blob: b1a3288043a82224ba2987f5647e5a357b66ad7c [file] [log] [blame]
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001#!/bin/sh
2
Simon Butcher58eddef2016-05-19 23:43:11 +01003# ssl-opt.sh
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01004#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Bence Szépkútic7da1fe2020-05-26 01:54:15 +02006# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
19#
Simon Butcher58eddef2016-05-19 23:43:11 +010020# Purpose
21#
22# Executes tests to prove various TLS/SSL options and extensions.
23#
24# The goal is not to cover every ciphersuite/version, but instead to cover
25# specific options (max fragment length, truncated hmac, etc) or procedures
26# (session resumption from cache or ticket, renego, etc).
27#
28# The tests assume a build with default options, with exceptions expressed
29# with a dependency. The tests focus on functionality and do not consider
30# performance.
31#
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010032
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010033set -u
34
Jaeden Amero6e70eb22019-07-03 13:51:04 +010035# Limit the size of each log to 10 GiB, in case of failures with this script
36# where it may output seemingly unlimited length error logs.
37ulimit -f 20971520
38
Gilles Peskine560280b2019-09-16 15:17:38 +020039ORIGINAL_PWD=$PWD
40if ! cd "$(dirname "$0")"; then
41 exit 125
Angus Grattonc4dd0732018-04-11 16:28:39 +100042fi
43
Antonin Décimo36e89b52019-01-23 15:24:37 +010044# default values, can be overridden by the environment
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +010045: ${P_SRV:=../programs/ssl/ssl_server2}
46: ${P_CLI:=../programs/ssl/ssl_client2}
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020047: ${P_PXY:=../programs/test/udp_proxy}
Jerry Yubbfa1d82021-12-06 16:52:57 +080048: ${P_QUERY:=../programs/test/query_compile_time_config}
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +010049: ${OPENSSL_CMD:=openssl} # OPENSSL would conflict with the build system
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020050: ${GNUTLS_CLI:=gnutls-cli}
51: ${GNUTLS_SERV:=gnutls-serv}
Gilles Peskined50177f2017-05-16 17:53:03 +020052: ${PERL:=perl}
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010053
Gilles Peskine560280b2019-09-16 15:17:38 +020054guess_config_name() {
55 if git diff --quiet ../include/mbedtls/config.h 2>/dev/null; then
56 echo "default"
57 else
58 echo "unknown"
59 fi
60}
61: ${MBEDTLS_TEST_OUTCOME_FILE=}
62: ${MBEDTLS_TEST_CONFIGURATION:="$(guess_config_name)"}
63: ${MBEDTLS_TEST_PLATFORM:="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
64
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +020065O_SRV="$OPENSSL_CMD s_server -www -cert data_files/server5.crt -key data_files/server5.key"
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +010066O_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_CMD s_client"
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020067G_SRV="$GNUTLS_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010068G_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_CLI --x509cafile data_files/test-ca_cat12.crt"
Gilles Peskined50177f2017-05-16 17:53:03 +020069TCP_CLIENT="$PERL scripts/tcp_client.pl"
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010070
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020071# alternative versions of OpenSSL and GnuTLS (no default path)
72
73if [ -n "${OPENSSL_LEGACY:-}" ]; then
74 O_LEGACY_SRV="$OPENSSL_LEGACY s_server -www -cert data_files/server5.crt -key data_files/server5.key"
75 O_LEGACY_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_LEGACY s_client"
76else
77 O_LEGACY_SRV=false
78 O_LEGACY_CLI=false
79fi
80
Paul Elliott633a74e2021-10-13 18:31:07 +010081if [ -n "${OPENSSL_NEXT:-}" ]; then
82 O_NEXT_SRV="$OPENSSL_NEXT s_server -www -cert data_files/server5.crt -key data_files/server5.key"
83 O_NEXT_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_NEXT s_client"
84else
85 O_NEXT_SRV=false
86 O_NEXT_CLI=false
87fi
88
Hanno Becker58e9dc32018-08-17 15:53:21 +010089if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020090 G_NEXT_SRV="$GNUTLS_NEXT_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
91else
92 G_NEXT_SRV=false
93fi
94
Hanno Becker58e9dc32018-08-17 15:53:21 +010095if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020096 G_NEXT_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_NEXT_CLI --x509cafile data_files/test-ca_cat12.crt"
97else
98 G_NEXT_CLI=false
99fi
100
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100101TESTS=0
102FAILS=0
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200103SKIPS=0
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100104
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +0000105CONFIG_H='../include/mbedtls/config.h'
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +0200106
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100107MEMCHECK=0
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100108FILTER='.*'
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200109EXCLUDE='^$'
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100110
Paul Bakkere20310a2016-05-10 11:18:17 +0100111SHOW_TEST_NUMBER=0
Paul Bakkerb7584a52016-05-10 10:50:43 +0100112RUN_TEST_NUMBER=''
113
Paul Bakkeracaac852016-05-10 11:47:13 +0100114PRESERVE_LOGS=0
115
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200116# Pick a "unique" server port in the range 10000-19999, and a proxy
117# port which is this plus 10000. Each port number may be independently
118# overridden by a command line option.
119SRV_PORT=$(($$ % 10000 + 10000))
120PXY_PORT=$((SRV_PORT + 10000))
121
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100122print_usage() {
123 echo "Usage: $0 [options]"
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100124 printf " -h|--help\tPrint this help.\n"
125 printf " -m|--memcheck\tCheck memory leaks and errors.\n"
Gilles Peskine9fa4ed62020-08-26 22:35:46 +0200126 printf " -f|--filter\tOnly matching tests are executed (substring or BRE)\n"
127 printf " -e|--exclude\tMatching tests are excluded (substring or BRE)\n"
Paul Bakkerb7584a52016-05-10 10:50:43 +0100128 printf " -n|--number\tExecute only numbered test (comma-separated, e.g. '245,256')\n"
Paul Bakkere20310a2016-05-10 11:18:17 +0100129 printf " -s|--show-numbers\tShow test numbers in front of test names\n"
Paul Bakkeracaac852016-05-10 11:47:13 +0100130 printf " -p|--preserve-logs\tPreserve logs of successful tests as well\n"
Gilles Peskine560280b2019-09-16 15:17:38 +0200131 printf " --outcome-file\tFile where test outcomes are written\n"
132 printf " \t(default: \$MBEDTLS_TEST_OUTCOME_FILE, none if empty)\n"
133 printf " --port \tTCP/UDP port (default: randomish 1xxxx)\n"
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200134 printf " --proxy-port\tTCP/UDP proxy port (default: randomish 2xxxx)\n"
Gilles Peskine560280b2019-09-16 15:17:38 +0200135 printf " --seed \tInteger seed value to use for this test run\n"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100136}
137
138get_options() {
139 while [ $# -gt 0 ]; do
140 case "$1" in
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100141 -f|--filter)
142 shift; FILTER=$1
143 ;;
144 -e|--exclude)
145 shift; EXCLUDE=$1
146 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100147 -m|--memcheck)
148 MEMCHECK=1
149 ;;
Paul Bakkerb7584a52016-05-10 10:50:43 +0100150 -n|--number)
151 shift; RUN_TEST_NUMBER=$1
152 ;;
Paul Bakkere20310a2016-05-10 11:18:17 +0100153 -s|--show-numbers)
154 SHOW_TEST_NUMBER=1
155 ;;
Paul Bakkeracaac852016-05-10 11:47:13 +0100156 -p|--preserve-logs)
157 PRESERVE_LOGS=1
158 ;;
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200159 --port)
160 shift; SRV_PORT=$1
161 ;;
162 --proxy-port)
163 shift; PXY_PORT=$1
164 ;;
Andres AGf04f54d2016-10-10 15:46:20 +0100165 --seed)
166 shift; SEED="$1"
167 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100168 -h|--help)
169 print_usage
170 exit 0
171 ;;
172 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200173 echo "Unknown argument: '$1'"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100174 print_usage
175 exit 1
176 ;;
177 esac
178 shift
179 done
180}
181
Gilles Peskine560280b2019-09-16 15:17:38 +0200182# Make the outcome file path relative to the original directory, not
183# to .../tests
184case "$MBEDTLS_TEST_OUTCOME_FILE" in
185 [!/]*)
186 MBEDTLS_TEST_OUTCOME_FILE="$ORIGINAL_PWD/$MBEDTLS_TEST_OUTCOME_FILE"
187 ;;
188esac
189
Gilles Peskine64457492020-08-26 21:53:33 +0200190# Read boolean configuration options from config.h for easy and quick
191# testing. Skip non-boolean options (with something other than spaces
192# and a comment after "#define SYMBOL"). The variable contains a
193# space-separated list of symbols.
Jerry Yucf080ce2021-12-10 18:45:51 +0800194CONFIGS_ENABLED=" $(echo `$P_QUERY -l` )"
Hanno Becker3b8b40c2018-08-28 10:25:41 +0100195# Skip next test; use this macro to skip tests which are legitimate
196# in theory and expected to be re-introduced at some point, but
197# aren't expected to succeed at the moment due to problems outside
198# our control (such as bugs in other TLS implementations).
199skip_next_test() {
200 SKIP_NEXT="YES"
201}
202
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100203# skip next test if the flag is not enabled in config.h
204requires_config_enabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200205 case $CONFIGS_ENABLED in
Jerry Yu969c01a2021-12-10 20:29:02 +0800206 *" $1"[\ =]*) :;;
Gilles Peskine64457492020-08-26 21:53:33 +0200207 *) SKIP_NEXT="YES";;
208 esac
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100209}
210
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200211# skip next test if the flag is enabled in config.h
212requires_config_disabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200213 case $CONFIGS_ENABLED in
Jerry Yu969c01a2021-12-10 20:29:02 +0800214 *" $1"[\ =]*) SKIP_NEXT="YES";;
Gilles Peskine64457492020-08-26 21:53:33 +0200215 esac
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200216}
217
Hanno Becker7c48dd12018-08-28 16:09:22 +0100218get_config_value_or_default() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100219 # This function uses the query_config command line option to query the
220 # required Mbed TLS compile time configuration from the ssl_server2
221 # program. The command will always return a success value if the
222 # configuration is defined and the value will be printed to stdout.
223 #
224 # Note that if the configuration is not defined or is defined to nothing,
225 # the output of this function will be an empty string.
226 ${P_SRV} "query_config=${1}"
Hanno Becker7c48dd12018-08-28 16:09:22 +0100227}
228
229requires_config_value_at_least() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100230 VAL="$( get_config_value_or_default "$1" )"
231 if [ -z "$VAL" ]; then
232 # Should never happen
233 echo "Mbed TLS configuration $1 is not defined"
234 exit 1
235 elif [ "$VAL" -lt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100236 SKIP_NEXT="YES"
237 fi
238}
239
240requires_config_value_at_most() {
Hanno Becker7c48dd12018-08-28 16:09:22 +0100241 VAL=$( get_config_value_or_default "$1" )
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100242 if [ -z "$VAL" ]; then
243 # Should never happen
244 echo "Mbed TLS configuration $1 is not defined"
245 exit 1
246 elif [ "$VAL" -gt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100247 SKIP_NEXT="YES"
248 fi
249}
250
Yuto Takano8a693ef2021-07-02 13:10:41 +0100251requires_config_value_equals() {
252 VAL=$( get_config_value_or_default "$1" )
253 if [ -z "$VAL" ]; then
254 # Should never happen
255 echo "Mbed TLS configuration $1 is not defined"
256 exit 1
257 elif [ "$VAL" -ne "$2" ]; then
258 SKIP_NEXT="YES"
259 fi
260}
261
Gilles Peskine4b137d12022-04-08 19:33:07 +0200262# Require Mbed TLS to support the given protocol version.
263#
264# Inputs:
265# * $1: protocol version in mbedtls syntax (argument to force_version=)
266requires_protocol_version() {
267 # Support for DTLS is detected separately in detect_dtls().
268 case "$1" in
269 ssl3) requires_config_enabled MBEDTLS_SSL_PROTO_SSL3;;
270 tls1) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1;;
271 tls1_1|dtls1) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1;;
272 tls12|dtls12) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2;;
273 *) echo "Unknown required protocol version: $1"; exit 1;;
274 esac
275}
276
Gilles Peskine64457492020-08-26 21:53:33 +0200277# Space-separated list of ciphersuites supported by this build of
278# Mbed TLS.
279P_CIPHERSUITES=" $($P_CLI --help 2>/dev/null |
280 grep TLS- |
281 tr -s ' \n' ' ')"
Hanno Becker9d76d562018-11-16 17:27:29 +0000282requires_ciphersuite_enabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200283 case $P_CIPHERSUITES in
284 *" $1 "*) :;;
285 *) SKIP_NEXT="YES";;
286 esac
Hanno Becker9d76d562018-11-16 17:27:29 +0000287}
288
Gilles Peskine511fdf42022-04-08 19:26:26 +0200289# detect_required_features CMD [RUN_TEST_OPTION...]
290# If CMD (call to a TLS client or server program) requires certain features,
291# arrange to only run the following test case if those features are enabled.
292detect_required_features() {
Gilles Peskine0d721652020-06-26 23:35:53 +0200293 case "$1" in
Gilles Peskine4b137d12022-04-08 19:33:07 +0200294 *\ force_version=*)
295 tmp="${1##*\ force_version=}"
296 tmp="${tmp%%[!-0-9A-Z_a-z]*}"
297 requires_protocol_version "$tmp";;
298 esac
299
300 case "$1" in
Gilles Peskine511fdf42022-04-08 19:26:26 +0200301 *\ force_ciphersuite=*)
302 tmp="${1##*\ force_ciphersuite=}"
303 tmp="${tmp%%[!-0-9A-Z_a-z]*}"
304 case "$*" in
305 *"-s SSL - The server has no ciphersuites in common"*)
306 # This test case expects a ciphersuite mismatch, so it
307 # doesn't actually require the ciphersuite to be enabled.
308 :;;
309 *) requires_ciphersuite_enabled "$tmp";;
310 esac;;
Gilles Peskine0d721652020-06-26 23:35:53 +0200311 esac
312
Gilles Peskine3c985f62022-04-08 19:29:27 +0200313 case " $1 " in
314 *[-_\ =]tickets=[^0]*)
315 requires_config_enabled MBEDTLS_SSL_TICKET_C;;
316 esac
317 case " $1 " in
318 *[-_\ =]alpn=*)
319 requires_config_enabled MBEDTLS_SSL_ALPN;;
320 esac
321
Gilles Peskinebba3b4c2022-04-09 00:08:47 +0200322 case " $1 " in
Gilles Peskine6e257b02022-04-13 14:19:57 +0200323 *\ badmac_limit=*)
324 requires_config_enabled MBEDTLS_SSL_DTLS_BADMAC_LIMIT;;
325 esac
326
327 case " $1 " in
Gilles Peskinebba3b4c2022-04-09 00:08:47 +0200328 *\ fallback=1\ *|*\ -fallback_scsv\ *)
329 requires_config_enabled MBEDTLS_SSL_FALLBACK_SCSV;;
330 esac
331
Gilles Peskine511fdf42022-04-08 19:26:26 +0200332 unset tmp
Gilles Peskine0d721652020-06-26 23:35:53 +0200333}
334
Gilles Peskine22cc6492022-03-14 18:21:24 +0100335requires_certificate_authentication () {
336 if [ "$PSK_ONLY" = "YES" ]; then
337 SKIP_NEXT="YES"
338 fi
339}
340
Gilles Peskine89d892f2022-02-25 19:52:52 +0100341adapt_cmd_for_psk () {
342 case "$2" in
343 *openssl*) s='-psk abc123 -nocert';;
344 *gnutls-*) s='--pskkey=abc123';;
345 *) s='psk=abc123';;
346 esac
347 eval $1='"$2 $s"'
348 unset s
349}
350
351# maybe_adapt_for_psk [RUN_TEST_OPTION...]
352# If running in a PSK-only build, maybe adapt the test to use a pre-shared key.
353#
354# If not running in a PSK-only build, do nothing.
355# If the test looks like it doesn't use a pre-shared key but can run with a
356# pre-shared key, pass a pre-shared key. If the test looks like it can't run
357# with a pre-shared key, skip it. If the test looks like it's already using
358# a pre-shared key, do nothing.
359#
Gilles Peskined5b1a302022-04-05 22:00:17 +0200360# This code does not consider builds with ECDHE-PSK or RSA-PSK.
Gilles Peskine89d892f2022-02-25 19:52:52 +0100361#
362# Inputs:
363# * $CLI_CMD, $SRV_CMD, $PXY_CMD: client/server/proxy commands.
364# * $PSK_ONLY: YES if running in a PSK-only build (no asymmetric key exchanges).
365# * "$@": options passed to run_test.
366#
367# Outputs:
368# * $CLI_CMD, $SRV_CMD: may be modified to add PSK-relevant arguments.
369# * $SKIP_NEXT: set to YES if the test can't run with PSK.
370maybe_adapt_for_psk() {
371 if [ "$PSK_ONLY" != "YES" ]; then
372 return
373 fi
374 if [ "$SKIP_NEXT" = "YES" ]; then
375 return
376 fi
377 case "$CLI_CMD $SRV_CMD" in
378 *[-_\ =]psk*|*[-_\ =]PSK*)
379 return;;
380 *force_ciphersuite*)
381 # The test case forces a non-PSK cipher suite. In some cases, a
382 # PSK cipher suite could be substituted, but we're not ready for
383 # that yet.
