HelloRetryRequest message"
6761
6762requires_gnutls_tls1_3
6763requires_gnutls_next_no_ticket
6764requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6765requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6766requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6767requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6768requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6769run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6770 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6771 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6772 0 \
6773 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6774 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6775 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6776 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6777 -c "NamedGroup: secp256r1 ( 17 )" \
6778 -c "Verifying peer X.509 certificate... ok" \
6779 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6780
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6781requires_gnutls_tls1_3
6782requires_gnutls_next_no_ticket
6783requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6784requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6785requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]6786requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6787requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6788run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6789 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6790 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6791 0 \
6792 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6793 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6794 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6795 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6796 -c "NamedGroup: secp256r1 ( 17 )" \
6797 -c "Verifying peer X.509 certificate... ok" \
6798 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6799
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6800requires_gnutls_tls1_3
6801requires_gnutls_next_no_ticket
6802requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6803requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6804requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]6805requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6806requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6807requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6808run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6809 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6810 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6811 0 \
6812 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6813 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6814 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6815 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6816 -c "NamedGroup: secp256r1 ( 17 )" \
6817 -c "Verifying peer X.509 certificate... ok" \
6818 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6819
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6820requires_gnutls_tls1_3
6821requires_gnutls_next_no_ticket
6822requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6823requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6824requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]6825requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6826requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6827run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6828 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6829 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6830 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6831 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6832 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6833 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6834 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6835 -c "NamedGroup: secp384r1 ( 18 )" \
6836 -c "Verifying peer X.509 certificate... ok" \
6837 -C "received HelloRetryRequest message"
6838
6839requires_gnutls_tls1_3
6840requires_gnutls_next_no_ticket
6841requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6842requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6843requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6844requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6845requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6846run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6847 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6848 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6849 0 \
6850 -c "HTTP/1.0 200 OK" \
6851 -c "Protocol is TLSv1.3" \
6852 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6853 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6854 -c "NamedGroup: secp384r1 ( 18 )" \
6855 -c "Verifying peer X.509 certificate... ok" \
6856 -C "received HelloRetryRequest message"
6857
6858requires_gnutls_tls1_3
6859requires_gnutls_next_no_ticket
6860requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6861requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6862requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6863requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6864requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6865run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6866 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6867 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6868 0 \
6869 -c "HTTP/1.0 200 OK" \
6870 -c "Protocol is TLSv1.3" \
6871 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6872 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6873 -c "NamedGroup: secp384r1 ( 18 )" \
6874 -c "Verifying peer X.509 certificate... ok" \
6875 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6876
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6877requires_gnutls_tls1_3
6878requires_gnutls_next_no_ticket
6879requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6880requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6881requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]6882requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6883requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6884requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6885run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6886 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6887 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6888 0 \
6889 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6890 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6891 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6892 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6893 -c "NamedGroup: secp384r1 ( 18 )" \
6894 -c "Verifying peer X.509 certificate... ok" \
6895 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6896
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6897requires_gnutls_tls1_3
6898requires_gnutls_next_no_ticket
6899requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6900requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6901requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]6902requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6903requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6904run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6905 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6906 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6907 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6908 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6909 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6910 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6911 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6912 -c "NamedGroup: secp521r1 ( 19 )" \
6913 -c "Verifying peer X.509 certificate... ok" \
6914 -C "received HelloRetryRequest message"
6915
6916requires_gnutls_tls1_3
6917requires_gnutls_next_no_ticket
6918requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6919requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6920requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6921requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6922requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6923run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6924 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6925 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6926 0 \
6927 -c "HTTP/1.0 200 OK" \
6928 -c "Protocol is TLSv1.3" \
6929 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6930 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6931 -c "NamedGroup: secp521r1 ( 19 )" \
6932 -c "Verifying peer X.509 certificate... ok" \
6933 -C "received HelloRetryRequest message"
6934
6935requires_gnutls_tls1_3
6936requires_gnutls_next_no_ticket
6937requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6938requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6939requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6940requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6941requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6942run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6943 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6944 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6945 0 \
6946 -c "HTTP/1.0 200 OK" \
6947 -c "Protocol is TLSv1.3" \
6948 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6949 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6950 -c "NamedGroup: secp521r1 ( 19 )" \
6951 -c "Verifying peer X.509 certificate... ok" \
6952 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6953
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6954requires_gnutls_tls1_3
6955requires_gnutls_next_no_ticket
6956requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6957requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6958requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]6959requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6960requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6961requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6962run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6963 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6964 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6965 0 \
6966 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6967 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6968 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6969 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6970 -c "NamedGroup: secp521r1 ( 19 )" \
6971 -c "Verifying peer X.509 certificate... ok" \
6972 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6973
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6974requires_gnutls_tls1_3
6975requires_gnutls_next_no_ticket
6976requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6977requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6978requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]6979requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6980requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6981run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6982 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]6983 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6984 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6985 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6986 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6987 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6988 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6989 -c "NamedGroup: x25519 ( 1d )" \
6990 -c "Verifying peer X.509 certificate... ok" \
6991 -C "received HelloRetryRequest message"
6992
6993requires_gnutls_tls1_3
6994requires_gnutls_next_no_ticket
6995requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6996requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6997requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6998requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6999requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7000run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7001 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7002 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7003 0 \
7004 -c "HTTP/1.0 200 OK" \
7005 -c "Protocol is TLSv1.3" \
7006 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
7007 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7008 -c "NamedGroup: x25519 ( 1d )" \
7009 -c "Verifying peer X.509 certificate... ok" \
7010 -C "received HelloRetryRequest message"
7011
7012requires_gnutls_tls1_3
7013requires_gnutls_next_no_ticket
7014requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7015requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7016requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7017requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7018requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7019run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7020 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7021 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7022 0 \
7023 -c "HTTP/1.0 200 OK" \
7024 -c "Protocol is TLSv1.3" \
7025 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
7026 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]7027 -c "NamedGroup: x25519 ( 1d )" \
7028 -c "Verifying peer X.509 certificate... ok" \
7029 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]7030
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]7031requires_gnutls_tls1_3
7032requires_gnutls_next_no_ticket
7033requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]7034requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7035requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]7036requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]7037requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]7038requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]7039run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7040 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7041 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]7042 0 \
7043 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]7044 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]7045 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
7046 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]7047 -c "NamedGroup: x25519 ( 1d )" \
7048 -c "Verifying peer X.509 certificate... ok" \
7049 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]7050
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7051requires_gnutls_tls1_3
7052requires_gnutls_next_no_ticket
7053requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]7054requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7055requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]7056requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]7057requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7058run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7059 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7060 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]7061 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7062 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]7063 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]7064 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7065 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7066 -c "NamedGroup: x448 ( 1e )" \
7067 -c "Verifying peer X.509 certificate... ok" \
7068 -C "received HelloRetryRequest message"
7069
7070requires_gnutls_tls1_3
7071requires_gnutls_next_no_ticket
7072requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7073requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7074requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7075requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7076requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7077run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7078 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7079 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7080 0 \
7081 -c "HTTP/1.0 200 OK" \
7082 -c "Protocol is TLSv1.3" \
7083 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
7084 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7085 -c "NamedGroup: x448 ( 1e )" \
7086 -c "Verifying peer X.509 certificate... ok" \
7087 -C "received HelloRetryRequest message"
7088
7089requires_gnutls_tls1_3
7090requires_gnutls_next_no_ticket
7091requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7092requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7093requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7094requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7095requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7096run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7097 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7098 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7099 0 \
7100 -c "HTTP/1.0 200 OK" \
7101 -c "Protocol is TLSv1.3" \
7102 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
7103 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]7104 -c "NamedGroup: x448 ( 1e )" \
7105 -c "Verifying peer X.509 certificate... ok" \
7106 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]7107
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]7108requires_gnutls_tls1_3
7109requires_gnutls_next_no_ticket
7110requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]7111requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7112requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron6f135e12021-12-08 16:57:54 +0100[diff] [blame]7113requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]7114requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]7115requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]7116run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7117 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7118 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]7119 0 \
7120 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]7121 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]7122 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]7123 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]7124 -c "NamedGroup: x448 ( 1e )" \
7125 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]7126 -C "received HelloRetryRequest message"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]7127
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7128requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7129requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7130requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7131requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7132requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7133requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7134requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7135requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7136run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7137 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7138 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7139 0 \
7140 -s "Protocol is TLSv1.3" \
7141 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7142 -s "received signature algorithm: 0x403" \
7143 -s "got named group: secp256r1(0017)" \
7144 -s "Verifying peer X.509 certificate... ok" \
7145 -c "Protocol is TLSv1.3" \
7146 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7147 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7148 -c "NamedGroup: secp256r1 ( 17 )" \
7149 -c "Verifying peer X.509 certificate... ok" \
7150 -C "received HelloRetryRequest message"
7151
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7152requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7153requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7154requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7155requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7156requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7157requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7158requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7159requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7160run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7161 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7162 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7163 0 \
7164 -s "Protocol is TLSv1.3" \
7165 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7166 -s "received signature algorithm: 0x503" \
7167 -s "got named group: secp256r1(0017)" \
7168 -s "Verifying peer X.509 certificate... ok" \
7169 -c "Protocol is TLSv1.3" \
7170 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7171 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7172 -c "NamedGroup: secp256r1 ( 17 )" \
7173 -c "Verifying peer X.509 certificate... ok" \
7174 -C "received HelloRetryRequest message"
7175
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7176requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7177requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7178requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7179requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7180requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7181requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7182requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7183requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7184run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7185 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7186 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7187 0 \
7188 -s "Protocol is TLSv1.3" \
7189 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7190 -s "received signature algorithm: 0x603" \
7191 -s "got named group: secp256r1(0017)" \
7192 -s "Verifying peer X.509 certificate... ok" \
7193 -c "Protocol is TLSv1.3" \
7194 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7195 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7196 -c "NamedGroup: secp256r1 ( 17 )" \
7197 -c "Verifying peer X.509 certificate... ok" \
7198 -C "received HelloRetryRequest message"
7199
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7200requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7201requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7202requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7203requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7204requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7205requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7206requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7207requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7208requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7209requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7210run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7211 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7212 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7213 0 \
7214 -s "Protocol is TLSv1.3" \
7215 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7216 -s "received signature algorithm: 0x804" \
7217 -s "got named group: secp256r1(0017)" \
7218 -s "Verifying peer X.509 certificate... ok" \
7219 -c "Protocol is TLSv1.3" \
7220 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7221 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7222 -c "NamedGroup: secp256r1 ( 17 )" \
7223 -c "Verifying peer X.509 certificate... ok" \
7224 -C "received HelloRetryRequest message"
7225
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7226requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7227requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7228requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7229requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7230requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7231requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7232requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7233requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7234run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7235 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7236 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7237 0 \
7238 -s "Protocol is TLSv1.3" \
7239 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7240 -s "received signature algorithm: 0x403" \
7241 -s "got named group: secp384r1(0018)" \
7242 -s "Verifying peer X.509 certificate... ok" \
7243 -c "Protocol is TLSv1.3" \
7244 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7245 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7246 -c "NamedGroup: secp384r1 ( 18 )" \
7247 -c "Verifying peer X.509 certificate... ok" \
7248 -C "received HelloRetryRequest message"
7249
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7250requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7251requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7252requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7253requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7254requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7255requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7256requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7257requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7258run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7259 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7260 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7261 0 \
7262 -s "Protocol is TLSv1.3" \
7263 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7264 -s "received signature algorithm: 0x503" \
7265 -s "got named group: secp384r1(0018)" \
7266 -s "Verifying peer X.509 certificate... ok" \
7267 -c "Protocol is TLSv1.3" \
7268 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7269 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7270 -c "NamedGroup: secp384r1 ( 18 )" \
7271 -c "Verifying peer X.509 certificate... ok" \
7272 -C "received HelloRetryRequest message"
7273
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7274requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7275requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7276requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7277requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7278requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7279requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7280requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7281requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7282run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7283 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7284 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7285 0 \
7286 -s "Protocol is TLSv1.3" \
7287 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7288 -s "received signature algorithm: 0x603" \
7289 -s "got named group: secp384r1(0018)" \
7290 -s "Verifying peer X.509 certificate... ok" \
7291 -c "Protocol is TLSv1.3" \
7292 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7293 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7294 -c "NamedGroup: secp384r1 ( 18 )" \
7295 -c "Verifying peer X.509 certificate... ok" \
7296 -C "received HelloRetryRequest message"
7297
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7298requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7299requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7300requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7301requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7302requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7303requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7304requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7305requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7306requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7307requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7308run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7309 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7310 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7311 0 \
7312 -s "Protocol is TLSv1.3" \
7313 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7314 -s "received signature algorithm: 0x804" \
7315 -s "got named group: secp384r1(0018)" \
7316 -s "Verifying peer X.509 certificate... ok" \
7317 -c "Protocol is TLSv1.3" \
7318 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7319 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7320 -c "NamedGroup: secp384r1 ( 18 )" \
7321 -c "Verifying peer X.509 certificate... ok" \
7322 -C "received HelloRetryRequest message"
7323
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7324requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7325requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7326requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7327requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7328requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7329requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7330requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7331requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7332run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7333 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7334 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7335 0 \
7336 -s "Protocol is TLSv1.3" \
7337 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7338 -s "received signature algorithm: 0x403" \
7339 -s "got named group: secp521r1(0019)" \
7340 -s "Verifying peer X.509 certificate... ok" \
7341 -c "Protocol is TLSv1.3" \
7342 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7343 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7344 -c "NamedGroup: secp521r1 ( 19 )" \
7345 -c "Verifying peer X.509 certificate... ok" \
7346 -C "received HelloRetryRequest message"
7347