384 SKIP_NEXT="YES"
385 return;;
386 *\ auth_mode=*|*[-_\ =]crt[_=]*)
387 # The test case involves certificates. PSK won't do.
388 SKIP_NEXT="YES"
389 return;;
390 esac
391 adapt_cmd_for_psk CLI_CMD "$CLI_CMD"
392 adapt_cmd_for_psk SRV_CMD "$SRV_CMD"
393}
394
395case " $CONFIGS_ENABLED " in
396 *\ MBEDTLS_KEY_EXCHANGE_[^P]*) PSK_ONLY="NO";;
397 *\ MBEDTLS_KEY_EXCHANGE_P[^S]*) PSK_ONLY="NO";;
398 *\ MBEDTLS_KEY_EXCHANGE_PS[^K]*) PSK_ONLY="NO";;
399 *\ MBEDTLS_KEY_EXCHANGE_PSK[^_]*) PSK_ONLY="NO";;
400 *\ MBEDTLS_KEY_EXCHANGE_PSK_ENABLED\ *) PSK_ONLY="YES";;
401 *) PSK_ONLY="NO";;
402esac
403
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200404# skip next test if OpenSSL doesn't support FALLBACK_SCSV
405requires_openssl_with_fallback_scsv() {
406 if [ -z "${OPENSSL_HAS_FBSCSV:-}" ]; then
407 if $OPENSSL_CMD s_client -help 2>&1 | grep fallback_scsv >/dev/null
408 then
409 OPENSSL_HAS_FBSCSV="YES"
410 else
411 OPENSSL_HAS_FBSCSV="NO"
412 fi
413 fi
414 if [ "$OPENSSL_HAS_FBSCSV" = "NO" ]; then
415 SKIP_NEXT="YES"
416 fi
417}
418
Yuto Takanobec7cf72021-07-02 10:10:49 +0100419# skip next test if either IN_CONTENT_LEN or MAX_CONTENT_LEN are below a value
420requires_max_content_len() {
421 requires_config_value_at_least "MBEDTLS_SSL_IN_CONTENT_LEN" $1
422 requires_config_value_at_least "MBEDTLS_SSL_OUT_CONTENT_LEN" $1
423}
424
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200425# skip next test if GnuTLS isn't available
426requires_gnutls() {
427 if [ -z "${GNUTLS_AVAILABLE:-}" ]; then
Manuel Pégourié-Gonnard03db6b02015-06-26 15:45:30 +0200428 if ( which "$GNUTLS_CLI" && which "$GNUTLS_SERV" ) >/dev/null 2>&1; then
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200429 GNUTLS_AVAILABLE="YES"
430 else
431 GNUTLS_AVAILABLE="NO"
432 fi
433 fi
434 if [ "$GNUTLS_AVAILABLE" = "NO" ]; then
435 SKIP_NEXT="YES"
436 fi
437}
438
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200439# skip next test if GnuTLS-next isn't available
440requires_gnutls_next() {
441 if [ -z "${GNUTLS_NEXT_AVAILABLE:-}" ]; then
442 if ( which "${GNUTLS_NEXT_CLI:-}" && which "${GNUTLS_NEXT_SERV:-}" ) >/dev/null 2>&1; then
443 GNUTLS_NEXT_AVAILABLE="YES"
444 else
445 GNUTLS_NEXT_AVAILABLE="NO"
446 fi
447 fi
448 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
449 SKIP_NEXT="YES"
450 fi
451}
452
453# skip next test if OpenSSL-legacy isn't available
454requires_openssl_legacy() {
455 if [ -z "${OPENSSL_LEGACY_AVAILABLE:-}" ]; then
456 if which "${OPENSSL_LEGACY:-}" >/dev/null 2>&1; then
457 OPENSSL_LEGACY_AVAILABLE="YES"
458 else
459 OPENSSL_LEGACY_AVAILABLE="NO"
460 fi
461 fi
462 if [ "$OPENSSL_LEGACY_AVAILABLE" = "NO" ]; then
463 SKIP_NEXT="YES"
464 fi
465}
466
Paul Elliott633a74e2021-10-13 18:31:07 +0100467requires_openssl_next() {
468 if [ -z "${OPENSSL_NEXT_AVAILABLE:-}" ]; then
469 if which "${OPENSSL_NEXT:-}" >/dev/null 2>&1; then
470 OPENSSL_NEXT_AVAILABLE="YES"
471 else
472 OPENSSL_NEXT_AVAILABLE="NO"
473 fi
474 fi
475 if [ "$OPENSSL_NEXT_AVAILABLE" = "NO" ]; then
476 SKIP_NEXT="YES"
477 fi
478}
479
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200480# skip next test if IPv6 isn't available on this host
481requires_ipv6() {
482 if [ -z "${HAS_IPV6:-}" ]; then
483 $P_SRV server_addr='::1' > $SRV_OUT 2>&1 &
484 SRV_PID=$!
485 sleep 1
486 kill $SRV_PID >/dev/null 2>&1
487 if grep "NET - Binding of the socket failed" $SRV_OUT >/dev/null; then
488 HAS_IPV6="NO"
489 else
490 HAS_IPV6="YES"
491 fi
492 rm -r $SRV_OUT
493 fi
494
495 if [ "$HAS_IPV6" = "NO" ]; then
496 SKIP_NEXT="YES"
497 fi
498}
499
Andrzej Kurekb4593462018-10-11 08:43:30 -0400500# skip next test if it's i686 or uname is not available
501requires_not_i686() {
502 if [ -z "${IS_I686:-}" ]; then
503 IS_I686="YES"
504 if which "uname" >/dev/null 2>&1; then
505 if [ -z "$(uname -a | grep i686)" ]; then
506 IS_I686="NO"
507 fi
508 fi
509 fi
510 if [ "$IS_I686" = "YES" ]; then
511 SKIP_NEXT="YES"
512 fi
513}
514
Angus Grattonc4dd0732018-04-11 16:28:39 +1000515# Calculate the input & output maximum content lengths set in the config
Yuto Takanoab9e43332021-06-22 07:16:40 +0100516MAX_CONTENT_LEN=$( get_config_value_or_default "MBEDTLS_SSL_MAX_CONTENT_LEN" )
517MAX_IN_LEN=$( get_config_value_or_default "MBEDTLS_SSL_IN_CONTENT_LEN" )
518MAX_OUT_LEN=$( get_config_value_or_default "MBEDTLS_SSL_OUT_CONTENT_LEN" )
Angus Grattonc4dd0732018-04-11 16:28:39 +1000519
Yuto Takano18ddccc2021-06-21 19:43:33 +0100520# Calculate the maximum content length that fits both
Angus Grattonc4dd0732018-04-11 16:28:39 +1000521if [ "$MAX_IN_LEN" -lt "$MAX_CONTENT_LEN" ]; then
522 MAX_CONTENT_LEN="$MAX_IN_LEN"
523fi
524if [ "$MAX_OUT_LEN" -lt "$MAX_CONTENT_LEN" ]; then
525 MAX_CONTENT_LEN="$MAX_OUT_LEN"
526fi
527
528# skip the next test if the SSL output buffer is less than 16KB
529requires_full_size_output_buffer() {
530 if [ "$MAX_OUT_LEN" -ne 16384 ]; then
531 SKIP_NEXT="YES"
532 fi
533}
534
Manuel Pégourié-Gonnard76fe9e42014-09-24 15:17:31 +0200535# skip the next test if valgrind is in use
536not_with_valgrind() {
537 if [ "$MEMCHECK" -gt 0 ]; then
538 SKIP_NEXT="YES"
539 fi
540}
541
Paul Bakker362689d2016-05-13 10:33:25 +0100542# skip the next test if valgrind is NOT in use
543only_with_valgrind() {
544 if [ "$MEMCHECK" -eq 0 ]; then
545 SKIP_NEXT="YES"
546 fi
547}
548
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200549# multiply the client timeout delay by the given factor for the next test
Janos Follath74537a62016-09-02 13:45:28 +0100550client_needs_more_time() {
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200551 CLI_DELAY_FACTOR=$1
552}
553
Janos Follath74537a62016-09-02 13:45:28 +0100554# wait for the given seconds after the client finished in the next test
555server_needs_more_time() {
556 SRV_DELAY_SECONDS=$1
557}
558
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100559# print_name <name>
560print_name() {
Paul Bakkere20310a2016-05-10 11:18:17 +0100561 TESTS=$(( $TESTS + 1 ))
562 LINE=""
563
564 if [ "$SHOW_TEST_NUMBER" -gt 0 ]; then
565 LINE="$TESTS "
566 fi
567
568 LINE="$LINE$1"
Gilles Peskine231befa2020-08-26 20:05:11 +0200569 printf "%s " "$LINE"
Paul Bakkere20310a2016-05-10 11:18:17 +0100570 LEN=$(( 72 - `echo "$LINE" | wc -c` ))
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100571 for i in `seq 1 $LEN`; do printf '.'; done
572 printf ' '
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100573
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100574}
575
Gilles Peskine560280b2019-09-16 15:17:38 +0200576# record_outcome <outcome> [<failure-reason>]
577# The test name must be in $NAME.
578record_outcome() {
579 echo "$1"
580 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ]; then
581 printf '%s;%s;%s;%s;%s;%s\n' \
582 "$MBEDTLS_TEST_PLATFORM" "$MBEDTLS_TEST_CONFIGURATION" \
583 "ssl-opt" "$NAME" \
584 "$1" "${2-}" \
585 >>"$MBEDTLS_TEST_OUTCOME_FILE"
586 fi
587}
588
Gilles Peskineaa1d6ad2021-10-20 14:17:02 +0200589# True if the presence of the given pattern in a log definitely indicates
590# that the test has failed. False if the presence is inconclusive.
591#
592# Inputs:
593# * $1: pattern found in the logs
594# * $TIMES_LEFT: >0 if retrying is an option
595#
596# Outputs:
597# * $outcome: set to a retry reason if the pattern is inconclusive,
598# unchanged otherwise.
599# * Return value: 1 if the pattern is inconclusive,
600# 0 if the failure is definitive.
601log_pattern_presence_is_conclusive() {
602 # If we've run out of attempts, then don't retry no matter what.
603 if [ $TIMES_LEFT -eq 0 ]; then
604 return 0
605 fi
606 case $1 in
607 "resend")
608 # An undesired resend may have been caused by the OS dropping or
609 # delaying a packet at an inopportune time.
610 outcome="RETRY(resend)"
611 return 1;;
612 esac
613}
614
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100615# fail <message>
616fail() {
Gilles Peskine560280b2019-09-16 15:17:38 +0200617 record_outcome "FAIL" "$1"
Manuel Pégourié-Gonnard3eec6042014-02-27 15:37:24 +0100618 echo " ! $1"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100619
Manuel Pégourié-Gonnardc2b00922014-08-31 16:46:04 +0200620 mv $SRV_OUT o-srv-${TESTS}.log
621 mv $CLI_OUT o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200622 if [ -n "$PXY_CMD" ]; then
623 mv $PXY_OUT o-pxy-${TESTS}.log
624 fi
625 echo " ! outputs saved to o-XXX-${TESTS}.log"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100626
Manuel Pégourié-Gonnard3f3302f2020-06-08 11:49:05 +0200627 if [ "${LOG_FAILURE_ON_STDOUT:-0}" != 0 ]; then
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200628 echo " ! server output:"
629 cat o-srv-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200630 echo " ! ========================================================"
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200631 echo " ! client output:"
632 cat o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200633 if [ -n "$PXY_CMD" ]; then
634 echo " ! ========================================================"
635 echo " ! proxy output:"
636 cat o-pxy-${TESTS}.log
637 fi
638 echo ""
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200639 fi
640
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +0200641 FAILS=$(( $FAILS + 1 ))
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100642}
643
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100644# is_polar <cmd_line>
645is_polar() {
Gilles Peskine64457492020-08-26 21:53:33 +0200646 case "$1" in
647 *ssl_client2*) true;;
648 *ssl_server2*) true;;
649 *) false;;
650 esac
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100651}
652
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +0200653# openssl s_server doesn't have -www with DTLS
654check_osrv_dtls() {
Gilles Peskine64457492020-08-26 21:53:33 +0200655 case "$SRV_CMD" in
656 *s_server*-dtls*)
657 NEEDS_INPUT=1
658 SRV_CMD="$( echo $SRV_CMD | sed s/-www// )";;
659 *) NEEDS_INPUT=0;;
660 esac
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +0200661}
662
663# provide input to commands that need it
664provide_input() {
665 if [ $NEEDS_INPUT -eq 0 ]; then
666 return
667 fi
668
669 while true; do
670 echo "HTTP/1.0 200 OK"
671 sleep 1
672 done
673}
674
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100675# has_mem_err <log_file_name>
676has_mem_err() {
677 if ( grep -F 'All heap blocks were freed -- no leaks are possible' "$1" &&
678 grep -F 'ERROR SUMMARY: 0 errors from 0 contexts' "$1" ) > /dev/null
679 then
680 return 1 # false: does not have errors
681 else
682 return 0 # true: has errors
683 fi
684}
685
Unknownd364f4c2019-09-02 10:42:57 -0400686# Wait for process $2 named $3 to be listening on port $1. Print error to $4.
Gilles Peskine418b5362017-12-14 18:58:42 +0100687if type lsof >/dev/null 2>/dev/null; then
Unknownd364f4c2019-09-02 10:42:57 -0400688 wait_app_start() {
Paul Elliottce777382021-10-20 15:59:33 +0100689 newline='
690'
Gilles Peskine418b5362017-12-14 18:58:42 +0100691 START_TIME=$(date +%s)
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200692 if [ "$DTLS" -eq 1 ]; then
Gilles Peskine418b5362017-12-14 18:58:42 +0100693 proto=UDP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200694 else
Gilles Peskine418b5362017-12-14 18:58:42 +0100695 proto=TCP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200696 fi
Gilles Peskine418b5362017-12-14 18:58:42 +0100697 # Make a tight loop, server normally takes less than 1s to start.
Paul Elliott6cd97ce2021-10-19 17:56:39 +0100698 while true; do
Gilles Peskine36019d52022-04-15 22:53:18 +0200699 SERVER_PIDS=$(lsof -a -n -b -i "$proto:$1" -t)
Paul Elliottce777382021-10-20 15:59:33 +0100700 # When we use a proxy, it will be listening on the same port we
701 # are checking for as well as the server and lsof will list both.
Paul Elliottce777382021-10-20 15:59:33 +0100702 case ${newline}${SERVER_PIDS}${newline} in
Gilles Peskine36019d52022-04-15 22:53:18 +0200703 *${newline}${2}${newline}*) break;;
Paul Elliottce777382021-10-20 15:59:33 +0100704 esac
Gilles Peskine418b5362017-12-14 18:58:42 +0100705 if [ $(( $(date +%s) - $START_TIME )) -gt $DOG_DELAY ]; then
Unknownd364f4c2019-09-02 10:42:57 -0400706 echo "$3 START TIMEOUT"
707 echo "$3 START TIMEOUT" >> $4
Gilles Peskine418b5362017-12-14 18:58:42 +0100708 break
709 fi
710 # Linux and *BSD support decimal arguments to sleep. On other
711 # OSes this may be a tight loop.
712 sleep 0.1 2>/dev/null || true
713 done
714 }
715else
Unknownd364f4c2019-09-02 10:42:57 -0400716 echo "Warning: lsof not available, wait_app_start = sleep"
717 wait_app_start() {
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200718 sleep "$START_DELAY"
Gilles Peskine418b5362017-12-14 18:58:42 +0100719 }
720fi
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200721
Unknownd364f4c2019-09-02 10:42:57 -0400722# Wait for server process $2 to be listening on port $1.
723wait_server_start() {
724 wait_app_start $1 $2 "SERVER" $SRV_OUT
725}
726
727# Wait for proxy process $2 to be listening on port $1.
728wait_proxy_start() {
729 wait_app_start $1 $2 "PROXY" $PXY_OUT
730}
731
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100732# Given the client or server debug output, parse the unix timestamp that is
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +0100733# included in the first 4 bytes of the random bytes and check that it's within
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100734# acceptable bounds
735check_server_hello_time() {
736 # Extract the time from the debug (lvl 3) output of the client
Andres Amaya Garcia67d8da52017-09-15 15:49:24 +0100737 SERVER_HELLO_TIME="$(sed -n 's/.*server hello, current time: //p' < "$1")"
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100738 # Get the Unix timestamp for now
739 CUR_TIME=$(date +'%s')
740 THRESHOLD_IN_SECS=300
741
742 # Check if the ServerHello time was printed
743 if [ -z "$SERVER_HELLO_TIME" ]; then
744 return 1
745 fi
746
747 # Check the time in ServerHello is within acceptable bounds
748 if [ $SERVER_HELLO_TIME -lt $(( $CUR_TIME - $THRESHOLD_IN_SECS )) ]; then
749 # The time in ServerHello is at least 5 minutes before now
750 return 1
751 elif [ $SERVER_HELLO_TIME -gt $(( $CUR_TIME + $THRESHOLD_IN_SECS )) ]; then
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +0100752 # The time in ServerHello is at least 5 minutes later than now
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100753 return 1
754 else
755 return 0
756 fi
757}
758
Piotr Nowicki0937ed22019-11-26 16:32:40 +0100759# Get handshake memory usage from server or client output and put it into the variable specified by the first argument
760handshake_memory_get() {
761 OUTPUT_VARIABLE="$1"
762 OUTPUT_FILE="$2"
763
764 # Get memory usage from a pattern like "Heap memory usage after handshake: 23112 bytes. Peak memory usage was 33112"
765 MEM_USAGE=$(sed -n 's/.*Heap memory usage after handshake: //p' < "$OUTPUT_FILE" | grep -o "[0-9]*" | head -1)
766
767 # Check if memory usage was read
768 if [ -z "$MEM_USAGE" ]; then
769 echo "Error: Can not read the value of handshake memory usage"
770 return 1
771 else
772 eval "$OUTPUT_VARIABLE=$MEM_USAGE"
773 return 0
774 fi
775}
776
777# Get handshake memory usage from server or client output and check if this value
778# is not higher than the maximum given by the first argument
779handshake_memory_check() {
780 MAX_MEMORY="$1"
781 OUTPUT_FILE="$2"
782
783 # Get memory usage
784 if ! handshake_memory_get "MEMORY_USAGE" "$OUTPUT_FILE"; then
785 return 1
786 fi
787
788 # Check if memory usage is below max value
789 if [ "$MEMORY_USAGE" -gt "$MAX_MEMORY" ]; then
790 echo "\nFailed: Handshake memory usage was $MEMORY_USAGE bytes," \
791 "but should be below $MAX_MEMORY bytes"
792 return 1
793 else
794 return 0
795 fi
796}
797
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200798# wait for client to terminate and set CLI_EXIT
799# must be called right after starting the client
800wait_client_done() {
801 CLI_PID=$!
802
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200803 CLI_DELAY=$(( $DOG_DELAY * $CLI_DELAY_FACTOR ))
804 CLI_DELAY_FACTOR=1
805
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200806 ( sleep $CLI_DELAY; echo "===CLIENT_TIMEOUT===" >> $CLI_OUT; kill $CLI_PID ) &
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200807 DOG_PID=$!
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200808
809 wait $CLI_PID
810 CLI_EXIT=$?
811
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200812 kill $DOG_PID >/dev/null 2>&1
813 wait $DOG_PID
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200814
815 echo "EXIT: $CLI_EXIT" >> $CLI_OUT
Janos Follath74537a62016-09-02 13:45:28 +0100816
817 sleep $SRV_DELAY_SECONDS
818 SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200819}
820
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200821# check if the given command uses dtls and sets global variable DTLS
822detect_dtls() {
Gilles Peskine64457492020-08-26 21:53:33 +0200823 case "$1" in
Paul Elliott405fccc2021-10-12 16:02:55 +0100824 *dtls=1*|*-dtls*|*-u*) DTLS=1;;
Gilles Peskine64457492020-08-26 21:53:33 +0200825 *) DTLS=0;;
826 esac
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200827}
828
Dave Rodgman0279c2f2021-02-10 12:45:41 +0000829# check if the given command uses gnutls and sets global variable CMD_IS_GNUTLS
830is_gnutls() {
831 case "$1" in
832 *gnutls-cli*)
833 CMD_IS_GNUTLS=1
834 ;;
835 *gnutls-serv*)
836 CMD_IS_GNUTLS=1
837 ;;
838 *)
839 CMD_IS_GNUTLS=0
840 ;;
841 esac
842}
843
Gilles Peskine64c683f2022-03-14 17:55:04 +0100844# Determine what calc_verify trace is to be expected, if any.
845#
846# calc_verify is only called for two things: to calculate the
847# extended master secret, and to process client authentication.
848#
849# Warning: the current implementation assumes that extended_ms is not
850# disabled on the client or on the server.
851#
852# Inputs:
Gilles Peskinef2e1f472022-04-06 22:23:45 +0200853# * $1: the value of the server auth_mode parameter.
854# 'required' if client authentication is expected,
855# 'none' or absent if not.
Gilles Peskine64c683f2022-03-14 17:55:04 +0100856# * $CONFIGS_ENABLED
857#
858# Outputs:
859# * $maybe_calc_verify: set to a trace expected in the debug logs
860set_maybe_calc_verify() {
861 maybe_calc_verify=
862 case $CONFIGS_ENABLED in
863 *\ MBEDTLS_SSL_EXTENDED_MASTER_SECRET\ *) :;;
864 *)
865 case ${1-} in
Gilles Peskinef2e1f472022-04-06 22:23:45 +0200866 ''|none) return;;
867 required) :;;
Gilles Peskine64c683f2022-03-14 17:55:04 +0100868 *) echo "Bad parameter 1 to set_maybe_calc_verify: $1"; exit 1;;
869 esac
870 esac
871 case $CONFIGS_ENABLED in
872 *\ MBEDTLS_USE_PSA_CRYPTO\ *) maybe_calc_verify="PSA calc verify";;
873 *) maybe_calc_verify="<= calc verify";;
874 esac
875}
876
Johan Pascal9bc50b02020-09-24 12:01:13 +0200877# Compare file content
878# Usage: find_in_both pattern file1 file2
879# extract from file1 the first line matching the pattern
880# check in file2 that the same line can be found
881find_in_both() {
882 srv_pattern=$(grep -m 1 "$1" "$2");
883 if [ -z "$srv_pattern" ]; then
884 return 1;
885 fi
886
887 if grep "$srv_pattern" $3 >/dev/null; then :
Johan Pascal10403152020-10-09 20:43:51 +0200888 return 0;
Johan Pascal9bc50b02020-09-24 12:01:13 +0200889 else
890 return 1;
891 fi
892}
893
Gilles Peskinef9022b02021-10-19 16:25:10 +0200894# Analyze the commands that will be used in a test.
895#
896# Analyze and possibly instrument $PXY_CMD, $CLI_CMD, $SRV_CMD to pass
897# extra arguments or go through wrappers.
Gilles Peskined5b1a302022-04-05 22:00:17 +0200898#
899# Inputs:
900# * $@: supplemental options to run_test() (after the mandatory arguments).
901# * $CLI_CMD, $PXY_CMD, $SRV_CMD: the client, proxy and server commands.
902# * $DTLS: 1 if DTLS, otherwise 0.
903#
904# Outputs:
905# * $CLI_CMD, $PXY_CMD, $SRV_CMD: may be tweaked.
Gilles Peskinef9022b02021-10-19 16:25:10 +0200906analyze_test_commands() {
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +0200907 # if the test uses DTLS but no custom proxy, add a simple proxy
908 # as it provides timing info that's useful to debug failures
Manuel Pégourié-Gonnard70fce982020-06-25 09:54:46 +0200909 if [ -z "$PXY_CMD" ] && [ "$DTLS" -eq 1 ]; then
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +0200910 PXY_CMD="$P_PXY"
Manuel Pégourié-Gonnard8779e9a2020-07-16 10:19:32 +0200911 case " $SRV_CMD " in
912 *' server_addr=::1 '*)
913 PXY_CMD="$PXY_CMD server_addr=::1 listen_addr=::1";;
914 esac
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +0200915 fi
916
Dave Rodgman0279c2f2021-02-10 12:45:41 +0000917 # update CMD_IS_GNUTLS variable
918 is_gnutls "$SRV_CMD"
919
920 # if the server uses gnutls but doesn't set priority, explicitly
921 # set the default priority
922 if [ "$CMD_IS_GNUTLS" -eq 1 ]; then
923 case "$SRV_CMD" in
924 *--priority*) :;;
925 *) SRV_CMD="$SRV_CMD --priority=NORMAL";;
926 esac
927 fi
928
929 # update CMD_IS_GNUTLS variable
930 is_gnutls "$CLI_CMD"
931
932 # if the client uses gnutls but doesn't set priority, explicitly
933 # set the default priority
934 if [ "$CMD_IS_GNUTLS" -eq 1 ]; then
935 case "$CLI_CMD" in
936 *--priority*) :;;
937 *) CLI_CMD="$CLI_CMD --priority=NORMAL";;
938 esac
939 fi
940
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200941 # fix client port
942 if [ -n "$PXY_CMD" ]; then
943 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$PXY_PORT/g )
944 else
945 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$SRV_PORT/g )
946 fi
947
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100948 # prepend valgrind to our commands if active
949 if [ "$MEMCHECK" -gt 0 ]; then
950 if is_polar "$SRV_CMD"; then
951 SRV_CMD="valgrind --leak-check=full $SRV_CMD"
952 fi
953 if is_polar "$CLI_CMD"; then
954 CLI_CMD="valgrind --leak-check=full $CLI_CMD"
955 fi
956 fi
Gilles Peskinef9022b02021-10-19 16:25:10 +0200957}
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100958
Gilles Peskinef9022b02021-10-19 16:25:10 +0200959# Check for failure conditions after a test case.
960#
961# Inputs from run_test:
962# * positional parameters: test options (see run_test documentation)
963# * $CLI_EXIT: client return code
964# * $CLI_EXPECT: expected client return code
965# * $SRV_RET: server return code
966# * $CLI_OUT, $SRV_OUT, $PXY_OUT: files containing client/server/proxy logs
Gilles Peskinea28fd412021-10-19 17:23:25 +0200967# * $TIMES_LEFT: if nonzero, a RETRY outcome is allowed
Gilles Peskinef9022b02021-10-19 16:25:10 +0200968#
969# Outputs:
Gilles Peskine2d3c9f82021-10-19 18:00:10 +0200970# * $outcome: one of PASS/RETRY*/FAIL
Gilles Peskinef9022b02021-10-19 16:25:10 +0200971check_test_failure() {
Gilles Peskinea28fd412021-10-19 17:23:25 +0200972 outcome=FAIL
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200973
Gilles Peskinea28fd412021-10-19 17:23:25 +0200974 if [ $TIMES_LEFT -gt 0 ] &&
975 grep '===CLIENT_TIMEOUT===' $CLI_OUT >/dev/null
976 then
Gilles Peskine2d3c9f82021-10-19 18:00:10 +0200977 outcome="RETRY(client-timeout)"
Gilles Peskinea28fd412021-10-19 17:23:25 +0200978 return
979 fi
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200980
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100981 # check if the client and server went at least to the handshake stage
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200982 # (useful to avoid tests with only negative assertions and non-zero
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100983 # expected client exit to incorrectly succeed in case of catastrophic
984 # failure)
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100985 if is_polar "$SRV_CMD"; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200986 if grep "Performing the SSL/TLS handshake" $SRV_OUT >/dev/null; then :;
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100987 else
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100988 fail "server or client failed to reach handshake stage"
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100989 return
990 fi
991 fi
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100992 if is_polar "$CLI_CMD"; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200993 if grep "Performing the SSL/TLS handshake" $CLI_OUT >/dev/null; then :;
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100994 else
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100995 fail "server or client failed to reach handshake stage"
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100996 return
997 fi
998 fi
999
Gilles Peskineaaf866e2021-02-09 21:01:33 +01001000 # Check server exit code (only for Mbed TLS: GnuTLS and OpenSSL don't
1001 # exit with status 0 when interrupted by a signal, and we don't really
1002 # care anyway), in case e.g. the server reports a memory leak.
1003 if [ $SRV_RET != 0 ] && is_polar "$SRV_CMD"; then
Gilles Peskine7f919de2021-02-02 23:29:03 +01001004 fail "Server exited with status $SRV_RET"
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +01001005 return
1006 fi
1007
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001008 # check client exit code
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01001009 if [ \( "$CLI_EXPECT" = 0 -a "$CLI_EXIT" != 0 \) -o \
1010 \( "$CLI_EXPECT" != 0 -a "$CLI_EXIT" = 0 \) ]
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001011 then
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001012 fail "bad client exit code (expected $CLI_EXPECT, got $CLI_EXIT)"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001013 return
1014 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001015
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001016 # check other assertions
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001017 # lines beginning with == are added by valgrind, ignore them
Paul Bakker1f650922016-05-13 10:16:46 +01001018 # lines with 'Serious error when reading debug info', are valgrind issues as well
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001019 while [ $# -gt 0 ]
1020 do
1021 case $1 in
1022 "-s")
Paul Bakker1f650922016-05-13 10:16:46 +01001023 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +01001024 fail "pattern '$2' MUST be present in the Server output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001025 return
1026 fi
1027 ;;
1028
1029 "-c")
Paul Bakker1f650922016-05-13 10:16:46 +01001030 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +01001031 fail "pattern '$2' MUST be present in the Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001032 return
1033 fi
1034 ;;
1035
1036 "-S")
Paul Bakker1f650922016-05-13 10:16:46 +01001037 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Gilles Peskineaa1d6ad2021-10-20 14:17:02 +02001038 if log_pattern_presence_is_conclusive "$2"; then
Gilles Peskine2d3c9f82021-10-19 18:00:10 +02001039 fail "pattern '$2' MUST NOT be present in the Server output"
1040 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001041 return
1042 fi
1043 ;;
1044
1045 "-C")
Paul Bakker1f650922016-05-13 10:16:46 +01001046 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Gilles Peskineaa1d6ad2021-10-20 14:17:02 +02001047 if log_pattern_presence_is_conclusive "$2"; then
Gilles Peskine2d3c9f82021-10-19 18:00:10 +02001048 fail "pattern '$2' MUST NOT be present in the Client output"
1049 fi
Simon Butcher8e004102016-10-14 00:48:33 +01001050 return
1051 fi
1052 ;;
1053
1054 # The filtering in the following two options (-u and -U) do the following
1055 # - ignore valgrind output
Antonin Décimo36e89b52019-01-23 15:24:37 +01001056 # - filter out everything but lines right after the pattern occurrences
Simon Butcher8e004102016-10-14 00:48:33 +01001057 # - keep one of each non-unique line
1058 # - count how many lines remain
1059 # A line with '--' will remain in the result from previous outputs, so the number of lines in the result will be 1
1060 # if there were no duplicates.
1061 "-U")
1062 if [ $(grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
1063 fail "lines following pattern '$2' must be unique in Server output"
1064 return
1065 fi
1066 ;;
1067
1068 "-u")
1069 if [ $(grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
1070 fail "lines following pattern '$2' must be unique in Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001071 return
1072 fi
1073 ;;
Andres Amaya Garcia93993de2017-09-06 15:38:07 +01001074 "-F")
1075 if ! $2 "$SRV_OUT"; then
1076 fail "function call to '$2' failed on Server output"
1077 return
1078 fi
1079 ;;
1080 "-f")
1081 if ! $2 "$CLI_OUT"; then
1082 fail "function call to '$2' failed on Client output"
1083 return
1084 fi
1085 ;;
Johan Pascal9bc50b02020-09-24 12:01:13 +02001086 "-g")
1087 if ! eval "$2 '$SRV_OUT' '$CLI_OUT'"; then
1088 fail "function call to '$2' failed on Server and Client output"
1089 return
1090 fi
1091 ;;
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001092
1093 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +02001094 echo "Unknown test: $1" >&2
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001095 exit 1
1096 esac
1097 shift 2
1098 done
1099
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001100 # check valgrind's results
1101 if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001102 if is_polar "$SRV_CMD" && has_mem_err $SRV_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001103 fail "Server has memory errors"
1104 return
1105 fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001106 if is_polar "$CLI_CMD" && has_mem_err $CLI_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001107 fail "Client has memory errors"
1108 return
1109 fi
1110 fi
1111
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001112 # if we're here, everything is ok
Gilles Peskinea28fd412021-10-19 17:23:25 +02001113 outcome=PASS
Gilles Peskinef9022b02021-10-19 16:25:10 +02001114}
1115
Gilles Peskine5d8e7022021-10-19 16:35:35 +02001116# Run the current test case: start the server and if applicable the proxy, run
1117# the client, wait for all processes to finish or time out.
1118#
1119# Inputs:
1120# * $NAME: test case name
1121# * $CLI_CMD, $SRV_CMD, $PXY_CMD: commands to run
1122# * $CLI_OUT, $SRV_OUT, $PXY_OUT: files to contain client/server/proxy logs
1123#
1124# Outputs:
1125# * $CLI_EXIT: client return code
1126# * $SRV_RET: server return code
1127do_run_test_once() {
1128 # run the commands
1129 if [ -n "$PXY_CMD" ]; then
1130 printf "# %s\n%s\n" "$NAME" "$PXY_CMD" > $PXY_OUT
1131 $PXY_CMD >> $PXY_OUT 2>&1 &
1132 PXY_PID=$!
1133 wait_proxy_start "$PXY_PORT" "$PXY_PID"
1134 fi
1135
1136 check_osrv_dtls
1137 printf '# %s\n%s\n' "$NAME" "$SRV_CMD" > $SRV_OUT
1138 provide_input | $SRV_CMD >> $SRV_OUT 2>&1 &
1139 SRV_PID=$!
1140 wait_server_start "$SRV_PORT" "$SRV_PID"
1141
1142 printf '# %s\n%s\n' "$NAME" "$CLI_CMD" > $CLI_OUT
Andrzej Kurekd27cdcc2022-05-27 06:44:19 -04001143 # The client must be a subprocess of the script in order for killing it to
1144 # work properly, that's why the ampersand is placed inside the eval command,
1145 # not at the end of the line: the latter approach will spawn eval as a
1146 # subprocess, and the $CLI_CMD as a grandchild.