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7348requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7349requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7350requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7351requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7352requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7353requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7354requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7355requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7356run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7357 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7358 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7359 0 \
7360 -s "Protocol is TLSv1.3" \
7361 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7362 -s "received signature algorithm: 0x503" \
7363 -s "got named group: secp521r1(0019)" \
7364 -s "Verifying peer X.509 certificate... ok" \
7365 -c "Protocol is TLSv1.3" \
7366 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7367 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7368 -c "NamedGroup: secp521r1 ( 19 )" \
7369 -c "Verifying peer X.509 certificate... ok" \
7370 -C "received HelloRetryRequest message"
7371
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7372requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7373requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7374requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7375requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7376requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7377requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7378requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7379requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7380run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7381 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7382 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7383 0 \
7384 -s "Protocol is TLSv1.3" \
7385 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7386 -s "received signature algorithm: 0x603" \
7387 -s "got named group: secp521r1(0019)" \
7388 -s "Verifying peer X.509 certificate... ok" \
7389 -c "Protocol is TLSv1.3" \
7390 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7391 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7392 -c "NamedGroup: secp521r1 ( 19 )" \
7393 -c "Verifying peer X.509 certificate... ok" \
7394 -C "received HelloRetryRequest message"
7395
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7396requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7397requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7398requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7399requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7400requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7401requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7402requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7403requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7404requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7405requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7406run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7407 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7408 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7409 0 \
7410 -s "Protocol is TLSv1.3" \
7411 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7412 -s "received signature algorithm: 0x804" \
7413 -s "got named group: secp521r1(0019)" \
7414 -s "Verifying peer X.509 certificate... ok" \
7415 -c "Protocol is TLSv1.3" \
7416 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7417 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7418 -c "NamedGroup: secp521r1 ( 19 )" \
7419 -c "Verifying peer X.509 certificate... ok" \
7420 -C "received HelloRetryRequest message"
7421
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7422requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7423requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7424requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7425requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7426requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7427requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7428requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7429requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7430run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7431 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7432 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7433 0 \
7434 -s "Protocol is TLSv1.3" \
7435 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7436 -s "received signature algorithm: 0x403" \
7437 -s "got named group: x25519(001d)" \
7438 -s "Verifying peer X.509 certificate... ok" \
7439 -c "Protocol is TLSv1.3" \
7440 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7441 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7442 -c "NamedGroup: x25519 ( 1d )" \
7443 -c "Verifying peer X.509 certificate... ok" \
7444 -C "received HelloRetryRequest message"
7445
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7446requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7447requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7448requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7449requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7450requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7451requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7452requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7453requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7454run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7455 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7456 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7457 0 \
7458 -s "Protocol is TLSv1.3" \
7459 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7460 -s "received signature algorithm: 0x503" \
7461 -s "got named group: x25519(001d)" \
7462 -s "Verifying peer X.509 certificate... ok" \
7463 -c "Protocol is TLSv1.3" \
7464 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7465 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7466 -c "NamedGroup: x25519 ( 1d )" \
7467 -c "Verifying peer X.509 certificate... ok" \
7468 -C "received HelloRetryRequest message"
7469
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7470requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7471requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7472requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7473requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7474requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7475requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7476requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7477requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7478run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7479 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7480 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7481 0 \
7482 -s "Protocol is TLSv1.3" \
7483 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7484 -s "received signature algorithm: 0x603" \
7485 -s "got named group: x25519(001d)" \
7486 -s "Verifying peer X.509 certificate... ok" \
7487 -c "Protocol is TLSv1.3" \
7488 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7489 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7490 -c "NamedGroup: x25519 ( 1d )" \
7491 -c "Verifying peer X.509 certificate... ok" \
7492 -C "received HelloRetryRequest message"
7493
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7494requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7495requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7496requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7497requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7498requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7499requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7500requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7501requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7502requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7503requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7504run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7505 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7506 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7507 0 \
7508 -s "Protocol is TLSv1.3" \
7509 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7510 -s "received signature algorithm: 0x804" \
7511 -s "got named group: x25519(001d)" \
7512 -s "Verifying peer X.509 certificate... ok" \
7513 -c "Protocol is TLSv1.3" \
7514 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7515 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7516 -c "NamedGroup: x25519 ( 1d )" \
7517 -c "Verifying peer X.509 certificate... ok" \
7518 -C "received HelloRetryRequest message"
7519
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7520requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7521requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7522requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7523requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7524requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7525requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7526requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7527requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7528run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7529 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7530 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7531 0 \
7532 -s "Protocol is TLSv1.3" \
7533 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7534 -s "received signature algorithm: 0x403" \
7535 -s "got named group: x448(001e)" \
7536 -s "Verifying peer X.509 certificate... ok" \
7537 -c "Protocol is TLSv1.3" \
7538 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7539 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7540 -c "NamedGroup: x448 ( 1e )" \
7541 -c "Verifying peer X.509 certificate... ok" \
7542 -C "received HelloRetryRequest message"
7543
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7544requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7545requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7546requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7547requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7548requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7549requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7550requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7551requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7552run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7553 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7554 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7555 0 \
7556 -s "Protocol is TLSv1.3" \
7557 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7558 -s "received signature algorithm: 0x503" \
7559 -s "got named group: x448(001e)" \
7560 -s "Verifying peer X.509 certificate... ok" \
7561 -c "Protocol is TLSv1.3" \
7562 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7563 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7564 -c "NamedGroup: x448 ( 1e )" \
7565 -c "Verifying peer X.509 certificate... ok" \
7566 -C "received HelloRetryRequest message"
7567
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7568requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7569requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7570requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7571requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7572requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7573requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7574requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7575requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7576run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7577 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7578 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7579 0 \
7580 -s "Protocol is TLSv1.3" \
7581 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7582 -s "received signature algorithm: 0x603" \
7583 -s "got named group: x448(001e)" \
7584 -s "Verifying peer X.509 certificate... ok" \
7585 -c "Protocol is TLSv1.3" \
7586 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7587 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7588 -c "NamedGroup: x448 ( 1e )" \
7589 -c "Verifying peer X.509 certificate... ok" \
7590 -C "received HelloRetryRequest message"
7591
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7592requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7593requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7594requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7595requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7596requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7597requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7598requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7599requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7600requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7601requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7602run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7603 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7604 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7605 0 \
7606 -s "Protocol is TLSv1.3" \
7607 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
7608 -s "received signature algorithm: 0x804" \
7609 -s "got named group: x448(001e)" \
7610 -s "Verifying peer X.509 certificate... ok" \
7611 -c "Protocol is TLSv1.3" \
7612 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7613 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7614 -c "NamedGroup: x448 ( 1e )" \
7615 -c "Verifying peer X.509 certificate... ok" \
7616 -C "received HelloRetryRequest message"
7617
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7618requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7619requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7620requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7621requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7622requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7623requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7624requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7625requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7626run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7627 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7628 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7629 0 \
7630 -s "Protocol is TLSv1.3" \
7631 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7632 -s "received signature algorithm: 0x403" \
7633 -s "got named group: secp256r1(0017)" \
7634 -s "Verifying peer X.509 certificate... ok" \
7635 -c "Protocol is TLSv1.3" \
7636 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7637 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7638 -c "NamedGroup: secp256r1 ( 17 )" \
7639 -c "Verifying peer X.509 certificate... ok" \
7640 -C "received HelloRetryRequest message"
7641
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7642requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7643requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7644requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7645requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7646requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7647requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7648requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7649requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7650run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7651 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7652 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7653 0 \
7654 -s "Protocol is TLSv1.3" \
7655 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7656 -s "received signature algorithm: 0x503" \
7657 -s "got named group: secp256r1(0017)" \
7658 -s "Verifying peer X.509 certificate... ok" \
7659 -c "Protocol is TLSv1.3" \
7660 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7661 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7662 -c "NamedGroup: secp256r1 ( 17 )" \
7663 -c "Verifying peer X.509 certificate... ok" \
7664 -C "received HelloRetryRequest message"
7665
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7666requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7667requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7668requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7669requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7670requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7671requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7672requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7673requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7674run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7675 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7676 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7677 0 \
7678 -s "Protocol is TLSv1.3" \
7679 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7680 -s "received signature algorithm: 0x603" \
7681 -s "got named group: secp256r1(0017)" \
7682 -s "Verifying peer X.509 certificate... ok" \
7683 -c "Protocol is TLSv1.3" \
7684 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7685 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7686 -c "NamedGroup: secp256r1 ( 17 )" \
7687 -c "Verifying peer X.509 certificate... ok" \
7688 -C "received HelloRetryRequest message"
7689
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7690requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7691requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7692requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7693requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7694requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7695requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7696requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7697requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7698requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7699requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7700run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7701 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7702 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7703 0 \
7704 -s "Protocol is TLSv1.3" \
7705 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7706 -s "received signature algorithm: 0x804" \
7707 -s "got named group: secp256r1(0017)" \
7708 -s "Verifying peer X.509 certificate... ok" \
7709 -c "Protocol is TLSv1.3" \
7710 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7711 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7712 -c "NamedGroup: secp256r1 ( 17 )" \
7713 -c "Verifying peer X.509 certificate... ok" \
7714 -C "received HelloRetryRequest message"
7715
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7716requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7717requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7718requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7719requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7720requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7721requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7722requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7723requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7724run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7725 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7726 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7727 0 \
7728 -s "Protocol is TLSv1.3" \
7729 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7730 -s "received signature algorithm: 0x403" \
7731 -s "got named group: secp384r1(0018)" \
7732 -s "Verifying peer X.509 certificate... ok" \
7733 -c "Protocol is TLSv1.3" \
7734 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7735 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7736 -c "NamedGroup: secp384r1 ( 18 )" \
7737 -c "Verifying peer X.509 certificate... ok" \
7738 -C "received HelloRetryRequest message"
7739
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7740requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7741requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7742requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7743requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7744requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7745requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7746requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7747requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7748run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7749 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7750 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7751 0 \
7752 -s "Protocol is TLSv1.3" \
7753 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7754 -s "received signature algorithm: 0x503" \
7755 -s "got named group: secp384r1(0018)" \
7756 -s "Verifying peer X.509 certificate... ok" \
7757 -c "Protocol is TLSv1.3" \
7758 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7759 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7760 -c "NamedGroup: secp384r1 ( 18 )" \
7761 -c "Verifying peer X.509 certificate... ok" \
7762 -C "received HelloRetryRequest message"
7763
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7764requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7765requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7766requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7767requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7768requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7769requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7770requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7771requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7772run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7773 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7774 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7775 0 \
7776 -s "Protocol is TLSv1.3" \
7777 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7778 -s "received signature algorithm: 0x603" \
7779 -s "got named group: secp384r1(0018)" \
7780 -s "Verifying peer X.509 certificate... ok" \
7781 -c "Protocol is TLSv1.3" \
7782 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7783 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7784 -c "NamedGroup: secp384r1 ( 18 )" \
7785 -c "Verifying peer X.509 certificate... ok" \
7786 -C "received HelloRetryRequest message"
7787
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7788requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7789requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7790requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7791requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7792requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7793requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7794requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7795requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7796requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7797requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7798run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7799 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7800 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7801 0 \
7802 -s "Protocol is TLSv1.3" \
7803 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7804 -s "received signature algorithm: 0x804" \
7805 -s "got named group: secp384r1(0018)" \
7806 -s "Verifying peer X.509 certificate... ok" \
7807 -c "Protocol is TLSv1.3" \
7808 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7809 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7810 -c "NamedGroup: secp384r1 ( 18 )" \
7811 -c "Verifying peer X.509 certificate... ok" \
7812 -C "received HelloRetryRequest message"
7813
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7814requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7815requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7816requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7817requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7818requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7819requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7820requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7821requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7822run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7823 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7824 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7825 0 \
7826 -s "Protocol is TLSv1.3" \
7827 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7828 -s "received signature algorithm: 0x403" \
7829 -s "got named group: secp521r1(0019)" \
7830 -s "Verifying peer X.509 certificate... ok" \
7831 -c "Protocol is TLSv1.3" \
7832 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7833 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7834 -c "NamedGroup: secp521r1 ( 19 )" \
7835 -c "Verifying peer X.509 certificate... ok" \
7836 -C "received HelloRetryRequest message"
7837
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7838requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7839requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7840requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7841requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7842requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7843requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7844requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7845requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7846run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7847 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7848 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7849 0 \
7850 -s "Protocol is TLSv1.3" \
7851 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7852 -s "received signature algorithm: 0x503" \
7853 -s "got named group: secp521r1(0019)" \
7854 -s "Verifying peer X.509 certificate... ok" \
7855 -c "Protocol is TLSv1.3" \
7856 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7857 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7858 -c "NamedGroup: secp521r1 ( 19 )" \
7859 -c "Verifying peer X.509 certificate... ok" \
7860 -C "received HelloRetryRequest message"
7861
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7862requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7863requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7864requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7865requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7866requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7867requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7868requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7869requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7870run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7871 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7872 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7873 0 \
7874 -s "Protocol is TLSv1.3" \
7875 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7876 -s "received signature algorithm: 0x603" \
7877 -s "got named group: secp521r1(0019)" \
7878 -s "Verifying peer X.509 certificate... ok" \
7879 -c "Protocol is TLSv1.3" \
7880 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7881 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7882 -c "NamedGroup: secp521r1 ( 19 )" \
7883 -c "Verifying peer X.509 certificate... ok" \
7884 -C "received HelloRetryRequest message"
7885
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7886requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7887requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7888requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7889requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7890requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7891requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7892requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7893requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7894requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7895requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7896run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7897 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7898 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7899 0 \
7900 -s "Protocol is TLSv1.3" \
7901 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7902 -s "received signature algorithm: 0x804" \
7903 -s "got named group: secp521r1(0019)" \
7904 -s "Verifying peer X.509 certificate... ok" \
7905 -c "Protocol is TLSv1.3" \
7906 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7907 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7908 -c "NamedGroup: secp521r1 ( 19 )" \
7909 -c "Verifying peer X.509 certificate... ok" \
7910 -C "received HelloRetryRequest message"
7911
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7912requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7913requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7914requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7915requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7916requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7917requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7918requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7919requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7920run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7921 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7922 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7923 0 \