1147 eval "$CLI_CMD &" >> $CLI_OUT 2>&1
Gilles Peskine5d8e7022021-10-19 16:35:35 +02001148 wait_client_done
1149
1150 sleep 0.05
1151
1152 # terminate the server (and the proxy)
1153 kill $SRV_PID
1154 wait $SRV_PID
1155 SRV_RET=$?
1156
1157 if [ -n "$PXY_CMD" ]; then
1158 kill $PXY_PID >/dev/null 2>&1
1159 wait $PXY_PID
1160 fi
1161}
1162
Gilles Peskinef9022b02021-10-19 16:25:10 +02001163# Usage: run_test name [-p proxy_cmd] srv_cmd cli_cmd cli_exit [option [...]]
1164# Options: -s pattern pattern that must be present in server output
1165# -c pattern pattern that must be present in client output
1166# -u pattern lines after pattern must be unique in client output
1167# -f call shell function on client output
1168# -S pattern pattern that must be absent in server output
1169# -C pattern pattern that must be absent in client output
1170# -U pattern lines after pattern must be unique in server output
1171# -F call shell function on server output
1172# -g call shell function on server and client output
1173run_test() {
1174 NAME="$1"
1175 shift 1
1176
1177 if is_excluded "$NAME"; then
1178 SKIP_NEXT="NO"
1179 # There was no request to run the test, so don't record its outcome.
1180 return
1181 fi
1182
1183 print_name "$NAME"
1184
1185 # Do we only run numbered tests?
1186 if [ -n "$RUN_TEST_NUMBER" ]; then
1187 case ",$RUN_TEST_NUMBER," in
1188 *",$TESTS,"*) :;;
1189 *) SKIP_NEXT="YES";;
1190 esac
1191 fi
1192
1193 # does this test use a proxy?
1194 if [ "X$1" = "X-p" ]; then
1195 PXY_CMD="$2"
1196 shift 2
1197 else
1198 PXY_CMD=""
1199 fi
1200
1201 # get commands and client output
1202 SRV_CMD="$1"
1203 CLI_CMD="$2"
1204 CLI_EXPECT="$3"
1205 shift 3
1206
1207 # Check if test uses files
1208 case "$SRV_CMD $CLI_CMD" in
1209 *data_files/*)
1210 requires_config_enabled MBEDTLS_FS_IO;;
1211 esac
1212
Gilles Peskinee5f49582022-02-25 19:46:30 +01001213 # Check if the test uses DTLS.
1214 detect_dtls "$SRV_CMD"
1215 if [ "$DTLS" -eq 1 ]; then
1216 requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
1217 fi
1218
Gilles Peskine511fdf42022-04-08 19:26:26 +02001219 # If the client or server requires certain features that can be detected
1220 # from their command-line arguments, check that they're enabled.
1221 detect_required_features "$SRV_CMD" "$@"
1222 detect_required_features "$CLI_CMD" "$@"
Gilles Peskinef9022b02021-10-19 16:25:10 +02001223
Gilles Peskine89d892f2022-02-25 19:52:52 +01001224 # If we're in a PSK-only build and the test can be adapted to PSK, do that.
1225 maybe_adapt_for_psk "$@"
1226
Gilles Peskinef9022b02021-10-19 16:25:10 +02001227 # should we skip?
1228 if [ "X$SKIP_NEXT" = "XYES" ]; then
1229 SKIP_NEXT="NO"
1230 record_outcome "SKIP"
1231 SKIPS=$(( $SKIPS + 1 ))
1232 return
1233 fi
1234
1235 analyze_test_commands "$@"
1236
Andrzej Kurek363553b2022-04-01 08:52:06 -04001237 # One regular run and two retries
1238 TIMES_LEFT=3
Gilles Peskinef9022b02021-10-19 16:25:10 +02001239 while [ $TIMES_LEFT -gt 0 ]; do
1240 TIMES_LEFT=$(( $TIMES_LEFT - 1 ))
1241
Gilles Peskine5d8e7022021-10-19 16:35:35 +02001242 do_run_test_once
Gilles Peskinef9022b02021-10-19 16:25:10 +02001243
Gilles Peskinea28fd412021-10-19 17:23:25 +02001244 check_test_failure "$@"
1245 case $outcome in
1246 PASS) break;;
Gilles Peskine2d3c9f82021-10-19 18:00:10 +02001247 RETRY*) printf "$outcome ";;
Gilles Peskinea28fd412021-10-19 17:23:25 +02001248 FAIL) return;;
1249 esac
Gilles Peskinef9022b02021-10-19 16:25:10 +02001250 done
1251
Gilles Peskinea28fd412021-10-19 17:23:25 +02001252 # If we get this far, the test case passed.
Gilles Peskine560280b2019-09-16 15:17:38 +02001253 record_outcome "PASS"
Paul Bakkeracaac852016-05-10 11:47:13 +01001254 if [ "$PRESERVE_LOGS" -gt 0 ]; then
1255 mv $SRV_OUT o-srv-${TESTS}.log
1256 mv $CLI_OUT o-cli-${TESTS}.log
Hanno Becker7be2e5b2018-08-20 12:21:35 +01001257 if [ -n "$PXY_CMD" ]; then
1258 mv $PXY_OUT o-pxy-${TESTS}.log
1259 fi
Paul Bakkeracaac852016-05-10 11:47:13 +01001260 fi
1261
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001262 rm -f $SRV_OUT $CLI_OUT $PXY_OUT
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001263}
1264
Hanno Becker9b5853c2018-11-16 17:28:40 +00001265run_test_psa() {
1266 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine64c683f2022-03-14 17:55:04 +01001267 set_maybe_calc_verify none
Hanno Beckere9420c22018-11-20 11:37:34 +00001268 run_test "PSA-supported ciphersuite: $1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00001269 "$P_SRV debug_level=3 force_version=tls12" \
1270 "$P_CLI debug_level=3 force_version=tls12 force_ciphersuite=$1" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001271 0 \
1272 -c "Successfully setup PSA-based decryption cipher context" \
1273 -c "Successfully setup PSA-based encryption cipher context" \
Gilles Peskine64c683f2022-03-14 17:55:04 +01001274 -c "$maybe_calc_verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -05001275 -c "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001276 -s "Successfully setup PSA-based decryption cipher context" \
1277 -s "Successfully setup PSA-based encryption cipher context" \
Gilles Peskine64c683f2022-03-14 17:55:04 +01001278 -s "$maybe_calc_verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -05001279 -s "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001280 -C "Failed to setup PSA-based cipher context"\
1281 -S "Failed to setup PSA-based cipher context"\
1282 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +00001283 -c "Perform PSA-based ECDH computation."\
Andrzej Kureke85414e2019-01-15 05:23:59 -05001284 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001285 -S "error" \
1286 -C "error"
Gilles Peskine64c683f2022-03-14 17:55:04 +01001287 unset maybe_calc_verify
Hanno Becker9b5853c2018-11-16 17:28:40 +00001288}
1289
Hanno Becker354e2482019-01-08 11:40:25 +00001290run_test_psa_force_curve() {
1291 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine64c683f2022-03-14 17:55:04 +01001292 set_maybe_calc_verify none
Hanno Becker354e2482019-01-08 11:40:25 +00001293 run_test "PSA - ECDH with $1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00001294 "$P_SRV debug_level=4 force_version=tls12" \
1295 "$P_CLI debug_level=4 force_version=tls12 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 curves=$1" \
Hanno Becker354e2482019-01-08 11:40:25 +00001296 0 \
Hanno Becker28f78442019-02-18 16:47:50 +00001297 -c "Successfully setup PSA-based decryption cipher context" \
1298 -c "Successfully setup PSA-based encryption cipher context" \
Gilles Peskine64c683f2022-03-14 17:55:04 +01001299 -c "$maybe_calc_verify" \
Hanno Becker28f78442019-02-18 16:47:50 +00001300 -c "calc PSA finished" \
1301 -s "Successfully setup PSA-based decryption cipher context" \
1302 -s "Successfully setup PSA-based encryption cipher context" \
Gilles Peskine64c683f2022-03-14 17:55:04 +01001303 -s "$maybe_calc_verify" \
Hanno Becker28f78442019-02-18 16:47:50 +00001304 -s "calc PSA finished" \
1305 -C "Failed to setup PSA-based cipher context"\
1306 -S "Failed to setup PSA-based cipher context"\
Hanno Becker354e2482019-01-08 11:40:25 +00001307 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +00001308 -c "Perform PSA-based ECDH computation."\
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001309 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001310 -S "error" \
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001311 -C "error"
Gilles Peskine64c683f2022-03-14 17:55:04 +01001312 unset maybe_calc_verify
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001313}
1314
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001315# Test that the server's memory usage after a handshake is reduced when a client specifies
1316# a maximum fragment length.
1317# first argument ($1) is MFL for SSL client
1318# second argument ($2) is memory usage for SSL client with default MFL (16k)
1319run_test_memory_after_hanshake_with_mfl()
1320{
1321 # The test passes if the difference is around 2*(16k-MFL)
Gilles Peskine5b428d72020-08-26 21:52:23 +02001322 MEMORY_USAGE_LIMIT="$(( $2 - ( 2 * ( 16384 - $1 )) ))"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001323
1324 # Leave some margin for robustness
1325 MEMORY_USAGE_LIMIT="$(( ( MEMORY_USAGE_LIMIT * 110 ) / 100 ))"
1326
1327 run_test "Handshake memory usage (MFL $1)" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00001328 "$P_SRV debug_level=3 auth_mode=required force_version=tls12" \
1329 "$P_CLI debug_level=3 force_version=tls12 \
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001330 crt_file=data_files/server5.crt key_file=data_files/server5.key \
1331 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM max_frag_len=$1" \
1332 0 \
1333 -F "handshake_memory_check $MEMORY_USAGE_LIMIT"
1334}
1335
1336
1337# Test that the server's memory usage after a handshake is reduced when a client specifies
1338# different values of Maximum Fragment Length: default (16k), 4k, 2k, 1k and 512 bytes
1339run_tests_memory_after_hanshake()
1340{
1341 # all tests in this sequence requires the same configuration (see requires_config_enabled())
1342 SKIP_THIS_TESTS="$SKIP_NEXT"
1343
1344 # first test with default MFU is to get reference memory usage
1345 MEMORY_USAGE_MFL_16K=0
1346 run_test "Handshake memory usage initial (MFL 16384 - default)" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00001347 "$P_SRV debug_level=3 auth_mode=required force_version=tls12" \
1348 "$P_CLI debug_level=3 force_version=tls12 \
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001349 crt_file=data_files/server5.crt key_file=data_files/server5.key \
1350 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM" \
1351 0 \
1352 -F "handshake_memory_get MEMORY_USAGE_MFL_16K"
1353
1354 SKIP_NEXT="$SKIP_THIS_TESTS"
1355 run_test_memory_after_hanshake_with_mfl 4096 "$MEMORY_USAGE_MFL_16K"
1356
1357 SKIP_NEXT="$SKIP_THIS_TESTS"
1358 run_test_memory_after_hanshake_with_mfl 2048 "$MEMORY_USAGE_MFL_16K"
1359
1360 SKIP_NEXT="$SKIP_THIS_TESTS"
1361 run_test_memory_after_hanshake_with_mfl 1024 "$MEMORY_USAGE_MFL_16K"
1362
1363 SKIP_NEXT="$SKIP_THIS_TESTS"
1364 run_test_memory_after_hanshake_with_mfl 512 "$MEMORY_USAGE_MFL_16K"
1365}
1366
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001367cleanup() {
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001368 rm -f $CLI_OUT $SRV_OUT $PXY_OUT $SESSION
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001369 rm -f context_srv.txt
1370 rm -f context_cli.txt
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001371 test -n "${SRV_PID:-}" && kill $SRV_PID >/dev/null 2>&1
1372 test -n "${PXY_PID:-}" && kill $PXY_PID >/dev/null 2>&1
1373 test -n "${CLI_PID:-}" && kill $CLI_PID >/dev/null 2>&1
1374 test -n "${DOG_PID:-}" && kill $DOG_PID >/dev/null 2>&1
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001375 exit 1
1376}
1377
Manuel Pégourié-Gonnard9dea8bd2014-02-26 18:21:02 +01001378#
1379# MAIN
1380#
1381
Manuel Pégourié-Gonnard913030c2014-03-28 10:12:38 +01001382get_options "$@"
1383
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001384# Optimize filters: if $FILTER and $EXCLUDE can be expressed as shell
1385# patterns rather than regular expressions, use a case statement instead
1386# of calling grep. To keep the optimizer simple, it is incomplete and only
1387# detects simple cases: plain substring, everything, nothing.
1388#
1389# As an exception, the character '.' is treated as an ordinary character
1390# if it is the only special character in the string. This is because it's
1391# rare to need "any one character", but needing a literal '.' is common
1392# (e.g. '-f "DTLS 1.2"').
1393need_grep=
1394case "$FILTER" in
1395 '^$') simple_filter=;;
1396 '.*') simple_filter='*';;
Gilles Peskineb09e0012020-09-29 23:48:39 +02001397 *[][$+*?\\^{\|}]*) # Regexp special characters (other than .), we need grep
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001398 need_grep=1;;
1399 *) # No regexp or shell-pattern special character
1400 simple_filter="*$FILTER*";;
1401esac
1402case "$EXCLUDE" in
1403 '^$') simple_exclude=;;
1404 '.*') simple_exclude='*';;
Gilles Peskineb09e0012020-09-29 23:48:39 +02001405 *[][$+*?\\^{\|}]*) # Regexp special characters (other than .), we need grep
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001406 need_grep=1;;
1407 *) # No regexp or shell-pattern special character
1408 simple_exclude="*$EXCLUDE*";;
1409esac
1410if [ -n "$need_grep" ]; then
1411 is_excluded () {
1412 ! echo "$1" | grep "$FILTER" | grep -q -v "$EXCLUDE"
1413 }
1414else
1415 is_excluded () {
1416 case "$1" in
1417 $simple_exclude) true;;
1418 $simple_filter) false;;
1419 *) true;;
1420 esac
1421 }
1422fi
1423
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001424# sanity checks, avoid an avalanche of errors
Hanno Becker4ac73e72017-10-23 15:27:37 +01001425P_SRV_BIN="${P_SRV%%[ ]*}"
1426P_CLI_BIN="${P_CLI%%[ ]*}"
1427P_PXY_BIN="${P_PXY%%[ ]*}"
Hanno Becker17c04932017-10-10 14:44:53 +01001428if [ ! -x "$P_SRV_BIN" ]; then
1429 echo "Command '$P_SRV_BIN' is not an executable file"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001430 exit 1
1431fi
Hanno Becker17c04932017-10-10 14:44:53 +01001432if [ ! -x "$P_CLI_BIN" ]; then
1433 echo "Command '$P_CLI_BIN' is not an executable file"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001434 exit 1
1435fi
Hanno Becker17c04932017-10-10 14:44:53 +01001436if [ ! -x "$P_PXY_BIN" ]; then
1437 echo "Command '$P_PXY_BIN' is not an executable file"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001438 exit 1
1439fi
Simon Butcher3c0d7b82016-05-23 11:13:17 +01001440if [ "$MEMCHECK" -gt 0 ]; then
1441 if which valgrind >/dev/null 2>&1; then :; else
1442 echo "Memcheck not possible. Valgrind not found"
1443 exit 1
1444 fi
1445fi
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +01001446if which $OPENSSL_CMD >/dev/null 2>&1; then :; else
1447 echo "Command '$OPENSSL_CMD' not found"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001448 exit 1
1449fi
1450
Manuel Pégourié-Gonnard32f8f4d2014-05-29 11:31:20 +02001451# used by watchdog
1452MAIN_PID="$$"
1453
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001454# We use somewhat arbitrary delays for tests:
1455# - how long do we wait for the server to start (when lsof not available)?
1456# - how long do we allow for the client to finish?
1457# (not to check performance, just to avoid waiting indefinitely)
1458# Things are slower with valgrind, so give extra time here.
1459#
1460# Note: without lsof, there is a trade-off between the running time of this
1461# script and the risk of spurious errors because we didn't wait long enough.
1462# The watchdog delay on the other hand doesn't affect normal running time of
1463# the script, only the case where a client or server gets stuck.
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001464if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001465 START_DELAY=6
1466 DOG_DELAY=60
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001467else
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001468 START_DELAY=2
1469 DOG_DELAY=20
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001470fi
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001471
1472# some particular tests need more time:
1473# - for the client, we multiply the usual watchdog limit by a factor
1474# - for the server, we sleep for a number of seconds after the client exits
1475# see client_need_more_time() and server_needs_more_time()
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +02001476CLI_DELAY_FACTOR=1
Janos Follath74537a62016-09-02 13:45:28 +01001477SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001478
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001479# fix commands to use this port, force IPv4 while at it
Manuel Pégourié-Gonnard0af1ba32015-01-21 11:44:33 +00001480# +SRV_PORT will be replaced by either $SRV_PORT or $PXY_PORT later
Paul Elliottccba1292021-10-12 16:10:37 +01001481# Note: Using 'localhost' rather than 127.0.0.1 here is unwise, as on many
1482# machines that will resolve to ::1, and we don't want ipv6 here.