7924 -s "Protocol is TLSv1.3" \
7925 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7926 -s "received signature algorithm: 0x403" \
7927 -s "got named group: x25519(001d)" \
7928 -s "Verifying peer X.509 certificate... ok" \
7929 -c "Protocol is TLSv1.3" \
7930 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7931 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7932 -c "NamedGroup: x25519 ( 1d )" \
7933 -c "Verifying peer X.509 certificate... ok" \
7934 -C "received HelloRetryRequest message"
7935
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7936requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7937requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7938requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7939requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7940requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7941requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7942requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7943requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7944run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7945 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7946 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7947 0 \
7948 -s "Protocol is TLSv1.3" \
7949 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7950 -s "received signature algorithm: 0x503" \
7951 -s "got named group: x25519(001d)" \
7952 -s "Verifying peer X.509 certificate... ok" \
7953 -c "Protocol is TLSv1.3" \
7954 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7955 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7956 -c "NamedGroup: x25519 ( 1d )" \
7957 -c "Verifying peer X.509 certificate... ok" \
7958 -C "received HelloRetryRequest message"
7959
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7960requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7961requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7962requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7963requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7964requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7965requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7966requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7967requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7968run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7969 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7970 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7971 0 \
7972 -s "Protocol is TLSv1.3" \
7973 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
7974 -s "received signature algorithm: 0x603" \
7975 -s "got named group: x25519(001d)" \
7976 -s "Verifying peer X.509 certificate... ok" \
7977 -c "Protocol is TLSv1.3" \
7978 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7979 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7980 -c "NamedGroup: x25519 ( 1d )" \
7981 -c "Verifying peer X.509 certificate... ok" \
7982 -C "received HelloRetryRequest message"
7983
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7984requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7985requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7986requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7987requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7988requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7989requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7990requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7991requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7992requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7993requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
7994run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]7995 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
7996 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]7997 0 \
7998 -s "Protocol is TLSv1.3" \
7999 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
8000 -s "received signature algorithm: 0x804" \
8001 -s "got named group: x25519(001d)" \
8002 -s "Verifying peer X.509 certificate... ok" \
8003 -c "Protocol is TLSv1.3" \
8004 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
8005 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8006 -c "NamedGroup: x25519 ( 1d )" \
8007 -c "Verifying peer X.509 certificate... ok" \
8008 -C "received HelloRetryRequest message"
8009
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8010requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8011requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8012requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8013requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8014requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8015requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8016requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8017requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8018run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8019 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8020 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8021 0 \
8022 -s "Protocol is TLSv1.3" \
8023 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
8024 -s "received signature algorithm: 0x403" \
8025 -s "got named group: x448(001e)" \
8026 -s "Verifying peer X.509 certificate... ok" \
8027 -c "Protocol is TLSv1.3" \
8028 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
8029 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8030 -c "NamedGroup: x448 ( 1e )" \
8031 -c "Verifying peer X.509 certificate... ok" \
8032 -C "received HelloRetryRequest message"
8033
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8034requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8035requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8036requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8037requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8038requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8039requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8040requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8041requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8042run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8043 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8044 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8045 0 \
8046 -s "Protocol is TLSv1.3" \
8047 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
8048 -s "received signature algorithm: 0x503" \
8049 -s "got named group: x448(001e)" \
8050 -s "Verifying peer X.509 certificate... ok" \
8051 -c "Protocol is TLSv1.3" \
8052 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
8053 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8054 -c "NamedGroup: x448 ( 1e )" \
8055 -c "Verifying peer X.509 certificate... ok" \
8056 -C "received HelloRetryRequest message"
8057
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8058requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8059requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8060requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8061requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8062requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8063requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8064requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8065requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8066run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8067 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8068 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8069 0 \
8070 -s "Protocol is TLSv1.3" \
8071 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
8072 -s "received signature algorithm: 0x603" \
8073 -s "got named group: x448(001e)" \
8074 -s "Verifying peer X.509 certificate... ok" \
8075 -c "Protocol is TLSv1.3" \
8076 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
8077 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8078 -c "NamedGroup: x448 ( 1e )" \
8079 -c "Verifying peer X.509 certificate... ok" \
8080 -C "received HelloRetryRequest message"
8081
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8082requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8083requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8084requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8085requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8086requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8087requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8088requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8089requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8090requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8091requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8092run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8093 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8094 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8095 0 \
8096 -s "Protocol is TLSv1.3" \
8097 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
8098 -s "received signature algorithm: 0x804" \
8099 -s "got named group: x448(001e)" \
8100 -s "Verifying peer X.509 certificate... ok" \
8101 -c "Protocol is TLSv1.3" \
8102 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
8103 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8104 -c "NamedGroup: x448 ( 1e )" \
8105 -c "Verifying peer X.509 certificate... ok" \
8106 -C "received HelloRetryRequest message"
8107
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8108requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8109requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8110requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8111requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8112requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8113requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8114requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8115requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8116run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8117 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8118 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8119 0 \
8120 -s "Protocol is TLSv1.3" \
8121 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8122 -s "received signature algorithm: 0x403" \
8123 -s "got named group: secp256r1(0017)" \
8124 -s "Verifying peer X.509 certificate... ok" \
8125 -c "Protocol is TLSv1.3" \
8126 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8127 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8128 -c "NamedGroup: secp256r1 ( 17 )" \
8129 -c "Verifying peer X.509 certificate... ok" \
8130 -C "received HelloRetryRequest message"
8131
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8132requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8133requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8134requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8135requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8136requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8137requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8138requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8139requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8140run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8141 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8142 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8143 0 \
8144 -s "Protocol is TLSv1.3" \
8145 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8146 -s "received signature algorithm: 0x503" \
8147 -s "got named group: secp256r1(0017)" \
8148 -s "Verifying peer X.509 certificate... ok" \
8149 -c "Protocol is TLSv1.3" \
8150 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8151 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8152 -c "NamedGroup: secp256r1 ( 17 )" \
8153 -c "Verifying peer X.509 certificate... ok" \
8154 -C "received HelloRetryRequest message"
8155
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8156requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8157requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8158requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8159requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8160requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8161requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8162requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8163requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8164run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8165 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8166 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8167 0 \
8168 -s "Protocol is TLSv1.3" \
8169 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8170 -s "received signature algorithm: 0x603" \
8171 -s "got named group: secp256r1(0017)" \
8172 -s "Verifying peer X.509 certificate... ok" \
8173 -c "Protocol is TLSv1.3" \
8174 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8175 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8176 -c "NamedGroup: secp256r1 ( 17 )" \
8177 -c "Verifying peer X.509 certificate... ok" \
8178 -C "received HelloRetryRequest message"
8179
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8180requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8181requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8182requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8183requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8184requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8185requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8186requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8187requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8188requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8189requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8190run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8191 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8192 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8193 0 \
8194 -s "Protocol is TLSv1.3" \
8195 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8196 -s "received signature algorithm: 0x804" \
8197 -s "got named group: secp256r1(0017)" \
8198 -s "Verifying peer X.509 certificate... ok" \
8199 -c "Protocol is TLSv1.3" \
8200 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8201 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8202 -c "NamedGroup: secp256r1 ( 17 )" \
8203 -c "Verifying peer X.509 certificate... ok" \
8204 -C "received HelloRetryRequest message"
8205
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8206requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8207requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8208requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8209requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8210requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8211requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8212requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8213requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8214run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8215 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8216 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8217 0 \
8218 -s "Protocol is TLSv1.3" \
8219 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8220 -s "received signature algorithm: 0x403" \
8221 -s "got named group: secp384r1(0018)" \
8222 -s "Verifying peer X.509 certificate... ok" \
8223 -c "Protocol is TLSv1.3" \
8224 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8225 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8226 -c "NamedGroup: secp384r1 ( 18 )" \
8227 -c "Verifying peer X.509 certificate... ok" \
8228 -C "received HelloRetryRequest message"
8229
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8230requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8231requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8232requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8233requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8234requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8235requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8236requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8237requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8238run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8239 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8240 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8241 0 \
8242 -s "Protocol is TLSv1.3" \
8243 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8244 -s "received signature algorithm: 0x503" \
8245 -s "got named group: secp384r1(0018)" \
8246 -s "Verifying peer X.509 certificate... ok" \
8247 -c "Protocol is TLSv1.3" \
8248 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8249 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8250 -c "NamedGroup: secp384r1 ( 18 )" \
8251 -c "Verifying peer X.509 certificate... ok" \
8252 -C "received HelloRetryRequest message"
8253
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8254requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8255requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8256requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8257requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8258requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8259requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8260requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8261requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8262run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8263 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8264 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8265 0 \
8266 -s "Protocol is TLSv1.3" \
8267 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8268 -s "received signature algorithm: 0x603" \
8269 -s "got named group: secp384r1(0018)" \
8270 -s "Verifying peer X.509 certificate... ok" \
8271 -c "Protocol is TLSv1.3" \
8272 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8273 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8274 -c "NamedGroup: secp384r1 ( 18 )" \
8275 -c "Verifying peer X.509 certificate... ok" \
8276 -C "received HelloRetryRequest message"
8277
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8278requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8279requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8280requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8281requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8282requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8283requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8284requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8285requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8286requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8287requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8288run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8289 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8290 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8291 0 \
8292 -s "Protocol is TLSv1.3" \
8293 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8294 -s "received signature algorithm: 0x804" \
8295 -s "got named group: secp384r1(0018)" \
8296 -s "Verifying peer X.509 certificate... ok" \
8297 -c "Protocol is TLSv1.3" \
8298 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8299 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8300 -c "NamedGroup: secp384r1 ( 18 )" \
8301 -c "Verifying peer X.509 certificate... ok" \
8302 -C "received HelloRetryRequest message"
8303
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8304requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8305requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8306requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8307requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8308requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8309requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8310requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8311requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8312run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8313 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8314 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8315 0 \
8316 -s "Protocol is TLSv1.3" \
8317 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8318 -s "received signature algorithm: 0x403" \
8319 -s "got named group: secp521r1(0019)" \
8320 -s "Verifying peer X.509 certificate... ok" \
8321 -c "Protocol is TLSv1.3" \
8322 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8323 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8324 -c "NamedGroup: secp521r1 ( 19 )" \
8325 -c "Verifying peer X.509 certificate... ok" \
8326 -C "received HelloRetryRequest message"
8327
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8328requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8329requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8330requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8331requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8332requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8333requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8334requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8335requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8336run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8337 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8338 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8339 0 \
8340 -s "Protocol is TLSv1.3" \
8341 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8342 -s "received signature algorithm: 0x503" \
8343 -s "got named group: secp521r1(0019)" \
8344 -s "Verifying peer X.509 certificate... ok" \
8345 -c "Protocol is TLSv1.3" \
8346 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8347 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8348 -c "NamedGroup: secp521r1 ( 19 )" \
8349 -c "Verifying peer X.509 certificate... ok" \
8350 -C "received HelloRetryRequest message"
8351
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8352requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8353requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8354requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8355requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8356requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8357requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8358requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8359requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8360run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8361 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8362 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8363 0 \
8364 -s "Protocol is TLSv1.3" \
8365 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8366 -s "received signature algorithm: 0x603" \
8367 -s "got named group: secp521r1(0019)" \
8368 -s "Verifying peer X.509 certificate... ok" \
8369 -c "Protocol is TLSv1.3" \
8370 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8371 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8372 -c "NamedGroup: secp521r1 ( 19 )" \
8373 -c "Verifying peer X.509 certificate... ok" \
8374 -C "received HelloRetryRequest message"
8375
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8376requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8377requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8378requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8379requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8380requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8381requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8382requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8383requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8384requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8385requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8386run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8387 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8388 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8389 0 \
8390 -s "Protocol is TLSv1.3" \
8391 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8392 -s "received signature algorithm: 0x804" \
8393 -s "got named group: secp521r1(0019)" \
8394 -s "Verifying peer X.509 certificate... ok" \
8395 -c "Protocol is TLSv1.3" \
8396 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8397 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8398 -c "NamedGroup: secp521r1 ( 19 )" \
8399 -c "Verifying peer X.509 certificate... ok" \
8400 -C "received HelloRetryRequest message"
8401
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8402requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8403requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8404requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8405requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8406requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8407requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8408requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8409requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8410run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8411 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8412 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8413 0 \
8414 -s "Protocol is TLSv1.3" \
8415 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8416 -s "received signature algorithm: 0x403" \
8417 -s "got named group: x25519(001d)" \
8418 -s "Verifying peer X.509 certificate... ok" \
8419 -c "Protocol is TLSv1.3" \
8420 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8421 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8422 -c "NamedGroup: x25519 ( 1d )" \
8423 -c "Verifying peer X.509 certificate... ok" \
8424 -C "received HelloRetryRequest message"
8425
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8426requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8427requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8428requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8429requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8430requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8431requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8432requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8433requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8434run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8435 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8436 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8437 0 \
8438 -s "Protocol is TLSv1.3" \
8439 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8440 -s "received signature algorithm: 0x503" \
8441 -s "got named group: x25519(001d)" \
8442 -s "Verifying peer X.509 certificate... ok" \
8443 -c "Protocol is TLSv1.3" \
8444 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8445 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8446 -c "NamedGroup: x25519 ( 1d )" \
8447 -c "Verifying peer X.509 certificate... ok" \
8448 -C "received HelloRetryRequest message"
8449
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8450requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8451requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8452requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8453requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8454requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8455requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8456requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8457requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8458run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8459 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8460 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8461 0 \
8462 -s "Protocol is TLSv1.3" \
8463 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8464 -s "received signature algorithm: 0x603" \
8465 -s "got named group: x25519(001d)" \
8466 -s "Verifying peer X.509 certificate... ok" \
8467 -c "Protocol is TLSv1.3" \
8468 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8469 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8470 -c "NamedGroup: x25519 ( 1d )" \
8471 -c "Verifying peer X.509 certificate... ok" \
8472 -C "received HelloRetryRequest message"
8473
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8474requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8475requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8476requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8477requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8478requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8479requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8480requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8481requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8482requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8483requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8484run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8485 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8486 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8487 0 \
8488 -s "Protocol is TLSv1.3" \
8489 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8490 -s "received signature algorithm: 0x804" \
8491 -s "got named group: x25519(001d)" \
8492 -s "Verifying peer X.509 certificate... ok" \
8493 -c "Protocol is TLSv1.3" \
8494 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8495 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8496 -c "NamedGroup: x25519 ( 1d )" \