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001483P_SRV="$P_SRV server_addr=127.0.0.1 server_port=$SRV_PORT"
1484P_CLI="$P_CLI server_addr=127.0.0.1 server_port=+SRV_PORT"
Andres AGf04f54d2016-10-10 15:46:20 +01001485P_PXY="$P_PXY server_addr=127.0.0.1 server_port=$SRV_PORT listen_addr=127.0.0.1 listen_port=$PXY_PORT ${SEED:+"seed=$SEED"}"
Gilles Peskine3aec89b2021-04-01 14:00:11 +02001486O_SRV="$O_SRV -accept $SRV_PORT"
Paul Elliottccba1292021-10-12 16:10:37 +01001487O_CLI="$O_CLI -connect 127.0.0.1:+SRV_PORT"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001488G_SRV="$G_SRV -p $SRV_PORT"
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02001489G_CLI="$G_CLI -p +SRV_PORT"
Manuel Pégourié-Gonnard8066b812014-05-28 22:59:30 +02001490
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001491if [ -n "${OPENSSL_LEGACY:-}" ]; then
1492 O_LEGACY_SRV="$O_LEGACY_SRV -accept $SRV_PORT -dhparam data_files/dhparams.pem"
Paul Elliottccba1292021-10-12 16:10:37 +01001493 O_LEGACY_CLI="$O_LEGACY_CLI -connect 127.0.0.1:+SRV_PORT"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001494fi
1495
Paul Elliott633a74e2021-10-13 18:31:07 +01001496if [ -n "${OPENSSL_NEXT:-}" ]; then
1497 O_NEXT_SRV="$O_NEXT_SRV -accept $SRV_PORT"
Paul Elliottccba1292021-10-12 16:10:37 +01001498 O_NEXT_CLI="$O_NEXT_CLI -connect 127.0.0.1:+SRV_PORT"
Paul Elliott633a74e2021-10-13 18:31:07 +01001499fi
1500
Hanno Becker58e9dc32018-08-17 15:53:21 +01001501if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001502 G_NEXT_SRV="$G_NEXT_SRV -p $SRV_PORT"
1503fi
1504
Hanno Becker58e9dc32018-08-17 15:53:21 +01001505if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02001506 G_NEXT_CLI="$G_NEXT_CLI -p +SRV_PORT"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001507fi
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01001508
Gilles Peskine62469d92017-05-10 10:13:59 +02001509# Allow SHA-1, because many of our test certificates use it
1510P_SRV="$P_SRV allow_sha1=1"
1511P_CLI="$P_CLI allow_sha1=1"
1512
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001513# Also pick a unique name for intermediate files
1514SRV_OUT="srv_out.$$"
1515CLI_OUT="cli_out.$$"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001516PXY_OUT="pxy_out.$$"
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001517SESSION="session.$$"
1518
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +02001519SKIP_NEXT="NO"
1520
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01001521trap cleanup INT TERM HUP
1522
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001523# Basic test
1524
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001525# Checks that:
1526# - things work with all ciphersuites active (used with config-full in all.sh)
Gilles Peskinede4cb352022-04-05 22:00:32 +02001527# - the expected parameters are selected
Gilles Peskinedf4ad902022-04-08 15:14:38 +02001528requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskinedff48c12022-02-25 19:50:38 +01001529requires_ciphersuite_enabled TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
Gilles Peskinede4cb352022-04-05 22:00:32 +02001530requires_config_enabled MBEDTLS_SHA512_C # "signature_algorithm ext: 6"
1531requires_config_enabled MBEDTLS_ECP_DP_SECP521R1_ENABLED
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001532run_test "Default" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001533 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001534 "$P_CLI" \
1535 0 \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001536 -s "Protocol is TLSv1.2" \
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001537 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001538 -s "client hello v3, signature_algorithm ext: 6" \
1539 -s "ECDHE curve: secp521r1" \
1540 -S "error" \
1541 -C "error"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001542
Gilles Peskinedf4ad902022-04-08 15:14:38 +02001543requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskinedff48c12022-02-25 19:50:38 +01001544requires_ciphersuite_enabled TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +00001545run_test "Default, DTLS" \
1546 "$P_SRV dtls=1" \
1547 "$P_CLI dtls=1" \
1548 0 \
1549 -s "Protocol is DTLSv1.2" \
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001550 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256"
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +00001551
Hanno Becker721f7c12020-08-17 12:17:32 +01001552run_test "TLS client auth: required" \
1553 "$P_SRV auth_mode=required" \
1554 "$P_CLI" \
1555 0 \
1556 -s "Verifying peer X.509 certificate... ok"
1557
Hanno Becker2f54a3c2020-08-17 12:14:06 +01001558requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1559requires_config_enabled MBEDTLS_ECDSA_C
1560requires_config_enabled MBEDTLS_SHA256_C
1561run_test "TLS: password protected client key" \
1562 "$P_SRV auth_mode=required" \
1563 "$P_CLI crt_file=data_files/server5.crt key_file=data_files/server5.key.enc key_pwd=PolarSSLTest" \
1564 0
1565
1566requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1567requires_config_enabled MBEDTLS_ECDSA_C
1568requires_config_enabled MBEDTLS_SHA256_C
1569run_test "TLS: password protected server key" \
1570 "$P_SRV crt_file=data_files/server5.crt key_file=data_files/server5.key.enc key_pwd=PolarSSLTest" \
1571 "$P_CLI" \
1572 0
1573
1574requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1575requires_config_enabled MBEDTLS_ECDSA_C
1576requires_config_enabled MBEDTLS_RSA_C
1577requires_config_enabled MBEDTLS_SHA256_C
1578run_test "TLS: password protected server key, two certificates" \
1579 "$P_SRV \
1580 key_file=data_files/server5.key.enc key_pwd=PolarSSLTest crt_file=data_files/server5.crt \
1581 key_file2=data_files/server2.key.enc key_pwd2=PolarSSLTest crt_file2=data_files/server2.crt" \
1582 "$P_CLI" \
1583 0
1584
Manuel Pégourié-Gonnard342d2ca2020-01-02 11:58:00 +01001585requires_config_enabled MBEDTLS_ZLIB_SUPPORT
1586run_test "Default (compression enabled)" \
1587 "$P_SRV debug_level=3" \
1588 "$P_CLI debug_level=3" \
1589 0 \
1590 -s "Allocating compression buffer" \
1591 -c "Allocating compression buffer" \
1592 -s "Record expansion is unknown (compression)" \
1593 -c "Record expansion is unknown (compression)" \
1594 -S "error" \
1595 -C "error"
1596
Hanno Becker746aaf32019-03-28 15:25:23 +00001597requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
1598run_test "CA callback on client" \
1599 "$P_SRV debug_level=3" \
1600 "$P_CLI ca_callback=1 debug_level=3 " \
1601 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01001602 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00001603 -S "error" \
1604 -C "error"
1605
1606requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
1607requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1608requires_config_enabled MBEDTLS_ECDSA_C
1609requires_config_enabled MBEDTLS_SHA256_C
1610run_test "CA callback on server" \
1611 "$P_SRV auth_mode=required" \
1612 "$P_CLI ca_callback=1 debug_level=3 crt_file=data_files/server5.crt \
1613 key_file=data_files/server5.key" \
1614 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01001615 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00001616 -s "Verifying peer X.509 certificate... ok" \
1617 -S "error" \
1618 -C "error"
1619
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001620# Test using an opaque private key for client authentication
1621requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1622requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1623requires_config_enabled MBEDTLS_ECDSA_C
1624requires_config_enabled MBEDTLS_SHA256_C
1625run_test "Opaque key for client authentication" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001626 "$P_SRV auth_mode=required crt_file=data_files/server5.crt \
1627 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001628 "$P_CLI key_opaque=1 crt_file=data_files/server5.crt \
1629 key_file=data_files/server5.key" \
1630 0 \
1631 -c "key type: Opaque" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001632 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001633 -s "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001634 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01001635 -S "error" \
1636 -C "error"
1637
Przemyslaw Stekielab09c9e2021-10-04 11:13:22 +02001638# Test using an opaque private key for server authentication
1639requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1640requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1641requires_config_enabled MBEDTLS_ECDSA_C
1642requires_config_enabled MBEDTLS_SHA256_C
1643run_test "Opaque key for server authentication" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001644 "$P_SRV auth_mode=required key_opaque=1 crt_file=data_files/server5.crt \
1645 key_file=data_files/server5.key" \
Przemyslaw Stekielab09c9e2021-10-04 11:13:22 +02001646 "$P_CLI crt_file=data_files/server5.crt \
1647 key_file=data_files/server5.key" \
1648 0 \
1649 -c "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001650 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
1651 -s "key types: Opaque - invalid PK" \
1652 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Przemyslaw Stekielab09c9e2021-10-04 11:13:22 +02001653 -S "error" \
1654 -C "error"
1655
Przemyslaw Stekiel5b6c4c92021-10-06 11:31:49 +02001656# Test using an opaque private key for client/server authentication
1657requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1658requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1659requires_config_enabled MBEDTLS_ECDSA_C
1660requires_config_enabled MBEDTLS_SHA256_C
1661run_test "Opaque key for client/server authentication" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001662 "$P_SRV auth_mode=required key_opaque=1 crt_file=data_files/server5.crt \
1663 key_file=data_files/server5.key" \
Przemyslaw Stekiel5b6c4c92021-10-06 11:31:49 +02001664 "$P_CLI key_opaque=1 crt_file=data_files/server5.crt \
1665 key_file=data_files/server5.key" \
1666 0 \
1667 -c "key type: Opaque" \
1668 -c "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001669 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
1670 -s "key types: Opaque - invalid PK" \
Przemyslaw Stekiel5b6c4c92021-10-06 11:31:49 +02001671 -s "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielb3de3fd2021-10-26 12:25:27 +02001672 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Przemyslaw Stekiel5b6c4c92021-10-06 11:31:49 +02001673 -S "error" \
1674 -C "error"
1675
Manuel Pégourié-Gonnard938be422022-06-14 10:43:36 +02001676# Opaque keys not supported for static ECDH
1677requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1678requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1679run_test "Opaque key: server: ECDH-ECDSA not supported" \
1680 "$P_SRV debug_level=1 key_opaque=1
1681 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
1682 "$P_CLI force_ciphersuite=TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256" \
1683 1 \
1684 -s "server key not ECDH capable" \
1685 -s "ssl_get_ecdh_params_from_cert() returned" \
1686 -s "error" \
1687 -c "error"
1688
1689# Opaque keys not supported for static ECDH
1690requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1691requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
1692run_test "Opaque key: server: ECDH-RSA not supported" \
1693 "$P_SRV debug_level=1 key_opaque=1
1694 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
1695 "$P_CLI force_ciphersuite=TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256" \
1696 1 \
1697 -s "server key not ECDH capable" \
1698 -s "ssl_get_ecdh_params_from_cert() returned" \
1699 -s "error" \
1700 -c "error"
1701
Manuel Pégourié-Gonnarda49a00c2022-06-14 10:45:19 +02001702# Opaque PSKs not supported for mixed PSK
1703
1704requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1705run_test "Opaque psk: client: ECDHE-PSK not supported" \
1706 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo" \
1707 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1708 force_version=tls12 \
1709 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA" \
1710 1 \
1711 -c "opaque PSK not supported with ECDHE-PSK" \
1712 -s "error" \
1713 -c "error"
1714
1715requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1716run_test "Opaque psk: client: DHE-PSK not supported" \
1717 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo" \
1718 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1719 force_version=tls12 \
1720 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA" \
1721 1 \
1722 -c "opaque PSK not supported with DHE-PSK" \
1723 -s "error" \
1724 -c "error"
1725
1726requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1727run_test "Opaque psk: client: RSA-PSK not supported" \
1728 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo" \
1729 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1730 force_version=tls12 \
1731 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA" \
1732 1 \
1733 -c "opaque PSK not supported with RSA-PSK" \
1734 -s "error" \
1735 -c "error"
1736
Manuel Pégourié-Gonnardd80d8a42022-06-14 10:53:15 +02001737requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1738run_test "Opaque psk: server: ECDHE-PSK not supported" \
1739 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1740 force_version=tls12 \
1741 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA" \
1742 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo" \
1743 1 \
1744 -s "opaque PSK not supported with ECDHE-PSK" \
1745 -s "error" \
1746 -c "error"
1747
1748requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1749run_test "Opaque psk: server: DHE-PSK not supported" \
1750 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1751 force_version=tls12 \
1752 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA" \
1753 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo" \
1754 1 \
1755 -s "opaque PSK not supported with DHE-PSK" \
1756 -s "error" \
1757 -c "error"
1758
1759requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
1760run_test "Opaque psk: server: RSA-PSK not supported" \
1761 "$P_SRV debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 \
1762 force_version=tls12 \
1763 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA" \
1764 "$P_CLI debug_level=1 psk=abc123 psk_identity=foo" \
1765 1 \
1766 -s "opaque PSK not supported with RSA-PSK" \
1767 -s "error" \
1768 -c "error"
1769
Hanno Becker9b5853c2018-11-16 17:28:40 +00001770# Test ciphersuites which we expect to be fully supported by PSA Crypto
1771# and check that we don't fall back to Mbed TLS' internal crypto primitives.
1772run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM
1773run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
1774run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM
1775run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
1776run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
1777run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
1778run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA
1779run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
1780run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
1781
Hanno Becker354e2482019-01-08 11:40:25 +00001782requires_config_enabled MBEDTLS_ECP_DP_SECP521R1_ENABLED
1783run_test_psa_force_curve "secp521r1"
1784requires_config_enabled MBEDTLS_ECP_DP_BP512R1_ENABLED
1785run_test_psa_force_curve "brainpoolP512r1"
1786requires_config_enabled MBEDTLS_ECP_DP_SECP384R1_ENABLED
1787run_test_psa_force_curve "secp384r1"
1788requires_config_enabled MBEDTLS_ECP_DP_BP384R1_ENABLED
1789run_test_psa_force_curve "brainpoolP384r1"
1790requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
1791run_test_psa_force_curve "secp256r1"
1792requires_config_enabled MBEDTLS_ECP_DP_SECP256K1_ENABLED
1793run_test_psa_force_curve "secp256k1"
1794requires_config_enabled MBEDTLS_ECP_DP_BP256R1_ENABLED
1795run_test_psa_force_curve "brainpoolP256r1"
1796requires_config_enabled MBEDTLS_ECP_DP_SECP224R1_ENABLED
1797run_test_psa_force_curve "secp224r1"
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01001798## SECP224K1 is buggy via the PSA API
Dave Rodgman52af7692022-03-31 14:27:24 +01001799## (https://github.com/Mbed-TLS/mbedtls/issues/3541),
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01001800## so it is disabled in PSA even when it's enabled in Mbed TLS.
1801## The proper dependency would be on PSA_WANT_ECC_SECP_K1_224 but
1802## dependencies on PSA symbols in ssl-opt.sh are not implemented yet.
1803#requires_config_enabled MBEDTLS_ECP_DP_SECP224K1_ENABLED
1804#run_test_psa_force_curve "secp224k1"
Hanno Becker354e2482019-01-08 11:40:25 +00001805requires_config_enabled MBEDTLS_ECP_DP_SECP192R1_ENABLED
1806run_test_psa_force_curve "secp192r1"
1807requires_config_enabled MBEDTLS_ECP_DP_SECP192K1_ENABLED
1808run_test_psa_force_curve "secp192k1"
1809
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001810# Test current time in ServerHello
1811requires_config_enabled MBEDTLS_HAVE_TIME
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001812run_test "ServerHello contains gmt_unix_time" \
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001813 "$P_SRV debug_level=3" \
1814 "$P_CLI debug_level=3" \
1815 0 \
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001816 -f "check_server_hello_time" \
1817 -F "check_server_hello_time"
1818
Simon Butcher8e004102016-10-14 00:48:33 +01001819# Test for uniqueness of IVs in AEAD ciphersuites
1820run_test "Unique IV in GCM" \
1821 "$P_SRV exchanges=20 debug_level=4" \
1822 "$P_CLI exchanges=20 debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
1823 0 \
1824 -u "IV used" \
1825 -U "IV used"
1826
Janos Follathee11be62019-04-04 12:03:30 +01001827# Tests for certificate verification callback
1828run_test "Configuration-specific CRT verification callback" \
1829 "$P_SRV debug_level=3" \
1830 "$P_CLI context_crt_cb=0 debug_level=3" \
1831 0 \
Janos Follathee11be62019-04-04 12:03:30 +01001832 -S "error" \
1833 -c "Verify requested for " \
1834 -c "Use configuration-specific verification callback" \
1835 -C "Use context-specific verification callback" \
1836 -C "error"
1837
Hanno Beckerefb440a2019-04-03 13:04:33 +01001838run_test "Context-specific CRT verification callback" \
1839 "$P_SRV debug_level=3" \
1840 "$P_CLI context_crt_cb=1 debug_level=3" \
1841 0 \
Hanno Beckerefb440a2019-04-03 13:04:33 +01001842 -S "error" \
Janos Follathee11be62019-04-04 12:03:30 +01001843 -c "Verify requested for " \
1844 -c "Use context-specific verification callback" \
1845 -C "Use configuration-specific verification callback" \
Hanno Beckerefb440a2019-04-03 13:04:33 +01001846 -C "error"
1847
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001848# Tests for rc4 option
1849
Gilles Peskine719a6522022-04-15 20:03:33 +02001850# Manual dependencies on the ciphersuite support are necessary
1851# because the automatic requirements from force_ciphersuite=... detection
1852# make an exception for these test cases since they expect a handshake
1853# failure.