8497 -c "Verifying peer X.509 certificate... ok" \
8498 -C "received HelloRetryRequest message"
8499
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8500requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8501requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8502requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8503requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8504requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8505requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8506requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8507requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8508run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8509 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8510 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8511 0 \
8512 -s "Protocol is TLSv1.3" \
8513 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8514 -s "received signature algorithm: 0x403" \
8515 -s "got named group: x448(001e)" \
8516 -s "Verifying peer X.509 certificate... ok" \
8517 -c "Protocol is TLSv1.3" \
8518 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8519 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8520 -c "NamedGroup: x448 ( 1e )" \
8521 -c "Verifying peer X.509 certificate... ok" \
8522 -C "received HelloRetryRequest message"
8523
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8524requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8525requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8526requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8527requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8528requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8529requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8530requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8531requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8532run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8533 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8534 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8535 0 \
8536 -s "Protocol is TLSv1.3" \
8537 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8538 -s "received signature algorithm: 0x503" \
8539 -s "got named group: x448(001e)" \
8540 -s "Verifying peer X.509 certificate... ok" \
8541 -c "Protocol is TLSv1.3" \
8542 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8543 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8544 -c "NamedGroup: x448 ( 1e )" \
8545 -c "Verifying peer X.509 certificate... ok" \
8546 -C "received HelloRetryRequest message"
8547
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8548requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8549requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8550requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8551requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8552requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8553requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8554requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8555requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8556run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8557 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8558 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8559 0 \
8560 -s "Protocol is TLSv1.3" \
8561 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8562 -s "received signature algorithm: 0x603" \
8563 -s "got named group: x448(001e)" \
8564 -s "Verifying peer X.509 certificate... ok" \
8565 -c "Protocol is TLSv1.3" \
8566 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8567 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8568 -c "NamedGroup: x448 ( 1e )" \
8569 -c "Verifying peer X.509 certificate... ok" \
8570 -C "received HelloRetryRequest message"
8571
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8572requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8573requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8574requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8575requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8576requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8577requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8578requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8579requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8580requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8581requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8582run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8583 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8584 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8585 0 \
8586 -s "Protocol is TLSv1.3" \
8587 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
8588 -s "received signature algorithm: 0x804" \
8589 -s "got named group: x448(001e)" \
8590 -s "Verifying peer X.509 certificate... ok" \
8591 -c "Protocol is TLSv1.3" \
8592 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8593 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8594 -c "NamedGroup: x448 ( 1e )" \
8595 -c "Verifying peer X.509 certificate... ok" \
8596 -C "received HelloRetryRequest message"
8597
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8598requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8599requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8600requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8601requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8602requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8603requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8604requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8605requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8606run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8607 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8608 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8609 0 \
8610 -s "Protocol is TLSv1.3" \
8611 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8612 -s "received signature algorithm: 0x403" \
8613 -s "got named group: secp256r1(0017)" \
8614 -s "Verifying peer X.509 certificate... ok" \
8615 -c "Protocol is TLSv1.3" \
8616 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8617 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8618 -c "NamedGroup: secp256r1 ( 17 )" \
8619 -c "Verifying peer X.509 certificate... ok" \
8620 -C "received HelloRetryRequest message"
8621
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8622requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8623requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8624requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8625requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8626requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8627requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8628requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8629requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8630run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8631 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8632 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8633 0 \
8634 -s "Protocol is TLSv1.3" \
8635 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8636 -s "received signature algorithm: 0x503" \
8637 -s "got named group: secp256r1(0017)" \
8638 -s "Verifying peer X.509 certificate... ok" \
8639 -c "Protocol is TLSv1.3" \
8640 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8641 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8642 -c "NamedGroup: secp256r1 ( 17 )" \
8643 -c "Verifying peer X.509 certificate... ok" \
8644 -C "received HelloRetryRequest message"
8645
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8646requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8647requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8648requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8649requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8650requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8651requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8652requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8653requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8654run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8655 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8656 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8657 0 \
8658 -s "Protocol is TLSv1.3" \
8659 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8660 -s "received signature algorithm: 0x603" \
8661 -s "got named group: secp256r1(0017)" \
8662 -s "Verifying peer X.509 certificate... ok" \
8663 -c "Protocol is TLSv1.3" \
8664 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8665 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8666 -c "NamedGroup: secp256r1 ( 17 )" \
8667 -c "Verifying peer X.509 certificate... ok" \
8668 -C "received HelloRetryRequest message"
8669
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8670requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8671requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8672requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8673requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8674requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8675requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8676requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8677requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8678requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8679requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8680run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8681 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8682 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8683 0 \
8684 -s "Protocol is TLSv1.3" \
8685 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8686 -s "received signature algorithm: 0x804" \
8687 -s "got named group: secp256r1(0017)" \
8688 -s "Verifying peer X.509 certificate... ok" \
8689 -c "Protocol is TLSv1.3" \
8690 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8691 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8692 -c "NamedGroup: secp256r1 ( 17 )" \
8693 -c "Verifying peer X.509 certificate... ok" \
8694 -C "received HelloRetryRequest message"
8695
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8696requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8697requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8698requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8699requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8700requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8701requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8702requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8703requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8704run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8705 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8706 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8707 0 \
8708 -s "Protocol is TLSv1.3" \
8709 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8710 -s "received signature algorithm: 0x403" \
8711 -s "got named group: secp384r1(0018)" \
8712 -s "Verifying peer X.509 certificate... ok" \
8713 -c "Protocol is TLSv1.3" \
8714 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8715 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8716 -c "NamedGroup: secp384r1 ( 18 )" \
8717 -c "Verifying peer X.509 certificate... ok" \
8718 -C "received HelloRetryRequest message"
8719
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8720requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8721requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8722requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8723requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8724requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8725requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8726requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8727requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8728run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8729 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8730 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8731 0 \
8732 -s "Protocol is TLSv1.3" \
8733 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8734 -s "received signature algorithm: 0x503" \
8735 -s "got named group: secp384r1(0018)" \
8736 -s "Verifying peer X.509 certificate... ok" \
8737 -c "Protocol is TLSv1.3" \
8738 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8739 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8740 -c "NamedGroup: secp384r1 ( 18 )" \
8741 -c "Verifying peer X.509 certificate... ok" \
8742 -C "received HelloRetryRequest message"
8743
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8744requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8745requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8746requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8747requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8748requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8749requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8750requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8751requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8752run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8753 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8754 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8755 0 \
8756 -s "Protocol is TLSv1.3" \
8757 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8758 -s "received signature algorithm: 0x603" \
8759 -s "got named group: secp384r1(0018)" \
8760 -s "Verifying peer X.509 certificate... ok" \
8761 -c "Protocol is TLSv1.3" \
8762 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8763 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8764 -c "NamedGroup: secp384r1 ( 18 )" \
8765 -c "Verifying peer X.509 certificate... ok" \
8766 -C "received HelloRetryRequest message"
8767
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8768requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8769requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8770requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8771requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8772requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8773requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8774requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8775requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8776requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8777requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8778run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8779 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8780 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8781 0 \
8782 -s "Protocol is TLSv1.3" \
8783 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8784 -s "received signature algorithm: 0x804" \
8785 -s "got named group: secp384r1(0018)" \
8786 -s "Verifying peer X.509 certificate... ok" \
8787 -c "Protocol is TLSv1.3" \
8788 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8789 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8790 -c "NamedGroup: secp384r1 ( 18 )" \
8791 -c "Verifying peer X.509 certificate... ok" \
8792 -C "received HelloRetryRequest message"
8793
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8794requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8795requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8796requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8797requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8798requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8799requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8800requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8801requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8802run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8803 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8804 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8805 0 \
8806 -s "Protocol is TLSv1.3" \
8807 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8808 -s "received signature algorithm: 0x403" \
8809 -s "got named group: secp521r1(0019)" \
8810 -s "Verifying peer X.509 certificate... ok" \
8811 -c "Protocol is TLSv1.3" \
8812 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8813 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8814 -c "NamedGroup: secp521r1 ( 19 )" \
8815 -c "Verifying peer X.509 certificate... ok" \
8816 -C "received HelloRetryRequest message"
8817
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8818requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8819requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8820requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8821requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8822requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8823requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8824requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8825requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8826run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8827 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8828 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8829 0 \
8830 -s "Protocol is TLSv1.3" \
8831 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8832 -s "received signature algorithm: 0x503" \
8833 -s "got named group: secp521r1(0019)" \
8834 -s "Verifying peer X.509 certificate... ok" \
8835 -c "Protocol is TLSv1.3" \
8836 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8837 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8838 -c "NamedGroup: secp521r1 ( 19 )" \
8839 -c "Verifying peer X.509 certificate... ok" \
8840 -C "received HelloRetryRequest message"
8841
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8842requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8843requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8844requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8845requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8846requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8847requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8848requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8849requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8850run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8851 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8852 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8853 0 \
8854 -s "Protocol is TLSv1.3" \
8855 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8856 -s "received signature algorithm: 0x603" \
8857 -s "got named group: secp521r1(0019)" \
8858 -s "Verifying peer X.509 certificate... ok" \
8859 -c "Protocol is TLSv1.3" \
8860 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8861 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8862 -c "NamedGroup: secp521r1 ( 19 )" \
8863 -c "Verifying peer X.509 certificate... ok" \
8864 -C "received HelloRetryRequest message"
8865
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8866requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8867requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8868requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8869requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8870requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8871requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8872requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8873requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8874requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8875requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8876run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8877 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8878 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8879 0 \
8880 -s "Protocol is TLSv1.3" \
8881 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8882 -s "received signature algorithm: 0x804" \
8883 -s "got named group: secp521r1(0019)" \
8884 -s "Verifying peer X.509 certificate... ok" \
8885 -c "Protocol is TLSv1.3" \
8886 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8887 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8888 -c "NamedGroup: secp521r1 ( 19 )" \
8889 -c "Verifying peer X.509 certificate... ok" \
8890 -C "received HelloRetryRequest message"
8891
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8892requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8893requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8894requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8895requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8896requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8897requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8898requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8899requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8900run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8901 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8902 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8903 0 \
8904 -s "Protocol is TLSv1.3" \
8905 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8906 -s "received signature algorithm: 0x403" \
8907 -s "got named group: x25519(001d)" \
8908 -s "Verifying peer X.509 certificate... ok" \
8909 -c "Protocol is TLSv1.3" \
8910 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8911 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8912 -c "NamedGroup: x25519 ( 1d )" \
8913 -c "Verifying peer X.509 certificate... ok" \
8914 -C "received HelloRetryRequest message"
8915
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8916requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8917requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8918requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8919requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8920requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8921requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8922requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8923requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8924run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8925 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8926 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8927 0 \
8928 -s "Protocol is TLSv1.3" \
8929 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8930 -s "received signature algorithm: 0x503" \
8931 -s "got named group: x25519(001d)" \
8932 -s "Verifying peer X.509 certificate... ok" \
8933 -c "Protocol is TLSv1.3" \
8934 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8935 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8936 -c "NamedGroup: x25519 ( 1d )" \
8937 -c "Verifying peer X.509 certificate... ok" \
8938 -C "received HelloRetryRequest message"
8939
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8940requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8941requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8942requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8943requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8944requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8945requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8946requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8947requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8948run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8949 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8950 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8951 0 \
8952 -s "Protocol is TLSv1.3" \
8953 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8954 -s "received signature algorithm: 0x603" \
8955 -s "got named group: x25519(001d)" \
8956 -s "Verifying peer X.509 certificate... ok" \
8957 -c "Protocol is TLSv1.3" \
8958 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8959 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8960 -c "NamedGroup: x25519 ( 1d )" \
8961 -c "Verifying peer X.509 certificate... ok" \
8962 -C "received HelloRetryRequest message"
8963
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8964requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8965requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8966requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8967requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8968requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8969requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8970requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8971requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8972requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8973requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
8974run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8975 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
8976 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8977 0 \
8978 -s "Protocol is TLSv1.3" \
8979 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
8980 -s "received signature algorithm: 0x804" \
8981 -s "got named group: x25519(001d)" \
8982 -s "Verifying peer X.509 certificate... ok" \
8983 -c "Protocol is TLSv1.3" \
8984 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8985 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8986 -c "NamedGroup: x25519 ( 1d )" \
8987 -c "Verifying peer X.509 certificate... ok" \
8988 -C "received HelloRetryRequest message"
8989
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8990requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8991requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8992requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8993requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8994requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8995requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]8996requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
8997requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8998run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]8999 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9000 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9001 0 \
9002 -s "Protocol is TLSv1.3" \
9003 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
9004 -s "received signature algorithm: 0x403" \
9005 -s "got named group: x448(001e)" \
9006 -s "Verifying peer X.509 certificate... ok" \
9007 -c "Protocol is TLSv1.3" \
9008 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
9009 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9010 -c "NamedGroup: x448 ( 1e )" \
9011 -c "Verifying peer X.509 certificate... ok" \
9012 -C "received HelloRetryRequest message"
9013
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9014requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9015requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9016requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9017requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9018requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9019requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9020requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9021requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9022run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9023 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9024 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9025 0 \
9026 -s "Protocol is TLSv1.3" \
9027 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
9028 -s "received signature algorithm: 0x503" \
9029 -s "got named group: x448(001e)" \
9030 -s "Verifying peer X.509 certificate... ok" \
9031 -c "Protocol is TLSv1.3" \
9032 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
9033 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9034 -c "NamedGroup: x448 ( 1e )" \
9035 -c "Verifying peer X.509 certificate... ok" \
9036 -C "received HelloRetryRequest message"
9037
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9038requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9039requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9040requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9041requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9042requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9043requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9044requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9045requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9046run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9047 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9048 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9049 0 \
9050 -s "Protocol is TLSv1.3" \
9051 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
9052 -s "received signature algorithm: 0x603" \
9053 -s "got named group: x448(001e)" \
9054 -s "Verifying peer X.509 certificate... ok" \
9055 -c "Protocol is TLSv1.3" \
9056 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
9057 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9058 -c "NamedGroup: x448 ( 1e )" \
9059 -c "Verifying peer X.509 certificate... ok" \
9060 -C "received HelloRetryRequest message"
9061
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9062requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9063requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9064requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9065requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9066requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9067requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9068requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9069requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9070requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9071requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
9072run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9073 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9074 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9075 0 \
9076 -s "Protocol is TLSv1.3" \
9077 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
9078 -s "received signature algorithm: 0x804" \
9079 -s "got named group: x448(001e)" \
9080 -s "Verifying peer X.509 certificate... ok" \
9081 -c "Protocol is TLSv1.3" \
9082 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
9083 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9084 -c "NamedGroup: x448 ( 1e )" \
9085 -c "Verifying peer X.509 certificate... ok" \
9086 -C "received HelloRetryRequest message"
9087
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9088requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9089requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9090requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9091requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9092requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9093requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9094requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9095requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9096run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9097 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9098 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9099 0 \
9100 -s "Protocol is TLSv1.3" \
9101 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9102 -s "received signature algorithm: 0x403" \
9103 -s "got named group: secp256r1(0017)" \
9104 -s "Verifying peer X.509 certificate... ok" \
9105 -c "Protocol is TLSv1.3" \
9106 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9107 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9108 -c "NamedGroup: secp256r1 ( 17 )" \
9109 -c "Verifying peer X.509 certificate... ok" \
9110 -C "received HelloRetryRequest message"
9111
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9112requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9113requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9114requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9115requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9116requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9117requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9118requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9119requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9120run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9121 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9122 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9123 0 \
9124 -s "Protocol is TLSv1.3" \
9125 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9126 -s "received signature algorithm: 0x503" \
9127 -s "got named group: secp256r1(0017)" \
9128 -s "Verifying peer X.509 certificate... ok" \
9129 -c "Protocol is TLSv1.3" \
9130 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9131 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9132 -c "NamedGroup: secp256r1 ( 17 )" \
9133 -c "Verifying peer X.509 certificate... ok" \
9134 -C "received HelloRetryRequest message"
9135
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9136requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9137requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9138requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9139requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9140requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9141requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9142requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9143requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9144run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9145 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9146 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9147 0 \
9148 -s "Protocol is TLSv1.3" \
9149 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9150 -s "received signature algorithm: 0x603" \
9151 -s "got named group: secp256r1(0017)" \
9152 -s "Verifying peer X.509 certificate... ok" \
9153 -c "Protocol is TLSv1.3" \
9154 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9155 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9156 -c "NamedGroup: secp256r1 ( 17 )" \
9157 -c "Verifying peer X.509 certificate... ok" \
9158 -C "received HelloRetryRequest message"
9159
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9160requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9161requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9162requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9163requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9164requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9165requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9166requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9167requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9168requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9169requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
9170run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9171 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9172 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9173 0 \
9174 -s "Protocol is TLSv1.3" \
9175 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9176 -s "received signature algorithm: 0x804" \
9177 -s "got named group: secp256r1(0017)" \
9178 -s "Verifying peer X.509 certificate... ok" \
9179 -c "Protocol is TLSv1.3" \
9180 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9181 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9182 -c "NamedGroup: secp256r1 ( 17 )" \
9183 -c "Verifying peer X.509 certificate... ok" \
9184 -C "received HelloRetryRequest message"
9185
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9186requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9187requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9188requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9189requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9190requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9191requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9192requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9193requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9194run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9195 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9196 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9197 0 \
9198 -s "Protocol is TLSv1.3" \
9199 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9200 -s "received signature algorithm: 0x403" \
9201 -s "got named group: secp384r1(0018)" \
9202 -s "Verifying peer X.509 certificate... ok" \
9203 -c "Protocol is TLSv1.3" \
9204 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9205 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9206 -c "NamedGroup: secp384r1 ( 18 )" \
9207 -c "Verifying peer X.509 certificate... ok" \
9208 -C "received HelloRetryRequest message"
9209
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9210requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9211requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9212requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9213requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9214requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9215requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9216requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9217requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9218run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9219 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9220 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9221 0 \
9222 -s "Protocol is TLSv1.3" \
9223 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9224 -s "received signature algorithm: 0x503" \
9225 -s "got named group: secp384r1(0018)" \
9226 -s "Verifying peer X.509 certificate... ok" \
9227 -c "Protocol is TLSv1.3" \
9228 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9229 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9230 -c "NamedGroup: secp384r1 ( 18 )" \
9231 -c "Verifying peer X.509 certificate... ok" \
9232 -C "received HelloRetryRequest message"
9233
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9234requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9235requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9236requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9237requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9238requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9239requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9240requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9241requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9242run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9243 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9244 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9245 0 \
9246 -s "Protocol is TLSv1.3" \
9247 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9248 -s "received signature algorithm: 0x603" \
9249 -s "got named group: secp384r1(0018)" \
9250 -s "Verifying peer X.509 certificate... ok" \
9251 -c "Protocol is TLSv1.3" \
9252 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9253 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9254 -c "NamedGroup: secp384r1 ( 18 )" \
9255 -c "Verifying peer X.509 certificate... ok" \
9256 -C "received HelloRetryRequest message"
9257
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9258requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9259requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9260requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9261requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9262requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9263requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9264requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9265requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9266requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9267requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
9268run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9269 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9270 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9271 0 \
9272 -s "Protocol is TLSv1.3" \
9273 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9274 -s "received signature algorithm: 0x804" \
9275 -s "got named group: secp384r1(0018)" \
9276 -s "Verifying peer X.509 certificate... ok" \
9277 -c "Protocol is TLSv1.3" \
9278 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9279 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9280 -c "NamedGroup: secp384r1 ( 18 )" \
9281 -c "Verifying peer X.509 certificate... ok" \
9282 -C "received HelloRetryRequest message"
9283
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9284requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9285requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9286requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9287requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9288requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9289requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9290requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9291requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9292run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9293 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9294 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9295 0 \
9296 -s "Protocol is TLSv1.3" \
9297 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9298 -s "received signature algorithm: 0x403" \
9299 -s "got named group: secp521r1(0019)" \
9300 -s "Verifying peer X.509 certificate... ok" \
9301 -c "Protocol is TLSv1.3" \
9302 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9303 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9304 -c "NamedGroup: secp521r1 ( 19 )" \
9305 -c "Verifying peer X.509 certificate... ok" \
9306 -C "received HelloRetryRequest message"
9307
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9308requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9309requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9310requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9311requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9312requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9313requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9314requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9315requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9316run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9317 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9318 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9319 0 \
9320 -s "Protocol is TLSv1.3" \
9321 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9322 -s "received signature algorithm: 0x503" \
9323 -s "got named group: secp521r1(0019)" \
9324 -s "Verifying peer X.509 certificate... ok" \
9325 -c "Protocol is TLSv1.3" \
9326 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9327 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9328 -c "NamedGroup: secp521r1 ( 19 )" \
9329 -c "Verifying peer X.509 certificate... ok" \
9330 -C "received HelloRetryRequest message"
9331
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9332requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9333requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9334requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9335requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9336requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9337requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9338requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9339requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9340run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9341 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9342 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9343 0 \
9344 -s "Protocol is TLSv1.3" \
9345 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9346 -s "received signature algorithm: 0x603" \
9347 -s "got named group: secp521r1(0019)" \
9348 -s "Verifying peer X.509 certificate... ok" \
9349 -c "Protocol is TLSv1.3" \
9350 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9351 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9352 -c "NamedGroup: secp521r1 ( 19 )" \
9353 -c "Verifying peer X.509 certificate... ok" \
9354 -C "received HelloRetryRequest message"
9355
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9356requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9357requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9358requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9359requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9360requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9361requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9362requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9363requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9364requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9365requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
9366run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9367 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9368 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9369 0 \
9370 -s "Protocol is TLSv1.3" \
9371 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9372 -s "received signature algorithm: 0x804" \
9373 -s "got named group: secp521r1(0019)" \
9374 -s "Verifying peer X.509 certificate... ok" \
9375 -c "Protocol is TLSv1.3" \
9376 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9377 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9378 -c "NamedGroup: secp521r1 ( 19 )" \
9379 -c "Verifying peer X.509 certificate... ok" \
9380 -C "received HelloRetryRequest message"
9381
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9382requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9383requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9384requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9385requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9386requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9387requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9388requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9389requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9390run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9391 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9392 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9393 0 \
9394 -s "Protocol is TLSv1.3" \
9395 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9396 -s "received signature algorithm: 0x403" \
9397 -s "got named group: x25519(001d)" \
9398 -s "Verifying peer X.509 certificate... ok" \
9399 -c "Protocol is TLSv1.3" \
9400 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9401 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9402 -c "NamedGroup: x25519 ( 1d )" \
9403 -c "Verifying peer X.509 certificate... ok" \
9404 -C "received HelloRetryRequest message"
9405
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9406requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9407requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9408requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9409requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9410requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9411requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9412requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9413requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9414run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9415 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9416 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9417 0 \
9418 -s "Protocol is TLSv1.3" \
9419 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9420 -s "received signature algorithm: 0x503" \
9421 -s "got named group: x25519(001d)" \
9422 -s "Verifying peer X.509 certificate... ok" \
9423 -c "Protocol is TLSv1.3" \
9424 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9425 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9426 -c "NamedGroup: x25519 ( 1d )" \
9427 -c "Verifying peer X.509 certificate... ok" \
9428 -C "received HelloRetryRequest message"
9429
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9430requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9431requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9432requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9433requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9434requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9435requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9436requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9437requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9438run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9439 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9440 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9441 0 \
9442 -s "Protocol is TLSv1.3" \
9443 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9444 -s "received signature algorithm: 0x603" \
9445 -s "got named group: x25519(001d)" \
9446 -s "Verifying peer X.509 certificate... ok" \
9447 -c "Protocol is TLSv1.3" \
9448 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9449 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9450 -c "NamedGroup: x25519 ( 1d )" \
9451 -c "Verifying peer X.509 certificate... ok" \
9452 -C "received HelloRetryRequest message"
9453
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9454requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9455requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9456requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9457requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9458requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9459requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9460requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9461requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9462requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9463requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
9464run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9465 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9466 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9467 0 \
9468 -s "Protocol is TLSv1.3" \
9469 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9470 -s "received signature algorithm: 0x804" \
9471 -s "got named group: x25519(001d)" \
9472 -s "Verifying peer X.509 certificate... ok" \
9473 -c "Protocol is TLSv1.3" \
9474 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9475 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9476 -c "NamedGroup: x25519 ( 1d )" \
9477 -c "Verifying peer X.509 certificate... ok" \
9478 -C "received HelloRetryRequest message"
9479
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9480requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9481requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9482requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9483requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9484requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9485requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9486requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9487requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9488run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9489 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9490 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9491 0 \
9492 -s "Protocol is TLSv1.3" \
9493 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9494 -s "received signature algorithm: 0x403" \
9495 -s "got named group: x448(001e)" \
9496 -s "Verifying peer X.509 certificate... ok" \
9497 -c "Protocol is TLSv1.3" \
9498 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9499 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9500 -c "NamedGroup: x448 ( 1e )" \
9501 -c "Verifying peer X.509 certificate... ok" \
9502 -C "received HelloRetryRequest message"
9503
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9504requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9505requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9506requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9507requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9508requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9509requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9510requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9511requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9512run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9513 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9514 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9515 0 \
9516 -s "Protocol is TLSv1.3" \
9517 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9518 -s "received signature algorithm: 0x503" \
9519 -s "got named group: x448(001e)" \
9520 -s "Verifying peer X.509 certificate... ok" \
9521 -c "Protocol is TLSv1.3" \
9522 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9523 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9524 -c "NamedGroup: x448 ( 1e )" \
9525 -c "Verifying peer X.509 certificate... ok" \
9526 -C "received HelloRetryRequest message"
9527
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9528requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9529requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9530requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9531requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9532requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9533requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9534requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9535requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9536run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9537 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9538 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9539 0 \
9540 -s "Protocol is TLSv1.3" \
9541 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9542 -s "received signature algorithm: 0x603" \
9543 -s "got named group: x448(001e)" \
9544 -s "Verifying peer X.509 certificate... ok" \
9545 -c "Protocol is TLSv1.3" \
9546 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9547 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9548 -c "NamedGroup: x448 ( 1e )" \
9549 -c "Verifying peer X.509 certificate... ok" \
9550 -C "received HelloRetryRequest message"
9551
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9552requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9553requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9554requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9555requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9556requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9557requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9558requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9559requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9560requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9561requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
9562run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9563 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9564 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 curves=x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9565 0 \
9566 -s "Protocol is TLSv1.3" \
9567 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
9568 -s "received signature algorithm: 0x804" \
9569 -s "got named group: x448(001e)" \
9570 -s "Verifying peer X.509 certificate... ok" \
9571 -c "Protocol is TLSv1.3" \
9572 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9573 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9574 -c "NamedGroup: x448 ( 1e )" \
9575 -c "Verifying peer X.509 certificate... ok" \
9576 -C "received HelloRetryRequest message"
9577
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9578requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]9579requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9580requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9581requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9582requires_openssl_tls1_3
9583run_test "TLS 1.3 O->m: HRR secp256r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9584 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9585 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:P-384 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9586 0 \
9587 -s "Protocol is TLSv1.3" \
9588 -s "got named group: secp384r1(0018)" \
9589 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9590 -s "HRR selected_group: secp384r1"
9591
9592requires_config_enabled MBEDTLS_SSL_SRV_C
9593requires_config_enabled MBEDTLS_DEBUG_C
9594requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9595requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9596requires_openssl_tls1_3
9597run_test "TLS 1.3 O->m: HRR secp256r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9598 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9599 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:P-521 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9600 0 \
9601 -s "Protocol is TLSv1.3" \
9602 -s "got named group: secp521r1(0019)" \
9603 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9604 -s "HRR selected_group: secp521r1"
9605
9606requires_config_enabled MBEDTLS_SSL_SRV_C
9607requires_config_enabled MBEDTLS_DEBUG_C
9608requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9609requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9610requires_openssl_tls1_3
9611run_test "TLS 1.3 O->m: HRR secp256r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9612 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9613 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:X25519 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9614 0 \
9615 -s "Protocol is TLSv1.3" \
9616 -s "got named group: x25519(001d)" \
9617 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9618 -s "HRR selected_group: x25519"
9619
9620requires_config_enabled MBEDTLS_SSL_SRV_C
9621requires_config_enabled MBEDTLS_DEBUG_C
9622requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9623requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9624requires_openssl_tls1_3
9625run_test "TLS 1.3 O->m: HRR secp256r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9626 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9627 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:X448 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9628 0 \
9629 -s "Protocol is TLSv1.3" \
9630 -s "got named group: x448(001e)" \
9631 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9632 -s "HRR selected_group: x448"
9633
9634requires_config_enabled MBEDTLS_SSL_SRV_C
9635requires_config_enabled MBEDTLS_DEBUG_C
9636requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9637requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9638requires_openssl_tls1_3
9639run_test "TLS 1.3 O->m: HRR secp384r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9640 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9641 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:P-256 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9642 0 \
9643 -s "Protocol is TLSv1.3" \
9644 -s "got named group: secp256r1(0017)" \
9645 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9646 -s "HRR selected_group: secp256r1"
9647
9648requires_config_enabled MBEDTLS_SSL_SRV_C