1854requires_config_enabled MBEDTLS_ARC4_C
1855requires_config_enabled MBEDTLS_SHA1_C
1856requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Simon Butchera410af52016-05-19 22:12:18 +01001857requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001858run_test "RC4: server disabled, client enabled" \
1859 "$P_SRV" \
1860 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1861 1 \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001862 -s "SSL - The server has no ciphersuites in common"
1863
Gilles Peskine719a6522022-04-15 20:03:33 +02001864requires_config_enabled MBEDTLS_ARC4_C
1865requires_config_enabled MBEDTLS_SHA1_C
1866requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Simon Butchera410af52016-05-19 22:12:18 +01001867requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001868run_test "RC4: server half, client enabled" \
1869 "$P_SRV arc4=1" \
1870 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1871 1 \
1872 -s "SSL - The server has no ciphersuites in common"
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001873
Gilles Peskine719a6522022-04-15 20:03:33 +02001874requires_config_enabled MBEDTLS_ARC4_C
1875requires_config_enabled MBEDTLS_SHA1_C
1876requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
1877requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001878run_test "RC4: server enabled, client disabled" \
1879 "$P_SRV force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1880 "$P_CLI" \
1881 1 \
1882 -s "SSL - The server has no ciphersuites in common"
1883
Gilles Peskine719a6522022-04-15 20:03:33 +02001884# Run even if the ciphersuite is disabled by default, but only if the
1885# requisite cryptographic mechanisms are present.
1886# Having "force_ciphersuite=..." in the client or server arguments would
1887# prevent that due to the automatic detection, so hide behind some
1888# shell expansion to fool the automatic detection.
1889with_rc4_ciphersuite() {
1890 exec "$@" force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA
1891}
1892requires_config_enabled MBEDTLS_ARC4_C
1893requires_config_enabled MBEDTLS_SHA1_C
1894requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001895run_test "RC4: both enabled" \
Gilles Peskine719a6522022-04-15 20:03:33 +02001896 "with_rc4_ciphersuite $P_SRV" \
1897 "with_rc4_ciphersuite $P_CLI" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001898 0 \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001899 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001900 -S "SSL - The server has no ciphersuites in common"
1901
Hanno Beckerd26bb202018-08-17 09:54:10 +01001902# Test empty CA list in CertificateRequest in TLS 1.1 and earlier
1903
1904requires_gnutls
Hanno Beckerd26bb202018-08-17 09:54:10 +01001905run_test "CertificateRequest with empty CA list, TLS 1.1 (GnuTLS server)" \
1906 "$G_SRV"\
1907 "$P_CLI force_version=tls1_1" \
1908 0
1909
1910requires_gnutls
Hanno Beckerd26bb202018-08-17 09:54:10 +01001911run_test "CertificateRequest with empty CA list, TLS 1.0 (GnuTLS server)" \
1912 "$G_SRV"\
1913 "$P_CLI force_version=tls1" \
1914 0
1915
Gilles Peskinebc70a182017-05-09 15:59:24 +02001916# Tests for SHA-1 support
1917
1918run_test "SHA-1 forbidden by default in server certificate" \
1919 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1920 "$P_CLI debug_level=2 allow_sha1=0" \
1921 1 \
1922 -c "The certificate is signed with an unacceptable hash"
1923
1924run_test "SHA-1 explicitly allowed in server certificate" \
1925 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1926 "$P_CLI allow_sha1=1" \
1927 0
1928
1929run_test "SHA-256 allowed by default in server certificate" \
1930 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2-sha256.crt" \
1931 "$P_CLI allow_sha1=0" \
1932 0
1933
1934run_test "SHA-1 forbidden by default in client certificate" \
1935 "$P_SRV auth_mode=required allow_sha1=0" \
1936 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1937 1 \
1938 -s "The certificate is signed with an unacceptable hash"
1939
1940run_test "SHA-1 explicitly allowed in client certificate" \
1941 "$P_SRV auth_mode=required allow_sha1=1" \
1942 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1943 0
1944
1945run_test "SHA-256 allowed by default in client certificate" \
1946 "$P_SRV auth_mode=required allow_sha1=0" \
1947 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha256.crt" \
1948 0
1949
Hanno Becker7ae8a762018-08-14 15:43:35 +01001950# Tests for datagram packing
1951run_test "DTLS: multiple records in same datagram, client and server" \
1952 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
1953 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
1954 0 \
1955 -c "next record in same datagram" \
1956 -s "next record in same datagram"
1957
1958run_test "DTLS: multiple records in same datagram, client only" \
1959 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
1960 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
1961 0 \
1962 -s "next record in same datagram" \
1963 -C "next record in same datagram"
1964
1965run_test "DTLS: multiple records in same datagram, server only" \
1966 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
1967 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
1968 0 \
1969 -S "next record in same datagram" \
1970 -c "next record in same datagram"
1971
1972run_test "DTLS: multiple records in same datagram, neither client nor server" \
1973 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
1974 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
1975 0 \
1976 -S "next record in same datagram" \
1977 -C "next record in same datagram"
1978
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001979# Tests for Truncated HMAC extension
1980
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001981run_test "Truncated HMAC: client default, server default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001982 "$P_SRV debug_level=4" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001983 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001984 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001985 -s "dumping 'expected mac' (20 bytes)" \
1986 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001987
Hanno Becker32c55012017-11-10 08:42:54 +00001988requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001989run_test "Truncated HMAC: client disabled, server default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001990 "$P_SRV debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001991 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001992 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001993 -s "dumping 'expected mac' (20 bytes)" \
1994 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001995
Hanno Becker32c55012017-11-10 08:42:54 +00001996requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001997run_test "Truncated HMAC: client enabled, server default" \
1998 "$P_SRV debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001999 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002000 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00002001 -s "dumping 'expected mac' (20 bytes)" \
2002 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002003
Hanno Becker32c55012017-11-10 08:42:54 +00002004requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002005run_test "Truncated HMAC: client enabled, server disabled" \
2006 "$P_SRV debug_level=4 trunc_hmac=0" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002007 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002008 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00002009 -s "dumping 'expected mac' (20 bytes)" \
2010 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002011
Hanno Becker32c55012017-11-10 08:42:54 +00002012requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Hanno Becker34d0c3f2017-11-17 15:46:24 +00002013run_test "Truncated HMAC: client disabled, server enabled" \
2014 "$P_SRV debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002015 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker34d0c3f2017-11-17 15:46:24 +00002016 0 \
2017 -s "dumping 'expected mac' (20 bytes)" \
2018 -S "dumping 'expected mac' (10 bytes)"
2019
2020requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002021run_test "Truncated HMAC: client enabled, server enabled" \
2022 "$P_SRV debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002023 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01002024 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00002025 -S "dumping 'expected mac' (20 bytes)" \
2026 -s "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002027
Hanno Becker4c4f4102017-11-10 09:16:05 +00002028run_test "Truncated HMAC, DTLS: client default, server default" \
2029 "$P_SRV dtls=1 debug_level=4" \
2030 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
2031 0 \
2032 -s "dumping 'expected mac' (20 bytes)" \
2033 -S "dumping 'expected mac' (10 bytes)"
2034
2035requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2036run_test "Truncated HMAC, DTLS: client disabled, server default" \
2037 "$P_SRV dtls=1 debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002038 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00002039 0 \
2040 -s "dumping 'expected mac' (20 bytes)" \
2041 -S "dumping 'expected mac' (10 bytes)"
2042
2043requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2044run_test "Truncated HMAC, DTLS: client enabled, server default" \
2045 "$P_SRV dtls=1 debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002046 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00002047 0 \
2048 -s "dumping 'expected mac' (20 bytes)" \
2049 -S "dumping 'expected mac' (10 bytes)"
2050
2051requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2052run_test "Truncated HMAC, DTLS: client enabled, server disabled" \
2053 "$P_SRV dtls=1 debug_level=4 trunc_hmac=0" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002054 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00002055 0 \
2056 -s "dumping 'expected mac' (20 bytes)" \
2057 -S "dumping 'expected mac' (10 bytes)"
2058
2059requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2060run_test "Truncated HMAC, DTLS: client disabled, server enabled" \
2061 "$P_SRV dtls=1 debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002062 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00002063 0 \
2064 -s "dumping 'expected mac' (20 bytes)" \
2065 -S "dumping 'expected mac' (10 bytes)"
2066
2067requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
2068run_test "Truncated HMAC, DTLS: client enabled, server enabled" \
2069 "$P_SRV dtls=1 debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00002070 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01002071 0 \
2072 -S "dumping 'expected mac' (20 bytes)" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002073 -s "dumping 'expected mac' (10 bytes)"
2074
Jarno Lamsa2937d812019-06-04 11:33:23 +03002075# Tests for Context serialization
2076
2077requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002078run_test "Context serialization, client serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002079 "$P_SRV dtls=1 serialize=0 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002080 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2081 0 \
2082 -c "Deserializing connection..." \
2083 -S "Deserializing connection..."
2084
2085requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2086run_test "Context serialization, client serializes, ChaChaPoly" \
2087 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2088 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2089 0 \
2090 -c "Deserializing connection..." \
2091 -S "Deserializing connection..."
2092
2093requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2094run_test "Context serialization, client serializes, GCM" \
2095 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2096 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002097 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002098 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002099 -S "Deserializing connection..."
2100
2101requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002102requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2103run_test "Context serialization, client serializes, with CID" \
2104 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
2105 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
2106 0 \
2107 -c "Deserializing connection..." \
2108 -S "Deserializing connection..."
2109
2110requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002111run_test "Context serialization, server serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002112 "$P_SRV dtls=1 serialize=1 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002113 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2114 0 \
2115 -C "Deserializing connection..." \
2116 -s "Deserializing connection..."
2117
2118requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2119run_test "Context serialization, server serializes, ChaChaPoly" \
2120 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2121 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2122 0 \
2123 -C "Deserializing connection..." \
2124 -s "Deserializing connection..."
2125
2126requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2127run_test "Context serialization, server serializes, GCM" \
2128 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2129 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002130 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002131 -C "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002132 -s "Deserializing connection..."
2133
2134requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002135requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2136run_test "Context serialization, server serializes, with CID" \
2137 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
2138 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
2139 0 \
2140 -C "Deserializing connection..." \
2141 -s "Deserializing connection..."
2142
2143requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002144run_test "Context serialization, both serialize, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002145 "$P_SRV dtls=1 serialize=1 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002146 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2147 0 \
2148 -c "Deserializing connection..." \
2149 -s "Deserializing connection..."
2150
2151requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2152run_test "Context serialization, both serialize, ChaChaPoly" \
2153 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2154 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2155 0 \
2156 -c "Deserializing connection..." \
2157 -s "Deserializing connection..."
2158
2159requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2160run_test "Context serialization, both serialize, GCM" \
2161 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2162 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002163 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002164 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002165 -s "Deserializing connection..."
2166
Jarno Lamsac2376f02019-06-06 10:44:14 +03002167requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002168requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2169run_test "Context serialization, both serialize, with CID" \
2170 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
2171 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
2172 0 \
2173 -c "Deserializing connection..." \
2174 -s "Deserializing connection..."
2175
2176requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002177run_test "Context serialization, re-init, client serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002178 "$P_SRV dtls=1 serialize=0 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002179 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2180 0 \
2181 -c "Deserializing connection..." \
2182 -S "Deserializing connection..."
2183
2184requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2185run_test "Context serialization, re-init, client serializes, ChaChaPoly" \
2186 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2187 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2188 0 \
2189 -c "Deserializing connection..." \
2190 -S "Deserializing connection..."
2191
2192requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2193run_test "Context serialization, re-init, client serializes, GCM" \
2194 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2195 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002196 0 \
2197 -c "Deserializing connection..." \
2198 -S "Deserializing connection..."
2199
Jarno Lamsac2376f02019-06-06 10:44:14 +03002200requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002201requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2202run_test "Context serialization, re-init, client serializes, with CID" \
2203 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
2204 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
2205 0 \
2206 -c "Deserializing connection..." \
2207 -S "Deserializing connection..."
2208
2209requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002210run_test "Context serialization, re-init, server serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002211 "$P_SRV dtls=1 serialize=2 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002212 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2213 0 \
2214 -C "Deserializing connection..." \
2215 -s "Deserializing connection..."
2216
2217requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2218run_test "Context serialization, re-init, server serializes, ChaChaPoly" \
2219 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2220 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2221 0 \
2222 -C "Deserializing connection..." \
2223 -s "Deserializing connection..."
2224
2225requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2226run_test "Context serialization, re-init, server serializes, GCM" \
2227 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2228 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002229 0 \
2230 -C "Deserializing connection..." \
2231 -s "Deserializing connection..."
2232
Jarno Lamsac2376f02019-06-06 10:44:14 +03002233requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002234requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2235run_test "Context serialization, re-init, server serializes, with CID" \
2236 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
2237 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
2238 0 \
2239 -C "Deserializing connection..." \
2240 -s "Deserializing connection..."
2241
2242requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002243run_test "Context serialization, re-init, both serialize, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002244 "$P_SRV dtls=1 serialize=2 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002245 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2246 0 \
2247 -c "Deserializing connection..." \
2248 -s "Deserializing connection..."
2249
2250requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2251run_test "Context serialization, re-init, both serialize, ChaChaPoly" \
2252 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2253 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2254 0 \
2255 -c "Deserializing connection..." \
2256 -s "Deserializing connection..."
2257
2258requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2259run_test "Context serialization, re-init, both serialize, GCM" \
2260 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2261 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002262 0 \
2263 -c "Deserializing connection..." \
2264 -s "Deserializing connection..."
2265
Hanno Becker1b18fd32019-08-30 11:18:59 +01002266requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2267requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2268run_test "Context serialization, re-init, both serialize, with CID" \
2269 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
2270 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
2271 0 \
2272 -c "Deserializing connection..." \
2273 -s "Deserializing connection..."
2274
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002275requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2276run_test "Saving the serialized context to a file" \
2277 "$P_SRV dtls=1 serialize=1 context_file=context_srv.txt" \
2278 "$P_CLI dtls=1 serialize=1 context_file=context_cli.txt" \
2279 0 \
2280 -s "Save serialized context to a file... ok" \
2281 -c "Save serialized context to a file... ok"
2282rm -f context_srv.txt
2283rm -f context_cli.txt
2284
Hanno Becker7cf463e2019-04-09 18:08:47 +01002285# Tests for DTLS Connection ID extension
2286
Hanno Becker7cf463e2019-04-09 18:08:47 +01002287# So far, the CID API isn't implemented, so we can't
2288# grep for output witnessing its use. This needs to be
2289# changed once the CID extension is implemented.