9649requires_config_enabled MBEDTLS_DEBUG_C
9650requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9651requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9652requires_openssl_tls1_3
9653run_test "TLS 1.3 O->m: HRR secp384r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9654 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9655 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:P-521 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9656 0 \
9657 -s "Protocol is TLSv1.3" \
9658 -s "got named group: secp521r1(0019)" \
9659 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9660 -s "HRR selected_group: secp521r1"
9661
9662requires_config_enabled MBEDTLS_SSL_SRV_C
9663requires_config_enabled MBEDTLS_DEBUG_C
9664requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9665requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9666requires_openssl_tls1_3
9667run_test "TLS 1.3 O->m: HRR secp384r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9668 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9669 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:X25519 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9670 0 \
9671 -s "Protocol is TLSv1.3" \
9672 -s "got named group: x25519(001d)" \
9673 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9674 -s "HRR selected_group: x25519"
9675
9676requires_config_enabled MBEDTLS_SSL_SRV_C
9677requires_config_enabled MBEDTLS_DEBUG_C
9678requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9679requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9680requires_openssl_tls1_3
9681run_test "TLS 1.3 O->m: HRR secp384r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9682 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9683 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:X448 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9684 0 \
9685 -s "Protocol is TLSv1.3" \
9686 -s "got named group: x448(001e)" \
9687 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9688 -s "HRR selected_group: x448"
9689
9690requires_config_enabled MBEDTLS_SSL_SRV_C
9691requires_config_enabled MBEDTLS_DEBUG_C
9692requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9693requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9694requires_openssl_tls1_3
9695run_test "TLS 1.3 O->m: HRR secp521r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9696 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9697 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:P-256 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9698 0 \
9699 -s "Protocol is TLSv1.3" \
9700 -s "got named group: secp256r1(0017)" \
9701 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9702 -s "HRR selected_group: secp256r1"
9703
9704requires_config_enabled MBEDTLS_SSL_SRV_C
9705requires_config_enabled MBEDTLS_DEBUG_C
9706requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9707requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9708requires_openssl_tls1_3
9709run_test "TLS 1.3 O->m: HRR secp521r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9710 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9711 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:P-384 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9712 0 \
9713 -s "Protocol is TLSv1.3" \
9714 -s "got named group: secp384r1(0018)" \
9715 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9716 -s "HRR selected_group: secp384r1"
9717
9718requires_config_enabled MBEDTLS_SSL_SRV_C
9719requires_config_enabled MBEDTLS_DEBUG_C
9720requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9721requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9722requires_openssl_tls1_3
9723run_test "TLS 1.3 O->m: HRR secp521r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9724 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9725 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:X25519 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9726 0 \
9727 -s "Protocol is TLSv1.3" \
9728 -s "got named group: x25519(001d)" \
9729 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9730 -s "HRR selected_group: x25519"
9731
9732requires_config_enabled MBEDTLS_SSL_SRV_C
9733requires_config_enabled MBEDTLS_DEBUG_C
9734requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9735requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9736requires_openssl_tls1_3
9737run_test "TLS 1.3 O->m: HRR secp521r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9738 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9739 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:X448 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9740 0 \
9741 -s "Protocol is TLSv1.3" \
9742 -s "got named group: x448(001e)" \
9743 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9744 -s "HRR selected_group: x448"
9745
9746requires_config_enabled MBEDTLS_SSL_SRV_C
9747requires_config_enabled MBEDTLS_DEBUG_C
9748requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9749requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9750requires_openssl_tls1_3
9751run_test "TLS 1.3 O->m: HRR x25519 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9752 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9753 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-256 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9754 0 \
9755 -s "Protocol is TLSv1.3" \
9756 -s "got named group: secp256r1(0017)" \
9757 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9758 -s "HRR selected_group: secp256r1"
9759
9760requires_config_enabled MBEDTLS_SSL_SRV_C
9761requires_config_enabled MBEDTLS_DEBUG_C
9762requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9763requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9764requires_openssl_tls1_3
9765run_test "TLS 1.3 O->m: HRR x25519 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9766 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9767 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-384 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9768 0 \
9769 -s "Protocol is TLSv1.3" \
9770 -s "got named group: secp384r1(0018)" \
9771 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9772 -s "HRR selected_group: secp384r1"
9773
9774requires_config_enabled MBEDTLS_SSL_SRV_C
9775requires_config_enabled MBEDTLS_DEBUG_C
9776requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9777requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9778requires_openssl_tls1_3
9779run_test "TLS 1.3 O->m: HRR x25519 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9780 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9781 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-521 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9782 0 \
9783 -s "Protocol is TLSv1.3" \
9784 -s "got named group: secp521r1(0019)" \
9785 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9786 -s "HRR selected_group: secp521r1"
9787
9788requires_config_enabled MBEDTLS_SSL_SRV_C
9789requires_config_enabled MBEDTLS_DEBUG_C
9790requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9791requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9792requires_openssl_tls1_3
9793run_test "TLS 1.3 O->m: HRR x25519 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9794 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9795 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:X448 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9796 0 \
9797 -s "Protocol is TLSv1.3" \
9798 -s "got named group: x448(001e)" \
9799 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9800 -s "HRR selected_group: x448"
9801
9802requires_config_enabled MBEDTLS_SSL_SRV_C
9803requires_config_enabled MBEDTLS_DEBUG_C
9804requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9805requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9806requires_openssl_tls1_3
9807run_test "TLS 1.3 O->m: HRR x448 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9808 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9809 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-256 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9810 0 \
9811 -s "Protocol is TLSv1.3" \
9812 -s "got named group: secp256r1(0017)" \
9813 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9814 -s "HRR selected_group: secp256r1"
9815
9816requires_config_enabled MBEDTLS_SSL_SRV_C
9817requires_config_enabled MBEDTLS_DEBUG_C
9818requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9819requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9820requires_openssl_tls1_3
9821run_test "TLS 1.3 O->m: HRR x448 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9822 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9823 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-384 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9824 0 \
9825 -s "Protocol is TLSv1.3" \
9826 -s "got named group: secp384r1(0018)" \
9827 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9828 -s "HRR selected_group: secp384r1"
9829
9830requires_config_enabled MBEDTLS_SSL_SRV_C
9831requires_config_enabled MBEDTLS_DEBUG_C
9832requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9833requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9834requires_openssl_tls1_3
9835run_test "TLS 1.3 O->m: HRR x448 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9836 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9837 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-521 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9838 0 \
9839 -s "Protocol is TLSv1.3" \
9840 -s "got named group: secp521r1(0019)" \
9841 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9842 -s "HRR selected_group: secp521r1"
9843
9844requires_config_enabled MBEDTLS_SSL_SRV_C
9845requires_config_enabled MBEDTLS_DEBUG_C
9846requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9847requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9848requires_openssl_tls1_3
9849run_test "TLS 1.3 O->m: HRR x448 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9850 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9851 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:X25519 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9852 0 \
9853 -s "Protocol is TLSv1.3" \
9854 -s "got named group: x25519(001d)" \
9855 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9856 -s "HRR selected_group: x25519"
9857
9858requires_config_enabled MBEDTLS_SSL_SRV_C
9859requires_config_enabled MBEDTLS_DEBUG_C
9860requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9861requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9862requires_gnutls_tls1_3
9863requires_gnutls_next_no_ticket
9864requires_gnutls_next_disable_tls13_compat
9865run_test "TLS 1.3 G->m: HRR secp256r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9866 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9867 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9868 0 \
9869 -s "Protocol is TLSv1.3" \
9870 -s "got named group: secp384r1(0018)" \
9871 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9872 -s "HRR selected_group: secp384r1"
9873
9874requires_config_enabled MBEDTLS_SSL_SRV_C
9875requires_config_enabled MBEDTLS_DEBUG_C
9876requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9877requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9878requires_gnutls_tls1_3
9879requires_gnutls_next_no_ticket
9880requires_gnutls_next_disable_tls13_compat
9881run_test "TLS 1.3 G->m: HRR secp256r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9882 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9883 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9884 0 \
9885 -s "Protocol is TLSv1.3" \
9886 -s "got named group: secp521r1(0019)" \
9887 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9888 -s "HRR selected_group: secp521r1"
9889
9890requires_config_enabled MBEDTLS_SSL_SRV_C
9891requires_config_enabled MBEDTLS_DEBUG_C
9892requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9893requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9894requires_gnutls_tls1_3
9895requires_gnutls_next_no_ticket
9896requires_gnutls_next_disable_tls13_compat
9897run_test "TLS 1.3 G->m: HRR secp256r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9898 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9899 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9900 0 \
9901 -s "Protocol is TLSv1.3" \
9902 -s "got named group: x25519(001d)" \
9903 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9904 -s "HRR selected_group: x25519"
9905
9906requires_config_enabled MBEDTLS_SSL_SRV_C
9907requires_config_enabled MBEDTLS_DEBUG_C
9908requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9909requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9910requires_gnutls_tls1_3
9911requires_gnutls_next_no_ticket
9912requires_gnutls_next_disable_tls13_compat
9913run_test "TLS 1.3 G->m: HRR secp256r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9914 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9915 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9916 0 \
9917 -s "Protocol is TLSv1.3" \
9918 -s "got named group: x448(001e)" \
9919 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9920 -s "HRR selected_group: x448"
9921
9922requires_config_enabled MBEDTLS_SSL_SRV_C
9923requires_config_enabled MBEDTLS_DEBUG_C
9924requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9925requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9926requires_gnutls_tls1_3
9927requires_gnutls_next_no_ticket
9928requires_gnutls_next_disable_tls13_compat
9929run_test "TLS 1.3 G->m: HRR secp384r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9930 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9931 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9932 0 \
9933 -s "Protocol is TLSv1.3" \
9934 -s "got named group: secp256r1(0017)" \
9935 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9936 -s "HRR selected_group: secp256r1"
9937
9938requires_config_enabled MBEDTLS_SSL_SRV_C
9939requires_config_enabled MBEDTLS_DEBUG_C
9940requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9941requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9942requires_gnutls_tls1_3
9943requires_gnutls_next_no_ticket
9944requires_gnutls_next_disable_tls13_compat
9945run_test "TLS 1.3 G->m: HRR secp384r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9946 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9947 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9948 0 \
9949 -s "Protocol is TLSv1.3" \
9950 -s "got named group: secp521r1(0019)" \
9951 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9952 -s "HRR selected_group: secp521r1"
9953
9954requires_config_enabled MBEDTLS_SSL_SRV_C
9955requires_config_enabled MBEDTLS_DEBUG_C
9956requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9957requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9958requires_gnutls_tls1_3
9959requires_gnutls_next_no_ticket
9960requires_gnutls_next_disable_tls13_compat
9961run_test "TLS 1.3 G->m: HRR secp384r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9962 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9963 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9964 0 \
9965 -s "Protocol is TLSv1.3" \
9966 -s "got named group: x25519(001d)" \
9967 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9968 -s "HRR selected_group: x25519"
9969
9970requires_config_enabled MBEDTLS_SSL_SRV_C
9971requires_config_enabled MBEDTLS_DEBUG_C
9972requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9973requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9974requires_gnutls_tls1_3
9975requires_gnutls_next_no_ticket
9976requires_gnutls_next_disable_tls13_compat
9977run_test "TLS 1.3 G->m: HRR secp384r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9978 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9979 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9980 0 \
9981 -s "Protocol is TLSv1.3" \
9982 -s "got named group: x448(001e)" \
9983 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9984 -s "HRR selected_group: x448"
9985
9986requires_config_enabled MBEDTLS_SSL_SRV_C
9987requires_config_enabled MBEDTLS_DEBUG_C
9988requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
9989requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9990requires_gnutls_tls1_3
9991requires_gnutls_next_no_ticket
9992requires_gnutls_next_disable_tls13_compat
9993run_test "TLS 1.3 G->m: HRR secp521r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]9994 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9995 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9996 0 \
9997 -s "Protocol is TLSv1.3" \
9998 -s "got named group: secp256r1(0017)" \
9999 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10000 -s "HRR selected_group: secp256r1"
10001
10002requires_config_enabled MBEDTLS_SSL_SRV_C
10003requires_config_enabled MBEDTLS_DEBUG_C
10004requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10005requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10006requires_gnutls_tls1_3
10007requires_gnutls_next_no_ticket
10008requires_gnutls_next_disable_tls13_compat
10009run_test "TLS 1.3 G->m: HRR secp521r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10010 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10011 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10012 0 \
10013 -s "Protocol is TLSv1.3" \
10014 -s "got named group: secp384r1(0018)" \
10015 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10016 -s "HRR selected_group: secp384r1"
10017
10018requires_config_enabled MBEDTLS_SSL_SRV_C
10019requires_config_enabled MBEDTLS_DEBUG_C
10020requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10021requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10022requires_gnutls_tls1_3
10023requires_gnutls_next_no_ticket
10024requires_gnutls_next_disable_tls13_compat
10025run_test "TLS 1.3 G->m: HRR secp521r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10026 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10027 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10028 0 \
10029 -s "Protocol is TLSv1.3" \
10030 -s "got named group: x25519(001d)" \
10031 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10032 -s "HRR selected_group: x25519"
10033
10034requires_config_enabled MBEDTLS_SSL_SRV_C
10035requires_config_enabled MBEDTLS_DEBUG_C
10036requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10037requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10038requires_gnutls_tls1_3
10039requires_gnutls_next_no_ticket
10040requires_gnutls_next_disable_tls13_compat
10041run_test "TLS 1.3 G->m: HRR secp521r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10042 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10043 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10044 0 \
10045 -s "Protocol is TLSv1.3" \
10046 -s "got named group: x448(001e)" \
10047 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10048 -s "HRR selected_group: x448"
10049
10050requires_config_enabled MBEDTLS_SSL_SRV_C
10051requires_config_enabled MBEDTLS_DEBUG_C
10052requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10053requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10054requires_gnutls_tls1_3
10055requires_gnutls_next_no_ticket
10056requires_gnutls_next_disable_tls13_compat
10057run_test "TLS 1.3 G->m: HRR x25519 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10058 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10059 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10060 0 \
10061 -s "Protocol is TLSv1.3" \
10062 -s "got named group: secp256r1(0017)" \
10063 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10064 -s "HRR selected_group: secp256r1"
10065
10066requires_config_enabled MBEDTLS_SSL_SRV_C
10067requires_config_enabled MBEDTLS_DEBUG_C
10068requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10069requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10070requires_gnutls_tls1_3
10071requires_gnutls_next_no_ticket
10072requires_gnutls_next_disable_tls13_compat
10073run_test "TLS 1.3 G->m: HRR x25519 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10074 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10075 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10076 0 \
10077 -s "Protocol is TLSv1.3" \
10078 -s "got named group: secp384r1(0018)" \
10079 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10080 -s "HRR selected_group: secp384r1"
10081
10082requires_config_enabled MBEDTLS_SSL_SRV_C
10083requires_config_enabled MBEDTLS_DEBUG_C
10084requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10085requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10086requires_gnutls_tls1_3
10087requires_gnutls_next_no_ticket
10088requires_gnutls_next_disable_tls13_compat
10089run_test "TLS 1.3 G->m: HRR x25519 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10090 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10091 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10092 0 \
10093 -s "Protocol is TLSv1.3" \
10094 -s "got named group: secp521r1(0019)" \
10095 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10096 -s "HRR selected_group: secp521r1"
10097
10098requires_config_enabled MBEDTLS_SSL_SRV_C
10099requires_config_enabled MBEDTLS_DEBUG_C
10100requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10101requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10102requires_gnutls_tls1_3
10103requires_gnutls_next_no_ticket
10104requires_gnutls_next_disable_tls13_compat
10105run_test "TLS 1.3 G->m: HRR x25519 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10106 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10107 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10108 0 \
10109 -s "Protocol is TLSv1.3" \
10110 -s "got named group: x448(001e)" \
10111 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10112 -s "HRR selected_group: x448"
10113
10114requires_config_enabled MBEDTLS_SSL_SRV_C
10115requires_config_enabled MBEDTLS_DEBUG_C
10116requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10117requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10118requires_gnutls_tls1_3
10119requires_gnutls_next_no_ticket
10120requires_gnutls_next_disable_tls13_compat
10121run_test "TLS 1.3 G->m: HRR x448 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10122 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10123 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10124 0 \
10125 -s "Protocol is TLSv1.3" \
10126 -s "got named group: secp256r1(0017)" \
10127 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10128 -s "HRR selected_group: secp256r1"
10129
10130requires_config_enabled MBEDTLS_SSL_SRV_C
10131requires_config_enabled MBEDTLS_DEBUG_C
10132requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10133requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10134requires_gnutls_tls1_3
10135requires_gnutls_next_no_ticket
10136requires_gnutls_next_disable_tls13_compat
10137run_test "TLS 1.3 G->m: HRR x448 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10138 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10139 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10140 0 \
10141 -s "Protocol is TLSv1.3" \
10142 -s "got named group: secp384r1(0018)" \
10143 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10144 -s "HRR selected_group: secp384r1"
10145
10146requires_config_enabled MBEDTLS_SSL_SRV_C
10147requires_config_enabled MBEDTLS_DEBUG_C
10148requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10149requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10150requires_gnutls_tls1_3
10151requires_gnutls_next_no_ticket
10152requires_gnutls_next_disable_tls13_compat
10153run_test "TLS 1.3 G->m: HRR x448 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10154 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10155 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10156 0 \
10157 -s "Protocol is TLSv1.3" \
10158 -s "got named group: secp521r1(0019)" \
10159 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10160 -s "HRR selected_group: secp521r1"
10161
10162requires_config_enabled MBEDTLS_SSL_SRV_C
10163requires_config_enabled MBEDTLS_DEBUG_C
10164requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10165requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10166requires_gnutls_tls1_3
10167requires_gnutls_next_no_ticket
10168requires_gnutls_next_disable_tls13_compat
10169run_test "TLS 1.3 G->m: HRR x448 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10170 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10171 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10172 0 \
10173 -s "Protocol is TLSv1.3" \
10174 -s "got named group: x25519(001d)" \
10175 -s "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10176 -s "HRR selected_group: x25519"
10177
10178requires_openssl_tls1_3
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10179requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10180requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10181requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10182requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]10183run_test "TLS 1.3 m->O: HRR secp256r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10184 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10185 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp384r1 force_version=tls13" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]10186 0 \
10187 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10188 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]10189 -c "NamedGroup: secp256r1 ( 17 )" \
10190 -c "NamedGroup: secp384r1 ( 18 )" \
10191 -c "Verifying peer X.509 certificate... ok" \
10192 -c "received HelloRetryRequest message" \
10193 -c "selected_group ( 24 )"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10194
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10195requires_openssl_tls1_3
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10196requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10197requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10198requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10199requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]10200run_test "TLS 1.3 m->O: HRR secp256r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10201 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10202 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp521r1 force_version=tls13" \
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10203 0 \
10204 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10205 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]10206 -c "NamedGroup: secp256r1 ( 17 )" \
10207 -c "NamedGroup: secp521r1 ( 19 )" \
10208 -c "Verifying peer X.509 certificate... ok" \
10209 -c "received HelloRetryRequest message" \
10210 -c "selected_group ( 25 )"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10211
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10212requires_openssl_tls1_3
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10213requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10214requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10215requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10216requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]10217run_test "TLS 1.3 m->O: HRR secp256r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10218 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10219 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x25519 force_version=tls13" \
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10220 0 \
10221 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10222 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]10223 -c "NamedGroup: secp256r1 ( 17 )" \
10224 -c "NamedGroup: x25519 ( 1d )" \
10225 -c "Verifying peer X.509 certificate... ok" \
10226 -c "received HelloRetryRequest message" \
10227 -c "selected_group ( 29 )"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10228
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10229requires_openssl_tls1_3
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10230requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10231requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10232requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10233requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]10234run_test "TLS 1.3 m->O: HRR secp256r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10235 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10236 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x448 force_version=tls13" \
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10237 0 \
10238 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10239 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]10240 -c "NamedGroup: secp256r1 ( 17 )" \
10241 -c "NamedGroup: x448 ( 1e )" \
10242 -c "Verifying peer X.509 certificate... ok" \
10243 -c "received HelloRetryRequest message" \
10244 -c "selected_group ( 30 )"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10245
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10246requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10247requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10248requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10249requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10250requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10251run_test "TLS 1.3 m->O: HRR secp384r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10252 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10253 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp256r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10254 0 \
10255 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10256 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10257 -c "NamedGroup: secp384r1 ( 18 )" \
10258 -c "NamedGroup: secp256r1 ( 17 )" \
10259 -c "Verifying peer X.509 certificate... ok" \