2290
Hanno Beckera0e20d02019-05-15 14:03:01 +01002291requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002292run_test "Connection ID: Cli enabled, Srv disabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002293 "$P_SRV debug_level=3 dtls=1 cid=0" \
2294 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2295 0 \
2296 -s "Disable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002297 -s "found CID extension" \
2298 -s "Client sent CID extension, but CID disabled" \
Hanno Becker6b78c832019-04-25 17:01:43 +01002299 -c "Enable use of CID extension." \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002300 -c "client hello, adding CID extension" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002301 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002302 -C "found CID extension" \
2303 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002304 -C "Copy CIDs into SSL transform" \
2305 -c "Use of Connection ID was rejected by the server"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002306
Hanno Beckera0e20d02019-05-15 14:03:01 +01002307requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002308run_test "Connection ID: Cli disabled, Srv enabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002309 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2310 "$P_CLI debug_level=3 dtls=1 cid=0" \
2311 0 \
2312 -c "Disable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002313 -C "client hello, adding CID extension" \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002314 -S "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002315 -s "Enable use of CID extension." \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002316 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002317 -C "found CID extension" \
2318 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002319 -C "Copy CIDs into SSL transform" \
Hanno Beckerb3e9dd52019-05-08 13:19:53 +01002320 -s "Use of Connection ID was not offered by client"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002321
Hanno Beckera0e20d02019-05-15 14:03:01 +01002322requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002323run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002324 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
2325 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef" \
2326 0 \
2327 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002328 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002329 -c "client hello, adding CID extension" \
2330 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002331 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002332 -s "server hello, adding CID extension" \
2333 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002334 -c "Use of CID extension negotiated" \
2335 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002336 -c "Copy CIDs into SSL transform" \
2337 -c "Peer CID (length 2 Bytes): de ad" \
2338 -s "Peer CID (length 2 Bytes): be ef" \
2339 -s "Use of Connection ID has been negotiated" \
2340 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002341
Hanno Beckera0e20d02019-05-15 14:03:01 +01002342requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002343run_test "Connection ID, 3D: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002344 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002345 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead" \
2346 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef" \
2347 0 \
2348 -c "Enable use of CID extension." \
2349 -s "Enable use of CID extension." \
2350 -c "client hello, adding CID extension" \
2351 -s "found CID extension" \
2352 -s "Use of CID extension negotiated" \
2353 -s "server hello, adding CID extension" \
2354 -c "found CID extension" \
2355 -c "Use of CID extension negotiated" \
2356 -s "Copy CIDs into SSL transform" \
2357 -c "Copy CIDs into SSL transform" \
2358 -c "Peer CID (length 2 Bytes): de ad" \
2359 -s "Peer CID (length 2 Bytes): be ef" \
2360 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002361 -c "Use of Connection ID has been negotiated" \
2362 -c "ignoring unexpected CID" \
2363 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002364
Hanno Beckera0e20d02019-05-15 14:03:01 +01002365requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002366run_test "Connection ID, MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
2367 -p "$P_PXY mtu=800" \
2368 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
2369 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
2370 0 \
2371 -c "Enable use of CID extension." \
2372 -s "Enable use of CID extension." \
2373 -c "client hello, adding CID extension" \
2374 -s "found CID extension" \
2375 -s "Use of CID extension negotiated" \
2376 -s "server hello, adding CID extension" \
2377 -c "found CID extension" \
2378 -c "Use of CID extension negotiated" \
2379 -s "Copy CIDs into SSL transform" \
2380 -c "Copy CIDs into SSL transform" \
2381 -c "Peer CID (length 2 Bytes): de ad" \
2382 -s "Peer CID (length 2 Bytes): be ef" \
2383 -s "Use of Connection ID has been negotiated" \
2384 -c "Use of Connection ID has been negotiated"
2385
Hanno Beckera0e20d02019-05-15 14:03:01 +01002386requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002387run_test "Connection ID, 3D+MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002388 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002389 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
2390 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
2391 0 \
2392 -c "Enable use of CID extension." \
2393 -s "Enable use of CID extension." \
2394 -c "client hello, adding CID extension" \
2395 -s "found CID extension" \
2396 -s "Use of CID extension negotiated" \
2397 -s "server hello, adding CID extension" \
2398 -c "found CID extension" \
2399 -c "Use of CID extension negotiated" \
2400 -s "Copy CIDs into SSL transform" \
2401 -c "Copy CIDs into SSL transform" \
2402 -c "Peer CID (length 2 Bytes): de ad" \
2403 -s "Peer CID (length 2 Bytes): be ef" \
2404 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002405 -c "Use of Connection ID has been negotiated" \
2406 -c "ignoring unexpected CID" \
2407 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002408
Hanno Beckera0e20d02019-05-15 14:03:01 +01002409requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002410run_test "Connection ID: Cli+Srv enabled, Cli CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002411 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2412 "$P_CLI debug_level=3 dtls=1 cid=1" \
2413 0 \
2414 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002415 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002416 -c "client hello, adding CID extension" \
2417 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002418 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002419 -s "server hello, adding CID extension" \
2420 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002421 -c "Use of CID extension negotiated" \
2422 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002423 -c "Copy CIDs into SSL transform" \
2424 -c "Peer CID (length 4 Bytes): de ad be ef" \
2425 -s "Peer CID (length 0 Bytes):" \
2426 -s "Use of Connection ID has been negotiated" \
2427 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002428
Hanno Beckera0e20d02019-05-15 14:03:01 +01002429requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002430run_test "Connection ID: Cli+Srv enabled, Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002431 "$P_SRV debug_level=3 dtls=1 cid=1" \
2432 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2433 0 \
2434 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002435 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002436 -c "client hello, adding CID extension" \
2437 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002438 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002439 -s "server hello, adding CID extension" \
2440 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002441 -c "Use of CID extension negotiated" \
2442 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002443 -c "Copy CIDs into SSL transform" \
2444 -s "Peer CID (length 4 Bytes): de ad be ef" \
2445 -c "Peer CID (length 0 Bytes):" \
2446 -s "Use of Connection ID has been negotiated" \
2447 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002448
Hanno Beckera0e20d02019-05-15 14:03:01 +01002449requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002450run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002451 "$P_SRV debug_level=3 dtls=1 cid=1" \
2452 "$P_CLI debug_level=3 dtls=1 cid=1" \
2453 0 \
2454 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002455 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002456 -c "client hello, adding CID extension" \
2457 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002458 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002459 -s "server hello, adding CID extension" \
2460 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002461 -c "Use of CID extension negotiated" \
2462 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002463 -c "Copy CIDs into SSL transform" \
2464 -S "Use of Connection ID has been negotiated" \
2465 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002466
Hanno Beckera0e20d02019-05-15 14:03:01 +01002467requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002468run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002469 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
2470 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2471 0 \
2472 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002473 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002474 -c "client hello, adding CID extension" \
2475 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002476 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002477 -s "server hello, adding CID extension" \
2478 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002479 -c "Use of CID extension negotiated" \
2480 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002481 -c "Copy CIDs into SSL transform" \
2482 -c "Peer CID (length 2 Bytes): de ad" \
2483 -s "Peer CID (length 2 Bytes): be ef" \
2484 -s "Use of Connection ID has been negotiated" \
2485 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002486
Hanno Beckera0e20d02019-05-15 14:03:01 +01002487requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002488run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002489 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2490 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2491 0 \
2492 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002493 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002494 -c "client hello, adding CID extension" \
2495 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002496 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002497 -s "server hello, adding CID extension" \
2498 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002499 -c "Use of CID extension negotiated" \
2500 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002501 -c "Copy CIDs into SSL transform" \
2502 -c "Peer CID (length 4 Bytes): de ad be ef" \
2503 -s "Peer CID (length 0 Bytes):" \
2504 -s "Use of Connection ID has been negotiated" \
2505 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002506
Hanno Beckera0e20d02019-05-15 14:03:01 +01002507requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002508run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002509 "$P_SRV debug_level=3 dtls=1 cid=1" \
2510 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2511 0 \
2512 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002513 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002514 -c "client hello, adding CID extension" \
2515 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002516 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002517 -s "server hello, adding CID extension" \
2518 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002519 -c "Use of CID extension negotiated" \
2520 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002521 -c "Copy CIDs into SSL transform" \
2522 -s "Peer CID (length 4 Bytes): de ad be ef" \
2523 -c "Peer CID (length 0 Bytes):" \
2524 -s "Use of Connection ID has been negotiated" \
2525 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002526
Hanno Beckera0e20d02019-05-15 14:03:01 +01002527requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002528run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002529 "$P_SRV debug_level=3 dtls=1 cid=1" \
2530 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2531 0 \
2532 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002533 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002534 -c "client hello, adding CID extension" \
2535 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002536 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002537 -s "server hello, adding CID extension" \
2538 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002539 -c "Use of CID extension negotiated" \
2540 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002541 -c "Copy CIDs into SSL transform" \
2542 -S "Use of Connection ID has been negotiated" \
2543 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002544
Hanno Beckera0e20d02019-05-15 14:03:01 +01002545requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002546run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002547 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
2548 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
2549 0 \
2550 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002551 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002552 -c "client hello, adding CID extension" \
2553 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002554 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002555 -s "server hello, adding CID extension" \
2556 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002557 -c "Use of CID extension negotiated" \
2558 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002559 -c "Copy CIDs into SSL transform" \
2560 -c "Peer CID (length 2 Bytes): de ad" \
2561 -s "Peer CID (length 2 Bytes): be ef" \
2562 -s "Use of Connection ID has been negotiated" \
2563 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002564
Hanno Beckera0e20d02019-05-15 14:03:01 +01002565requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002566run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002567 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2568 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
2569 0 \
2570 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002571 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002572 -c "client hello, adding CID extension" \
2573 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002574 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002575 -s "server hello, adding CID extension" \
2576 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002577 -c "Use of CID extension negotiated" \
2578 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002579 -c "Copy CIDs into SSL transform" \
2580 -c "Peer CID (length 4 Bytes): de ad be ef" \
2581 -s "Peer CID (length 0 Bytes):" \
2582 -s "Use of Connection ID has been negotiated" \
2583 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002584
Hanno Beckera0e20d02019-05-15 14:03:01 +01002585requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002586run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002587 "$P_SRV debug_level=3 dtls=1 cid=1" \
2588 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
2589 0 \
2590 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002591 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002592 -c "client hello, adding CID extension" \
2593 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002594 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002595 -s "server hello, adding CID extension" \
2596 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002597 -c "Use of CID extension negotiated" \
2598 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01002599 -c "Copy CIDs into SSL transform" \
2600 -s "Peer CID (length 4 Bytes): de ad be ef" \
2601 -c "Peer CID (length 0 Bytes):" \
2602 -s "Use of Connection ID has been negotiated" \
2603 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002604
Hanno Beckera0e20d02019-05-15 14:03:01 +01002605requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002606run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002607 "$P_SRV debug_level=3 dtls=1 cid=1" \
2608 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
2609 0 \
2610 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002611 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002612 -c "client hello, adding CID extension" \
2613 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002614 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002615 -s "server hello, adding CID extension" \
2616 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002617 -c "Use of CID extension negotiated" \
2618 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002619 -c "Copy CIDs into SSL transform" \
2620 -S "Use of Connection ID has been negotiated" \
2621 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002622
Hanno Beckera0e20d02019-05-15 14:03:01 +01002623requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker9bae30d2019-04-23 11:52:44 +01002624requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002625run_test "Connection ID: Cli+Srv enabled, renegotiate without change of CID" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002626 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
2627 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
2628 0 \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002629 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2630 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2631 -s "(initial handshake) Use of Connection ID has been negotiated" \
2632 -c "(initial handshake) Use of Connection ID has been negotiated" \
2633 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2634 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2635 -s "(after renegotiation) Use of Connection ID has been negotiated" \
2636 -c "(after renegotiation) Use of Connection ID has been negotiated"
2637
Hanno Beckera0e20d02019-05-15 14:03:01 +01002638requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002639requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002640run_test "Connection ID: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002641 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
2642 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
2643 0 \
2644 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2645 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2646 -s "(initial handshake) Use of Connection ID has been negotiated" \
2647 -c "(initial handshake) Use of Connection ID has been negotiated" \
2648 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2649 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2650 -s "(after renegotiation) Use of Connection ID has been negotiated" \
2651 -c "(after renegotiation) Use of Connection ID has been negotiated"
2652
Hanno Beckera0e20d02019-05-15 14:03:01 +01002653requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002654requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01002655run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate with different CID" \
2656 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead cid_val_renego=beef renegotiation=1" \
2657 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
2658 0 \
2659 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2660 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2661 -s "(initial handshake) Use of Connection ID has been negotiated" \
2662 -c "(initial handshake) Use of Connection ID has been negotiated" \
2663 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2664 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2665 -s "(after renegotiation) Use of Connection ID has been negotiated" \
2666 -c "(after renegotiation) Use of Connection ID has been negotiated"
2667
Hanno Beckera0e20d02019-05-15 14:03:01 +01002668requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01002669requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002670run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002671 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002672 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
2673 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
2674 0 \
2675 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2676 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2677 -s "(initial handshake) Use of Connection ID has been negotiated" \
2678 -c "(initial handshake) Use of Connection ID has been negotiated" \
2679 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2680 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2681 -s "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002682 -c "(after renegotiation) Use of Connection ID has been negotiated" \
2683 -c "ignoring unexpected CID" \
2684 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002685
Hanno Beckera0e20d02019-05-15 14:03:01 +01002686requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002687requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2688run_test "Connection ID: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002689 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2690 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2691 0 \
2692 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2693 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2694 -s "(initial handshake) Use of Connection ID has been negotiated" \
2695 -c "(initial handshake) Use of Connection ID has been negotiated" \
2696 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2697 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2698 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2699 -S "(after renegotiation) Use of Connection ID has been negotiated"
2700
Hanno Beckera0e20d02019-05-15 14:03:01 +01002701requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002702requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01002703run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate without CID" \
2704 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2705 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2706 0 \
2707 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2708 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2709 -s "(initial handshake) Use of Connection ID has been negotiated" \
2710 -c "(initial handshake) Use of Connection ID has been negotiated" \
2711 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2712 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2713 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2714 -S "(after renegotiation) Use of Connection ID has been negotiated"
2715
Hanno Beckera0e20d02019-05-15 14:03:01 +01002716requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01002717requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002718run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002719 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002720 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2721 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2722 0 \
2723 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2724 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2725 -s "(initial handshake) Use of Connection ID has been negotiated" \
2726 -c "(initial handshake) Use of Connection ID has been negotiated" \
2727 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2728 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2729 -C "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002730 -S "(after renegotiation) Use of Connection ID has been negotiated" \
2731 -c "ignoring unexpected CID" \
2732 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002733
Hanno Beckera0e20d02019-05-15 14:03:01 +01002734requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002735requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2736run_test "Connection ID: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002737 "$P_SRV debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
2738 "$P_CLI debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
2739 0 \
2740 -S "(initial handshake) Use of Connection ID has been negotiated" \
2741 -C "(initial handshake) Use of Connection ID has been negotiated" \
2742 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2743 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2744 -c "(after renegotiation) Use of Connection ID has been negotiated" \
2745 -s "(after renegotiation) Use of Connection ID has been negotiated"
2746
Hanno Beckera0e20d02019-05-15 14:03:01 +01002747requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002748requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01002749run_test "Connection ID, no packing: Cli+Srv enabled, CID on renegotiation" \
2750 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
2751 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
2752 0 \
2753 -S "(initial handshake) Use of Connection ID has been negotiated" \
2754 -C "(initial handshake) Use of Connection ID has been negotiated" \
2755 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2756 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2757 -c "(after renegotiation) Use of Connection ID has been negotiated" \
2758 -s "(after renegotiation) Use of Connection ID has been negotiated"
2759
Hanno Beckera0e20d02019-05-15 14:03:01 +01002760requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01002761requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002762run_test "Connection ID, 3D+MTU: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002763 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002764 "$P_SRV debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
2765 "$P_CLI debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
2766 0 \
2767 -S "(initial handshake) Use of Connection ID has been negotiated" \
2768 -C "(initial handshake) Use of Connection ID has been negotiated" \
2769 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2770 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2771 -c "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002772 -s "(after renegotiation) Use of Connection ID has been negotiated" \
2773 -c "ignoring unexpected CID" \
2774 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002775
Hanno Beckera0e20d02019-05-15 14:03:01 +01002776requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002777requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2778run_test "Connection ID: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002779 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
2780 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2781 0 \
2782 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2783 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2784 -s "(initial handshake) Use of Connection ID has been negotiated" \
2785 -c "(initial handshake) Use of Connection ID has been negotiated" \
2786 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2787 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2788 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2789 -S "(after renegotiation) Use of Connection ID has been negotiated" \
2790 -s "(after renegotiation) Use of Connection ID was not offered by client"
2791
Hanno Beckera0e20d02019-05-15 14:03:01 +01002792requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002793requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01002794run_test "Connection ID, 3D: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002795 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01002796 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
2797 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
2798 0 \
2799 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2800 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2801 -s "(initial handshake) Use of Connection ID has been negotiated" \
2802 -c "(initial handshake) Use of Connection ID has been negotiated" \
2803 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2804 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2805 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2806 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002807 -s "(after renegotiation) Use of Connection ID was not offered by client" \
2808 -c "ignoring unexpected CID" \
2809 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01002810
Hanno Beckera0e20d02019-05-15 14:03:01 +01002811requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002812requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2813run_test "Connection ID: Cli+Srv enabled, Srv disables on renegotiation" \
2814 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2815 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
2816 0 \
2817 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2818 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2819 -s "(initial handshake) Use of Connection ID has been negotiated" \
2820 -c "(initial handshake) Use of Connection ID has been negotiated" \
2821 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2822 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2823 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2824 -S "(after renegotiation) Use of Connection ID has been negotiated" \
2825 -c "(after renegotiation) Use of Connection ID was rejected by the server"
2826
Hanno Beckera0e20d02019-05-15 14:03:01 +01002827requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002828requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
2829run_test "Connection ID, 3D: Cli+Srv enabled, Srv disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002830 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01002831 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
2832 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
2833 0 \
2834 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2835 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2836 -s "(initial handshake) Use of Connection ID has been negotiated" \
2837 -c "(initial handshake) Use of Connection ID has been negotiated" \
2838 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
2839 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
2840 -C "(after renegotiation) Use of Connection ID has been negotiated" \
2841 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01002842 -c "(after renegotiation) Use of Connection ID was rejected by the server" \
2843 -c "ignoring unexpected CID" \
2844 -s "ignoring unexpected CID"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002845
Yuto Takano71879532021-07-09 11:32:38 +01002846# This and the test below it require MAX_CONTENT_LEN to be at least MFL+1, because the
2847# tests check that the buffer contents are reallocated when the message is
2848# larger than the buffer.