10260 -c "received HelloRetryRequest message" \
10261 -c "selected_group ( 23 )"
10262
10263requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10264requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10265requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10266requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10267requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10268run_test "TLS 1.3 m->O: HRR secp384r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10269 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10270 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp521r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10271 0 \
10272 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10273 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10274 -c "NamedGroup: secp384r1 ( 18 )" \
10275 -c "NamedGroup: secp521r1 ( 19 )" \
10276 -c "Verifying peer X.509 certificate... ok" \
10277 -c "received HelloRetryRequest message" \
10278 -c "selected_group ( 25 )"
10279
10280requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10281requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10282requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10283requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10284requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10285run_test "TLS 1.3 m->O: HRR secp384r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10286 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10287 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x25519 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10288 0 \
10289 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10290 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10291 -c "NamedGroup: secp384r1 ( 18 )" \
10292 -c "NamedGroup: x25519 ( 1d )" \
10293 -c "Verifying peer X.509 certificate... ok" \
10294 -c "received HelloRetryRequest message" \
10295 -c "selected_group ( 29 )"
10296
10297requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10298requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10299requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10300requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10301requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10302run_test "TLS 1.3 m->O: HRR secp384r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10303 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10304 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x448 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10305 0 \
10306 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10307 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10308 -c "NamedGroup: secp384r1 ( 18 )" \
10309 -c "NamedGroup: x448 ( 1e )" \
10310 -c "Verifying peer X.509 certificate... ok" \
10311 -c "received HelloRetryRequest message" \
10312 -c "selected_group ( 30 )"
10313
10314requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10315requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10316requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10317requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10318requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10319run_test "TLS 1.3 m->O: HRR secp521r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10320 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10321 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp256r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10322 0 \
10323 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10324 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10325 -c "NamedGroup: secp521r1 ( 19 )" \
10326 -c "NamedGroup: secp256r1 ( 17 )" \
10327 -c "Verifying peer X.509 certificate... ok" \
10328 -c "received HelloRetryRequest message" \
10329 -c "selected_group ( 23 )"
10330
10331requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10332requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10333requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10334requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10335requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10336run_test "TLS 1.3 m->O: HRR secp521r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10337 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10338 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp384r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10339 0 \
10340 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10341 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10342 -c "NamedGroup: secp521r1 ( 19 )" \
10343 -c "NamedGroup: secp384r1 ( 18 )" \
10344 -c "Verifying peer X.509 certificate... ok" \
10345 -c "received HelloRetryRequest message" \
10346 -c "selected_group ( 24 )"
10347
10348requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10349requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10350requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10351requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10352requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10353run_test "TLS 1.3 m->O: HRR secp521r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10354 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10355 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x25519 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10356 0 \
10357 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10358 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10359 -c "NamedGroup: secp521r1 ( 19 )" \
10360 -c "NamedGroup: x25519 ( 1d )" \
10361 -c "Verifying peer X.509 certificate... ok" \
10362 -c "received HelloRetryRequest message" \
10363 -c "selected_group ( 29 )"
10364
10365requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10366requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10367requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10368requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10369requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10370run_test "TLS 1.3 m->O: HRR secp521r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10371 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10372 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x448 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10373 0 \
10374 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10375 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10376 -c "NamedGroup: secp521r1 ( 19 )" \
10377 -c "NamedGroup: x448 ( 1e )" \
10378 -c "Verifying peer X.509 certificate... ok" \
10379 -c "received HelloRetryRequest message" \
10380 -c "selected_group ( 30 )"
10381
10382requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10383requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10384requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10385requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10386requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10387run_test "TLS 1.3 m->O: HRR x25519 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10388 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10389 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp256r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10390 0 \
10391 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10392 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10393 -c "NamedGroup: x25519 ( 1d )" \
10394 -c "NamedGroup: secp256r1 ( 17 )" \
10395 -c "Verifying peer X.509 certificate... ok" \
10396 -c "received HelloRetryRequest message" \
10397 -c "selected_group ( 23 )"
10398
10399requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10400requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10401requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10402requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10403requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10404run_test "TLS 1.3 m->O: HRR x25519 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10405 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10406 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp384r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10407 0 \
10408 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10409 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10410 -c "NamedGroup: x25519 ( 1d )" \
10411 -c "NamedGroup: secp384r1 ( 18 )" \
10412 -c "Verifying peer X.509 certificate... ok" \
10413 -c "received HelloRetryRequest message" \
10414 -c "selected_group ( 24 )"
10415
10416requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10417requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10418requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10419requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10420requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10421run_test "TLS 1.3 m->O: HRR x25519 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10422 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10423 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp521r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10424 0 \
10425 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10426 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10427 -c "NamedGroup: x25519 ( 1d )" \
10428 -c "NamedGroup: secp521r1 ( 19 )" \
10429 -c "Verifying peer X.509 certificate... ok" \
10430 -c "received HelloRetryRequest message" \
10431 -c "selected_group ( 25 )"
10432
10433requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10434requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10435requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10436requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10437requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10438run_test "TLS 1.3 m->O: HRR x25519 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10439 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10440 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,x448 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10441 0 \
10442 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10443 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10444 -c "NamedGroup: x25519 ( 1d )" \
10445 -c "NamedGroup: x448 ( 1e )" \
10446 -c "Verifying peer X.509 certificate... ok" \
10447 -c "received HelloRetryRequest message" \
10448 -c "selected_group ( 30 )"
10449
10450requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10451requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10452requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10453requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10454requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10455run_test "TLS 1.3 m->O: HRR x448 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10456 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10457 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp256r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10458 0 \
10459 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10460 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10461 -c "NamedGroup: x448 ( 1e )" \
10462 -c "NamedGroup: secp256r1 ( 17 )" \
10463 -c "Verifying peer X.509 certificate... ok" \
10464 -c "received HelloRetryRequest message" \
10465 -c "selected_group ( 23 )"
10466
10467requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10468requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10469requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10470requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10471requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10472run_test "TLS 1.3 m->O: HRR x448 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10473 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10474 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp384r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10475 0 \
10476 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10477 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10478 -c "NamedGroup: x448 ( 1e )" \
10479 -c "NamedGroup: secp384r1 ( 18 )" \
10480 -c "Verifying peer X.509 certificate... ok" \
10481 -c "received HelloRetryRequest message" \
10482 -c "selected_group ( 24 )"
10483
10484requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10485requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10486requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10487requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10488requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10489run_test "TLS 1.3 m->O: HRR x448 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10490 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10491 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp521r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10492 0 \
10493 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10494 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10495 -c "NamedGroup: x448 ( 1e )" \
10496 -c "NamedGroup: secp521r1 ( 19 )" \
10497 -c "Verifying peer X.509 certificate... ok" \
10498 -c "received HelloRetryRequest message" \
10499 -c "selected_group ( 25 )"
10500
10501requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10502requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10503requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10504requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10505requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10506run_test "TLS 1.3 m->O: HRR x448 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10507 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
10508 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,x25519 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10509 0 \
10510 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10511 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10512 -c "NamedGroup: x448 ( 1e )" \
10513 -c "NamedGroup: x25519 ( 1d )" \
10514 -c "Verifying peer X.509 certificate... ok" \
10515 -c "received HelloRetryRequest message" \
10516 -c "selected_group ( 29 )"
10517
10518requires_gnutls_tls1_3
10519requires_gnutls_next_no_ticket
10520requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10521requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10522requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10523requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10524requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10525run_test "TLS 1.3 m->G: HRR secp256r1 -> secp384r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10526 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10527 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp384r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10528 0 \
10529 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10530 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10531 -c "NamedGroup: secp256r1 ( 17 )" \
10532 -c "NamedGroup: secp384r1 ( 18 )" \
10533 -c "Verifying peer X.509 certificate... ok" \
10534 -c "received HelloRetryRequest message" \
10535 -c "selected_group ( 24 )"
10536
10537requires_gnutls_tls1_3
10538requires_gnutls_next_no_ticket
10539requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10540requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10541requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10542requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10543requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10544run_test "TLS 1.3 m->G: HRR secp256r1 -> secp521r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10545 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10546 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp521r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10547 0 \
10548 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10549 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10550 -c "NamedGroup: secp256r1 ( 17 )" \
10551 -c "NamedGroup: secp521r1 ( 19 )" \
10552 -c "Verifying peer X.509 certificate... ok" \
10553 -c "received HelloRetryRequest message" \
10554 -c "selected_group ( 25 )"
10555
10556requires_gnutls_tls1_3
10557requires_gnutls_next_no_ticket
10558requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10559requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10560requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10561requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10562requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10563run_test "TLS 1.3 m->G: HRR secp256r1 -> x25519" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10564 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10565 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x25519 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10566 0 \
10567 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10568 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10569 -c "NamedGroup: secp256r1 ( 17 )" \
10570 -c "NamedGroup: x25519 ( 1d )" \
10571 -c "Verifying peer X.509 certificate... ok" \
10572 -c "received HelloRetryRequest message" \
10573 -c "selected_group ( 29 )"
10574
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10575requires_gnutls_tls1_3
10576requires_gnutls_next_no_ticket
10577requires_gnutls_next_disable_tls13_compat
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10578requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10579requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10580requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10581requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]10582run_test "TLS 1.3 m->G: HRR secp256r1 -> x448" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10583 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10584 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x448 force_version=tls13" \
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]10585 0 \
10586 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10587 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]10588 -c "NamedGroup: secp256r1 ( 17 )" \
10589 -c "NamedGroup: x448 ( 1e )" \
10590 -c "Verifying peer X.509 certificate... ok" \
10591 -c "received HelloRetryRequest message" \
10592 -c "selected_group ( 30 )"
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10593
10594requires_gnutls_tls1_3
10595requires_gnutls_next_no_ticket
10596requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10597requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10598requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10599requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10600requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10601run_test "TLS 1.3 m->G: HRR secp384r1 -> secp256r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10602 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10603 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp256r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10604 0 \
10605 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10606 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10607 -c "NamedGroup: secp384r1 ( 18 )" \
10608 -c "NamedGroup: secp256r1 ( 17 )" \
10609 -c "Verifying peer X.509 certificate... ok" \
10610 -c "received HelloRetryRequest message" \
10611 -c "selected_group ( 23 )"
10612
10613requires_gnutls_tls1_3
10614requires_gnutls_next_no_ticket
10615requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10616requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10617requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10618requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10619requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10620run_test "TLS 1.3 m->G: HRR secp384r1 -> secp521r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10621 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10622 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp521r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10623 0 \
10624 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10625 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10626 -c "NamedGroup: secp384r1 ( 18 )" \
10627 -c "NamedGroup: secp521r1 ( 19 )" \
10628 -c "Verifying peer X.509 certificate... ok" \
10629 -c "received HelloRetryRequest message" \
10630 -c "selected_group ( 25 )"
10631
10632requires_gnutls_tls1_3
10633requires_gnutls_next_no_ticket
10634requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10635requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10636requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10637requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10638requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10639run_test "TLS 1.3 m->G: HRR secp384r1 -> x25519" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10640 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10641 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x25519 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10642 0 \
10643 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10644 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10645 -c "NamedGroup: secp384r1 ( 18 )" \
10646 -c "NamedGroup: x25519 ( 1d )" \
10647 -c "Verifying peer X.509 certificate... ok" \
10648 -c "received HelloRetryRequest message" \
10649 -c "selected_group ( 29 )"
10650
10651requires_gnutls_tls1_3
10652requires_gnutls_next_no_ticket
10653requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10654requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10655requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10656requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10657requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10658run_test "TLS 1.3 m->G: HRR secp384r1 -> x448" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10659 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10660 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x448 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10661 0 \
10662 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10663 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10664 -c "NamedGroup: secp384r1 ( 18 )" \
10665 -c "NamedGroup: x448 ( 1e )" \
10666 -c "Verifying peer X.509 certificate... ok" \
10667 -c "received HelloRetryRequest message" \
10668 -c "selected_group ( 30 )"
10669
10670requires_gnutls_tls1_3
10671requires_gnutls_next_no_ticket
10672requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10673requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10674requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10675requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10676requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10677run_test "TLS 1.3 m->G: HRR secp521r1 -> secp256r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10678 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10679 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp256r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10680 0 \
10681 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10682 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10683 -c "NamedGroup: secp521r1 ( 19 )" \
10684 -c "NamedGroup: secp256r1 ( 17 )" \
10685 -c "Verifying peer X.509 certificate... ok" \
10686 -c "received HelloRetryRequest message" \
10687 -c "selected_group ( 23 )"
10688
10689requires_gnutls_tls1_3
10690requires_gnutls_next_no_ticket
10691requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10692requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10693requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10694requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10695requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10696run_test "TLS 1.3 m->G: HRR secp521r1 -> secp384r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10697 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10698 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp384r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10699 0 \
10700 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10701 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10702 -c "NamedGroup: secp521r1 ( 19 )" \
10703 -c "NamedGroup: secp384r1 ( 18 )" \
10704 -c "Verifying peer X.509 certificate... ok" \
10705 -c "received HelloRetryRequest message" \
10706 -c "selected_group ( 24 )"
10707
10708requires_gnutls_tls1_3
10709requires_gnutls_next_no_ticket
10710requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10711requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10712requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10713requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10714requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10715run_test "TLS 1.3 m->G: HRR secp521r1 -> x25519" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10716 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10717 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x25519 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10718 0 \
10719 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10720 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10721 -c "NamedGroup: secp521r1 ( 19 )" \
10722 -c "NamedGroup: x25519 ( 1d )" \
10723 -c "Verifying peer X.509 certificate... ok" \
10724 -c "received HelloRetryRequest message" \
10725 -c "selected_group ( 29 )"
10726
10727requires_gnutls_tls1_3
10728requires_gnutls_next_no_ticket
10729requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10730requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10731requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10732requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10733requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10734run_test "TLS 1.3 m->G: HRR secp521r1 -> x448" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10735 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10736 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x448 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10737 0 \
10738 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10739 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10740 -c "NamedGroup: secp521r1 ( 19 )" \
10741 -c "NamedGroup: x448 ( 1e )" \
10742 -c "Verifying peer X.509 certificate... ok" \
10743 -c "received HelloRetryRequest message" \
10744 -c "selected_group ( 30 )"
10745
10746requires_gnutls_tls1_3
10747requires_gnutls_next_no_ticket
10748requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10749requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10750requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10751requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10752requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10753run_test "TLS 1.3 m->G: HRR x25519 -> secp256r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10754 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10755 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp256r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10756 0 \
10757 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10758 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10759 -c "NamedGroup: x25519 ( 1d )" \
10760 -c "NamedGroup: secp256r1 ( 17 )" \
10761 -c "Verifying peer X.509 certificate... ok" \
10762 -c "received HelloRetryRequest message" \
10763 -c "selected_group ( 23 )"
10764
10765requires_gnutls_tls1_3
10766requires_gnutls_next_no_ticket
10767requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10768requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10769requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10770requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10771requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10772run_test "TLS 1.3 m->G: HRR x25519 -> secp384r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10773 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10774 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp384r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10775 0 \
10776 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10777 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10778 -c "NamedGroup: x25519 ( 1d )" \
10779 -c "NamedGroup: secp384r1 ( 18 )" \
10780 -c "Verifying peer X.509 certificate... ok" \
10781 -c "received HelloRetryRequest message" \
10782 -c "selected_group ( 24 )"
10783
10784requires_gnutls_tls1_3
10785requires_gnutls_next_no_ticket
10786requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10787requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10788requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10789requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10790requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10791run_test "TLS 1.3 m->G: HRR x25519 -> secp521r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10792 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10793 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp521r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10794 0 \
10795 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10796 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10797 -c "NamedGroup: x25519 ( 1d )" \
10798 -c "NamedGroup: secp521r1 ( 19 )" \
10799 -c "Verifying peer X.509 certificate... ok" \
10800 -c "received HelloRetryRequest message" \
10801 -c "selected_group ( 25 )"
10802
10803requires_gnutls_tls1_3
10804requires_gnutls_next_no_ticket
10805requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10806requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10807requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10808requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10809requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10810run_test "TLS 1.3 m->G: HRR x25519 -> x448" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10811 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10812 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,x448 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10813 0 \
10814 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10815 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10816 -c "NamedGroup: x25519 ( 1d )" \
10817 -c "NamedGroup: x448 ( 1e )" \
10818 -c "Verifying peer X.509 certificate... ok" \
10819 -c "received HelloRetryRequest message" \
10820 -c "selected_group ( 30 )"
10821
10822requires_gnutls_tls1_3
10823requires_gnutls_next_no_ticket
10824requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10825requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10826requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10827requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10828requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10829run_test "TLS 1.3 m->G: HRR x448 -> secp256r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10830 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10831 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp256r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10832 0 \
10833 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10834 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10835 -c "NamedGroup: x448 ( 1e )" \
10836 -c "NamedGroup: secp256r1 ( 17 )" \
10837 -c "Verifying peer X.509 certificate... ok" \
10838 -c "received HelloRetryRequest message" \
10839 -c "selected_group ( 23 )"
10840
10841requires_gnutls_tls1_3
10842requires_gnutls_next_no_ticket
10843requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10844requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10845requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10846requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10847requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10848run_test "TLS 1.3 m->G: HRR x448 -> secp384r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10849 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10850 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp384r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10851 0 \
10852 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10853 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10854 -c "NamedGroup: x448 ( 1e )" \
10855 -c "NamedGroup: secp384r1 ( 18 )" \
10856 -c "Verifying peer X.509 certificate... ok" \
10857 -c "received HelloRetryRequest message" \
10858 -c "selected_group ( 24 )"
10859
10860requires_gnutls_tls1_3
10861requires_gnutls_next_no_ticket
10862requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10863requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10864requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10865requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10866requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10867run_test "TLS 1.3 m->G: HRR x448 -> secp521r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10868 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10869 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp521r1 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10870 0 \
10871 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10872 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10873 -c "NamedGroup: x448 ( 1e )" \
10874 -c "NamedGroup: secp521r1 ( 19 )" \
10875 -c "Verifying peer X.509 certificate... ok" \
10876 -c "received HelloRetryRequest message" \
10877 -c "selected_group ( 25 )"
10878
10879requires_gnutls_tls1_3
10880requires_gnutls_next_no_ticket
10881requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10882requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10883requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10884requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10885requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10886run_test "TLS 1.3 m->G: HRR x448 -> x25519" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10887 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10888 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,x25519 force_version=tls13" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10889 0 \
10890 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]10891 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]10892 -c "NamedGroup: x448 ( 1e )" \
10893 -c "NamedGroup: x25519 ( 1d )" \
10894 -c "Verifying peer X.509 certificate... ok" \
10895 -c "received HelloRetryRequest message" \
10896 -c "selected_group ( 29 )"
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10897
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10898requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10899requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10900requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10901requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10902requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10903requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10904requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10905requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10906run_test "TLS 1.3 m->m: HRR secp256r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10907 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10908 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10909 0 \
10910 -s "Protocol is TLSv1.3" \
10911 -s "got named group: secp384r1(0018)" \
10912 -s "Verifying peer X.509 certificate... ok" \
10913 -c "Protocol is TLSv1.3" \
10914 -c "NamedGroup: secp256r1 ( 17 )" \
10915 -c "NamedGroup: secp384r1 ( 18 )" \
10916 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10917 -s "HRR selected_group: secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10918 -c "received HelloRetryRequest message" \
10919 -c "selected_group ( 24 )"
10920
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10921requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10922requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10923requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10924requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10925requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10926requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10927requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10928requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10929run_test "TLS 1.3 m->m: HRR secp256r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10930 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10931 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10932 0 \
10933 -s "Protocol is TLSv1.3" \
10934 -s "got named group: secp521r1(0019)" \
10935 -s "Verifying peer X.509 certificate... ok" \
10936 -c "Protocol is TLSv1.3" \
10937 -c "NamedGroup: secp256r1 ( 17 )" \
10938 -c "NamedGroup: secp521r1 ( 19 )" \
10939 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10940 -s "HRR selected_group: secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10941 -c "received HelloRetryRequest message" \
10942 -c "selected_group ( 25 )"
10943
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10944requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10945requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10946requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10947requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10948requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10949requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10950requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10951requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10952run_test "TLS 1.3 m->m: HRR secp256r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10953 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10954 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10955 0 \
10956 -s "Protocol is TLSv1.3" \
10957 -s "got named group: x25519(001d)" \
10958 -s "Verifying peer X.509 certificate... ok" \
10959 -c "Protocol is TLSv1.3" \
10960 -c "NamedGroup: secp256r1 ( 17 )" \
10961 -c "NamedGroup: x25519 ( 1d )" \
10962 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10963 -s "HRR selected_group: x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10964 -c "received HelloRetryRequest message" \
10965 -c "selected_group ( 29 )"
10966
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10967requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10968requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10969requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10970requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10971requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10972requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10973requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10974requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10975run_test "TLS 1.3 m->m: HRR secp256r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10976 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10977 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1,x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10978 0 \
10979 -s "Protocol is TLSv1.3" \
10980 -s "got named group: x448(001e)" \
10981 -s "Verifying peer X.509 certificate... ok" \
10982 -c "Protocol is TLSv1.3" \
10983 -c "NamedGroup: secp256r1 ( 17 )" \
10984 -c "NamedGroup: x448 ( 1e )" \
10985 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10986 -s "HRR selected_group: x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10987 -c "received HelloRetryRequest message" \
10988 -c "selected_group ( 30 )"
10989
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10990requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10991requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10992requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10993requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10994requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10995requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10996requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
10997requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10998run_test "TLS 1.3 m->m: HRR secp384r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]10999 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11000 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11001 0 \
11002 -s "Protocol is TLSv1.3" \
11003 -s "got named group: secp256r1(0017)" \
11004 -s "Verifying peer X.509 certificate... ok" \
11005 -c "Protocol is TLSv1.3" \
11006 -c "NamedGroup: secp384r1 ( 18 )" \
11007 -c "NamedGroup: secp256r1 ( 17 )" \
11008 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11009 -s "HRR selected_group: secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11010 -c "received HelloRetryRequest message" \
11011 -c "selected_group ( 23 )"
11012
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11013requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11014requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11015requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11016requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11017requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11018requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11019requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11020requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11021run_test "TLS 1.3 m->m: HRR secp384r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11022 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11023 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11024 0 \
11025 -s "Protocol is TLSv1.3" \
11026 -s "got named group: secp521r1(0019)" \
11027 -s "Verifying peer X.509 certificate... ok" \
11028 -c "Protocol is TLSv1.3" \
11029 -c "NamedGroup: secp384r1 ( 18 )" \
11030 -c "NamedGroup: secp521r1 ( 19 )" \
11031 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11032 -s "HRR selected_group: secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11033 -c "received HelloRetryRequest message" \
11034 -c "selected_group ( 25 )"
11035
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11036requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11037requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11038requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11039requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11040requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11041requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11042requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11043requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11044run_test "TLS 1.3 m->m: HRR secp384r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11045 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11046 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11047 0 \
11048 -s "Protocol is TLSv1.3" \
11049 -s "got named group: x25519(001d)" \
11050 -s "Verifying peer X.509 certificate... ok" \
11051 -c "Protocol is TLSv1.3" \
11052 -c "NamedGroup: secp384r1 ( 18 )" \
11053 -c "NamedGroup: x25519 ( 1d )" \
11054 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11055 -s "HRR selected_group: x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11056 -c "received HelloRetryRequest message" \
11057 -c "selected_group ( 29 )"
11058
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11059requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11060requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11061requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11062requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11063requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11064requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11065requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11066requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11067run_test "TLS 1.3 m->m: HRR secp384r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11068 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11069 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1,x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11070 0 \
11071 -s "Protocol is TLSv1.3" \
11072 -s "got named group: x448(001e)" \
11073 -s "Verifying peer X.509 certificate... ok" \
11074 -c "Protocol is TLSv1.3" \
11075 -c "NamedGroup: secp384r1 ( 18 )" \
11076 -c "NamedGroup: x448 ( 1e )" \
11077 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11078 -s "HRR selected_group: x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11079 -c "received HelloRetryRequest message" \
11080 -c "selected_group ( 30 )"
11081
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11082requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11083requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11084requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11085requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11086requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11087requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11088requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11089requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11090run_test "TLS 1.3 m->m: HRR secp521r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11091 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11092 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11093 0 \
11094 -s "Protocol is TLSv1.3" \
11095 -s "got named group: secp256r1(0017)" \
11096 -s "Verifying peer X.509 certificate... ok" \
11097 -c "Protocol is TLSv1.3" \
11098 -c "NamedGroup: secp521r1 ( 19 )" \
11099 -c "NamedGroup: secp256r1 ( 17 )" \
11100 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11101 -s "HRR selected_group: secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11102 -c "received HelloRetryRequest message" \
11103 -c "selected_group ( 23 )"
11104
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11105requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11106requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11107requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11108requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11109requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11110requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11111requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11112requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11113run_test "TLS 1.3 m->m: HRR secp521r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11114 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11115 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11116 0 \
11117 -s "Protocol is TLSv1.3" \
11118 -s "got named group: secp384r1(0018)" \
11119 -s "Verifying peer X.509 certificate... ok" \
11120 -c "Protocol is TLSv1.3" \
11121 -c "NamedGroup: secp521r1 ( 19 )" \
11122 -c "NamedGroup: secp384r1 ( 18 )" \
11123 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11124 -s "HRR selected_group: secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11125 -c "received HelloRetryRequest message" \
11126 -c "selected_group ( 24 )"
11127
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11128requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11129requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11130requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11131requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11132requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11133requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11134requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11135requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11136run_test "TLS 1.3 m->m: HRR secp521r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11137 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11138 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11139 0 \
11140 -s "Protocol is TLSv1.3" \
11141 -s "got named group: x25519(001d)" \
11142 -s "Verifying peer X.509 certificate... ok" \
11143 -c "Protocol is TLSv1.3" \
11144 -c "NamedGroup: secp521r1 ( 19 )" \
11145 -c "NamedGroup: x25519 ( 1d )" \
11146 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11147 -s "HRR selected_group: x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11148 -c "received HelloRetryRequest message" \
11149 -c "selected_group ( 29 )"
11150
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11151requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11152requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11153requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11154requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11155requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11156requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11157requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11158requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11159run_test "TLS 1.3 m->m: HRR secp521r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11160 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11161 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1,x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11162 0 \
11163 -s "Protocol is TLSv1.3" \
11164 -s "got named group: x448(001e)" \
11165 -s "Verifying peer X.509 certificate... ok" \
11166 -c "Protocol is TLSv1.3" \
11167 -c "NamedGroup: secp521r1 ( 19 )" \
11168 -c "NamedGroup: x448 ( 1e )" \
11169 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11170 -s "HRR selected_group: x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11171 -c "received HelloRetryRequest message" \
11172 -c "selected_group ( 30 )"
11173
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11174requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11175requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11176requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11177requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11178requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11179requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11180requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11181requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11182run_test "TLS 1.3 m->m: HRR x25519 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11183 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11184 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11185 0 \
11186 -s "Protocol is TLSv1.3" \
11187 -s "got named group: secp256r1(0017)" \
11188 -s "Verifying peer X.509 certificate... ok" \
11189 -c "Protocol is TLSv1.3" \
11190 -c "NamedGroup: x25519 ( 1d )" \
11191 -c "NamedGroup: secp256r1 ( 17 )" \
11192 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11193 -s "HRR selected_group: secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11194 -c "received HelloRetryRequest message" \
11195 -c "selected_group ( 23 )"
11196
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11197requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11198requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11199requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11200requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11201requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11202requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11203requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11204requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11205run_test "TLS 1.3 m->m: HRR x25519 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11206 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11207 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11208 0 \
11209 -s "Protocol is TLSv1.3" \
11210 -s "got named group: secp384r1(0018)" \
11211 -s "Verifying peer X.509 certificate... ok" \
11212 -c "Protocol is TLSv1.3" \
11213 -c "NamedGroup: x25519 ( 1d )" \
11214 -c "NamedGroup: secp384r1 ( 18 )" \
11215 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11216 -s "HRR selected_group: secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11217 -c "received HelloRetryRequest message" \
11218 -c "selected_group ( 24 )"
11219
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11220requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11221requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11222requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11223requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11224requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11225requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11226requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11227requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11228run_test "TLS 1.3 m->m: HRR x25519 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11229 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11230 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11231 0 \
11232 -s "Protocol is TLSv1.3" \
11233 -s "got named group: secp521r1(0019)" \
11234 -s "Verifying peer X.509 certificate... ok" \
11235 -c "Protocol is TLSv1.3" \
11236 -c "NamedGroup: x25519 ( 1d )" \
11237 -c "NamedGroup: secp521r1 ( 19 )" \
11238 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11239 -s "HRR selected_group: secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11240 -c "received HelloRetryRequest message" \
11241 -c "selected_group ( 25 )"
11242
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11243requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11244requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11245requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11246requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11247requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11248requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11249requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11250requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11251run_test "TLS 1.3 m->m: HRR x25519 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11252 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11253 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519,x448 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11254 0 \
11255 -s "Protocol is TLSv1.3" \
11256 -s "got named group: x448(001e)" \
11257 -s "Verifying peer X.509 certificate... ok" \
11258 -c "Protocol is TLSv1.3" \
11259 -c "NamedGroup: x25519 ( 1d )" \
11260 -c "NamedGroup: x448 ( 1e )" \
11261 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11262 -s "HRR selected_group: x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11263 -c "received HelloRetryRequest message" \
11264 -c "selected_group ( 30 )"
11265
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11266requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11267requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11268requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11269requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11270requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11271requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11272requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11273requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11274run_test "TLS 1.3 m->m: HRR x448 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11275 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp256r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11276 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp256r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11277 0 \
11278 -s "Protocol is TLSv1.3" \
11279 -s "got named group: secp256r1(0017)" \
11280 -s "Verifying peer X.509 certificate... ok" \
11281 -c "Protocol is TLSv1.3" \
11282 -c "NamedGroup: x448 ( 1e )" \
11283 -c "NamedGroup: secp256r1 ( 17 )" \
11284 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11285 -s "HRR selected_group: secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11286 -c "received HelloRetryRequest message" \
11287 -c "selected_group ( 23 )"
11288
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11289requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11290requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11291requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11292requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11293requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11294requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11295requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11296requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11297run_test "TLS 1.3 m->m: HRR x448 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11298 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp384r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11299 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp384r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11300 0 \
11301 -s "Protocol is TLSv1.3" \
11302 -s "got named group: secp384r1(0018)" \
11303 -s "Verifying peer X.509 certificate... ok" \
11304 -c "Protocol is TLSv1.3" \
11305 -c "NamedGroup: x448 ( 1e )" \
11306 -c "NamedGroup: secp384r1 ( 18 )" \
11307 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11308 -s "HRR selected_group: secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11309 -c "received HelloRetryRequest message" \
11310 -c "selected_group ( 24 )"
11311
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11312requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11313requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11314requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11315requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11316requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11317requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11318requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11319requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11320run_test "TLS 1.3 m->m: HRR x448 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11321 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=secp521r1 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11322 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,secp521r1 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11323 0 \
11324 -s "Protocol is TLSv1.3" \
11325 -s "got named group: secp521r1(0019)" \
11326 -s "Verifying peer X.509 certificate... ok" \
11327 -c "Protocol is TLSv1.3" \
11328 -c "NamedGroup: x448 ( 1e )" \
11329 -c "NamedGroup: secp521r1 ( 19 )" \
11330 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11331 -s "HRR selected_group: secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11332 -c "received HelloRetryRequest message" \
11333 -c "selected_group ( 25 )"
11334
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11335requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11336requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11337requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11338requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11339requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11340requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11341requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11342requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11343run_test "TLS 1.3 m->m: HRR x448 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame^]11344 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x25519 force_version=tls13 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11345 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 curves=x448,x25519 force_version=tls13" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11346 0 \
11347 -s "Protocol is TLSv1.3" \
11348 -s "got named group: x25519(001d)" \
11349 -s "Verifying peer X.509 certificate... ok" \
11350 -c "Protocol is TLSv1.3" \
11351 -c "NamedGroup: x448 ( 1e )" \
11352 -c "NamedGroup: x25519 ( 1d )" \
11353 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11354 -s "HRR selected_group: x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11355 -c "received HelloRetryRequest message" \
11356 -c "selected_group ( 29 )"