Andrzej Kurekb6577832020-06-08 07:08:03 -04002849requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2850requires_config_enabled MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Yuto Takano71879532021-07-09 11:32:38 +01002851requires_max_content_len 513
Andrzej Kurekb6577832020-06-08 07:08:03 -04002852run_test "Connection ID: Cli+Srv enabled, variable buffer lengths, MFL=512" \
2853 "$P_SRV dtls=1 cid=1 cid_val=dead debug_level=2" \
2854 "$P_CLI force_ciphersuite="TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" max_frag_len=512 dtls=1 cid=1 cid_val=beef" \
2855 0 \
2856 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2857 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2858 -s "(initial handshake) Use of Connection ID has been negotiated" \
2859 -c "(initial handshake) Use of Connection ID has been negotiated" \
2860 -s "Reallocating in_buf" \
2861 -s "Reallocating out_buf"
2862
2863requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2864requires_config_enabled MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Yuto Takano71879532021-07-09 11:32:38 +01002865requires_max_content_len 1025
Andrzej Kurekb6577832020-06-08 07:08:03 -04002866run_test "Connection ID: Cli+Srv enabled, variable buffer lengths, MFL=1024" \
2867 "$P_SRV dtls=1 cid=1 cid_val=dead debug_level=2" \
2868 "$P_CLI force_ciphersuite="TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" max_frag_len=1024 dtls=1 cid=1 cid_val=beef" \
2869 0 \
2870 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
2871 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
2872 -s "(initial handshake) Use of Connection ID has been negotiated" \
2873 -c "(initial handshake) Use of Connection ID has been negotiated" \
2874 -s "Reallocating in_buf" \
2875 -s "Reallocating out_buf"
2876
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002877# Tests for Encrypt-then-MAC extension
2878
2879run_test "Encrypt then MAC: default" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002880 "$P_SRV debug_level=3 \
2881 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002882 "$P_CLI debug_level=3" \
2883 0 \
2884 -c "client hello, adding encrypt_then_mac extension" \
2885 -s "found encrypt then mac extension" \
2886 -s "server hello, adding encrypt then mac extension" \
2887 -c "found encrypt_then_mac extension" \
2888 -c "using encrypt then mac" \
2889 -s "using encrypt then mac"
2890
2891run_test "Encrypt then MAC: client enabled, server disabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002892 "$P_SRV debug_level=3 etm=0 \
2893 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002894 "$P_CLI debug_level=3 etm=1" \
2895 0 \
2896 -c "client hello, adding encrypt_then_mac extension" \
2897 -s "found encrypt then mac extension" \
2898 -S "server hello, adding encrypt then mac extension" \
2899 -C "found encrypt_then_mac extension" \
2900 -C "using encrypt then mac" \
2901 -S "using encrypt then mac"
2902
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01002903run_test "Encrypt then MAC: client enabled, aead cipher" \
2904 "$P_SRV debug_level=3 etm=1 \
2905 force_ciphersuite=TLS-RSA-WITH-AES-128-GCM-SHA256" \
2906 "$P_CLI debug_level=3 etm=1" \
2907 0 \
2908 -c "client hello, adding encrypt_then_mac extension" \
2909 -s "found encrypt then mac extension" \
2910 -S "server hello, adding encrypt then mac extension" \
2911 -C "found encrypt_then_mac extension" \
2912 -C "using encrypt then mac" \
2913 -S "using encrypt then mac"
2914
2915run_test "Encrypt then MAC: client enabled, stream cipher" \
2916 "$P_SRV debug_level=3 etm=1 \
2917 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01002918 "$P_CLI debug_level=3 etm=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01002919 0 \
2920 -c "client hello, adding encrypt_then_mac extension" \
2921 -s "found encrypt then mac extension" \
2922 -S "server hello, adding encrypt then mac extension" \
2923 -C "found encrypt_then_mac extension" \
2924 -C "using encrypt then mac" \
2925 -S "using encrypt then mac"
2926
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002927run_test "Encrypt then MAC: client disabled, server enabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002928 "$P_SRV debug_level=3 etm=1 \
2929 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002930 "$P_CLI debug_level=3 etm=0" \
2931 0 \
2932 -C "client hello, adding encrypt_then_mac extension" \
2933 -S "found encrypt then mac extension" \
2934 -S "server hello, adding encrypt then mac extension" \
2935 -C "found encrypt_then_mac extension" \
2936 -C "using encrypt then mac" \
2937 -S "using encrypt then mac"
2938
2939run_test "Encrypt then MAC: client SSLv3, server enabled" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002940 "$P_SRV debug_level=3 min_version=ssl3 \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002941 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002942 "$P_CLI debug_level=3 force_version=ssl3" \
2943 0 \
2944 -C "client hello, adding encrypt_then_mac extension" \
2945 -S "found encrypt then mac extension" \
2946 -S "server hello, adding encrypt then mac extension" \
2947 -C "found encrypt_then_mac extension" \
2948 -C "using encrypt then mac" \
2949 -S "using encrypt then mac"
2950
2951run_test "Encrypt then MAC: client enabled, server SSLv3" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002952 "$P_SRV debug_level=3 force_version=ssl3 \
2953 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002954 "$P_CLI debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002955 0 \
2956 -c "client hello, adding encrypt_then_mac extension" \
Janos Follath00efff72016-05-06 13:48:23 +01002957 -S "found encrypt then mac extension" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002958 -S "server hello, adding encrypt then mac extension" \
2959 -C "found encrypt_then_mac extension" \
2960 -C "using encrypt then mac" \
2961 -S "using encrypt then mac"
2962
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002963# Tests for Extended Master Secret extension
2964
Gilles Peskine111fde42022-02-25 19:51:52 +01002965requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002966run_test "Extended Master Secret: default" \
2967 "$P_SRV debug_level=3" \
2968 "$P_CLI debug_level=3" \
2969 0 \
2970 -c "client hello, adding extended_master_secret extension" \
2971 -s "found extended master secret extension" \
2972 -s "server hello, adding extended master secret extension" \
2973 -c "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002974 -c "session hash for extended master secret" \
2975 -s "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002976
Gilles Peskine111fde42022-02-25 19:51:52 +01002977requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002978run_test "Extended Master Secret: client enabled, server disabled" \
2979 "$P_SRV debug_level=3 extended_ms=0" \
2980 "$P_CLI debug_level=3 extended_ms=1" \
2981 0 \
2982 -c "client hello, adding extended_master_secret extension" \
2983 -s "found extended master secret extension" \
2984 -S "server hello, adding extended master secret extension" \
2985 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002986 -C "session hash for extended master secret" \
2987 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002988
Gilles Peskine111fde42022-02-25 19:51:52 +01002989requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002990run_test "Extended Master Secret: client disabled, server enabled" \
2991 "$P_SRV debug_level=3 extended_ms=1" \
2992 "$P_CLI debug_level=3 extended_ms=0" \
2993 0 \
2994 -C "client hello, adding extended_master_secret extension" \
2995 -S "found extended master secret extension" \
2996 -S "server hello, adding extended master secret extension" \
2997 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002998 -C "session hash for extended master secret" \
2999 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003000
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003001run_test "Extended Master Secret: client SSLv3, server enabled" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01003002 "$P_SRV debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003003 "$P_CLI debug_level=3 force_version=ssl3" \
3004 0 \
3005 -C "client hello, adding extended_master_secret extension" \
3006 -S "found extended master secret extension" \
3007 -S "server hello, adding extended master secret extension" \
3008 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003009 -C "session hash for extended master secret" \
3010 -S "session hash for extended master secret"
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003011
3012run_test "Extended Master Secret: client enabled, server SSLv3" \
3013 "$P_SRV debug_level=3 force_version=ssl3" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01003014 "$P_CLI debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003015 0 \
3016 -c "client hello, adding extended_master_secret extension" \
Janos Follath00efff72016-05-06 13:48:23 +01003017 -S "found extended master secret extension" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003018 -S "server hello, adding extended master secret extension" \
3019 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003020 -C "session hash for extended master secret" \
3021 -S "session hash for extended master secret"
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02003022
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003023# Tests for FALLBACK_SCSV
3024
3025run_test "Fallback SCSV: default" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003026 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003027 "$P_CLI debug_level=3 force_version=tls1_1" \
3028 0 \
3029 -C "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003030 -S "received FALLBACK_SCSV" \
3031 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003032 -C "is a fatal alert message (msg 86)"
3033
3034run_test "Fallback SCSV: explicitly disabled" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003035 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003036 "$P_CLI debug_level=3 force_version=tls1_1 fallback=0" \
3037 0 \
3038 -C "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003039 -S "received FALLBACK_SCSV" \
3040 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003041 -C "is a fatal alert message (msg 86)"
3042
3043run_test "Fallback SCSV: enabled" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003044 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003045 "$P_CLI debug_level=3 force_version=tls1_1 fallback=1" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003046 1 \
3047 -c "adding FALLBACK_SCSV" \
3048 -s "received FALLBACK_SCSV" \
3049 -s "inapropriate fallback" \
3050 -c "is a fatal alert message (msg 86)"
3051
3052run_test "Fallback SCSV: enabled, max version" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003053 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003054 "$P_CLI debug_level=3 fallback=1" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003055 0 \
3056 -c "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003057 -s "received FALLBACK_SCSV" \
3058 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02003059 -C "is a fatal alert message (msg 86)"
3060
3061requires_openssl_with_fallback_scsv
3062run_test "Fallback SCSV: default, openssl server" \
3063 "$O_SRV" \
3064 "$P_CLI debug_level=3 force_version=tls1_1 fallback=0" \
3065 0 \
3066 -C "adding FALLBACK_SCSV" \
3067 -C "is a fatal alert message (msg 86)"
3068
3069requires_openssl_with_fallback_scsv
3070run_test "Fallback SCSV: enabled, openssl server" \
3071 "$O_SRV" \
3072 "$P_CLI debug_level=3 force_version=tls1_1 fallback=1" \
3073 1 \
3074 -c "adding FALLBACK_SCSV" \
3075 -c "is a fatal alert message (msg 86)"
3076
Gilles Peskineadd21ad2022-04-15 15:14:58 +02003077requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003078requires_openssl_with_fallback_scsv
3079run_test "Fallback SCSV: disabled, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003080 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003081 "$O_CLI -tls1_1" \
3082 0 \
3083 -S "received FALLBACK_SCSV" \
3084 -S "inapropriate fallback"
3085
Gilles Peskineadd21ad2022-04-15 15:14:58 +02003086requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003087requires_openssl_with_fallback_scsv
3088run_test "Fallback SCSV: enabled, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003089 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003090 "$O_CLI -tls1_1 -fallback_scsv" \
3091 1 \
3092 -s "received FALLBACK_SCSV" \
3093 -s "inapropriate fallback"
3094
3095requires_openssl_with_fallback_scsv
3096run_test "Fallback SCSV: enabled, max version, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02003097 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02003098 "$O_CLI -fallback_scsv" \
3099 0 \
3100 -s "received FALLBACK_SCSV" \
3101 -S "inapropriate fallback"
3102
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003103# Test sending and receiving empty application data records
3104
3105run_test "Encrypt then MAC: empty application data record" \
3106 "$P_SRV auth_mode=none debug_level=4 etm=1" \
3107 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA" \
3108 0 \
3109 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
3110 -s "dumping 'input payload after decrypt' (0 bytes)" \
3111 -c "0 bytes written in 1 fragments"
3112
Manuel Pégourié-Gonnard9e2c80f2020-03-24 10:53:39 +01003113run_test "Encrypt then MAC: disabled, empty application data record" \
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003114 "$P_SRV auth_mode=none debug_level=4 etm=0" \
3115 "$P_CLI auth_mode=none etm=0 request_size=0" \
3116 0 \
3117 -s "dumping 'input payload after decrypt' (0 bytes)" \
3118 -c "0 bytes written in 1 fragments"
3119
3120run_test "Encrypt then MAC, DTLS: empty application data record" \
3121 "$P_SRV auth_mode=none debug_level=4 etm=1 dtls=1" \
3122 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA dtls=1" \
3123 0 \
3124 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
3125 -s "dumping 'input payload after decrypt' (0 bytes)" \
3126 -c "0 bytes written in 1 fragments"
3127
Manuel Pégourié-Gonnard9e2c80f2020-03-24 10:53:39 +01003128run_test "Encrypt then MAC, DTLS: disabled, empty application data record" \
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003129 "$P_SRV auth_mode=none debug_level=4 etm=0 dtls=1" \
3130 "$P_CLI auth_mode=none etm=0 request_size=0 dtls=1" \
3131 0 \
3132 -s "dumping 'input payload after decrypt' (0 bytes)" \
3133 -c "0 bytes written in 1 fragments"
3134
Gilles Peskined50177f2017-05-16 17:53:03 +02003135## ClientHello generated with
3136## "openssl s_client -CAfile tests/data_files/test-ca.crt -tls1_1 -connect localhost:4433 -cipher ..."
3137## then manually twiddling the ciphersuite list.
3138## The ClientHello content is spelled out below as a hex string as
3139## "prefix ciphersuite1 ciphersuite2 ciphersuite3 ciphersuite4 suffix".
3140## The expected response is an inappropriate_fallback alert.
Gilles Peskinebba3b4c2022-04-09 00:08:47 +02003141requires_config_enabled MBEDTLS_SSL_FALLBACK_SCSV
Gilles Peskined50177f2017-05-16 17:53:03 +02003142run_test "Fallback SCSV: beginning of list" \
3143 "$P_SRV debug_level=2" \
3144 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 5600 0031 0032 0033 0100000900230000000f000101' '15030200020256'" \
3145 0 \
3146 -s "received FALLBACK_SCSV" \
3147 -s "inapropriate fallback"
3148
Gilles Peskinebba3b4c2022-04-09 00:08:47 +02003149requires_config_enabled MBEDTLS_SSL_FALLBACK_SCSV
Gilles Peskined50177f2017-05-16 17:53:03 +02003150run_test "Fallback SCSV: end of list" \
3151 "$P_SRV debug_level=2" \
3152 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0031 0032 0033 5600 0100000900230000000f000101' '15030200020256'" \
3153 0 \
3154 -s "received FALLBACK_SCSV" \
3155 -s "inapropriate fallback"
3156
3157## Here the expected response is a valid ServerHello prefix, up to the random.
Gilles Peskinebba3b4c2022-04-09 00:08:47 +02003158requires_config_enabled MBEDTLS_SSL_FALLBACK_SCSV
Gilles Peskined50177f2017-05-16 17:53:03 +02003159run_test "Fallback SCSV: not in list" \
3160 "$P_SRV debug_level=2" \
3161 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0056 0031 0032 0033 0100000900230000000f000101' '16030200300200002c0302'" \
3162 0 \
3163 -S "received FALLBACK_SCSV" \
3164 -S "inapropriate fallback"
3165
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003166# Tests for CBC 1/n-1 record splitting
3167
3168run_test "CBC Record splitting: TLS 1.2, no splitting" \
3169 "$P_SRV" \
3170 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
Xiaofei Baif40545d2021-12-02 08:43:35 +00003171 request_size=123 force_version=tls12" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003172 0 \
3173 -s "Read from client: 123 bytes read" \
3174 -S "Read from client: 1 bytes read" \
3175 -S "122 bytes read"
3176
3177run_test "CBC Record splitting: TLS 1.1, no splitting" \
3178 "$P_SRV" \
3179 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3180 request_size=123 force_version=tls1_1" \
3181 0 \
3182 -s "Read from client: 123 bytes read" \
3183 -S "Read from client: 1 bytes read" \
3184 -S "122 bytes read"
3185
3186run_test "CBC Record splitting: TLS 1.0, splitting" \
3187 "$P_SRV" \
3188 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3189 request_size=123 force_version=tls1" \
3190 0 \
3191 -S "Read from client: 123 bytes read" \
3192 -s "Read from client: 1 bytes read" \
3193 -s "122 bytes read"
3194
3195run_test "CBC Record splitting: SSLv3, splitting" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01003196 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003197 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3198 request_size=123 force_version=ssl3" \
3199 0 \
3200 -S "Read from client: 123 bytes read" \
3201 -s "Read from client: 1 bytes read" \
3202 -s "122 bytes read"
3203
3204run_test "CBC Record splitting: TLS 1.0 RC4, no splitting" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01003205 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003206 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
3207 request_size=123 force_version=tls1" \
3208 0 \
3209 -s "Read from client: 123 bytes read" \
3210 -S "Read from client: 1 bytes read" \
3211 -S "122 bytes read"
3212
3213run_test "CBC Record splitting: TLS 1.0, splitting disabled" \
3214 "$P_SRV" \
3215 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3216 request_size=123 force_version=tls1 recsplit=0" \
3217 0 \
3218 -s "Read from client: 123 bytes read" \
3219 -S "Read from client: 1 bytes read" \
3220 -S "122 bytes read"
3221
Manuel Pégourié-Gonnarda852cf42015-01-13 20:56:15 +01003222run_test "CBC Record splitting: TLS 1.0, splitting, nbio" \
3223 "$P_SRV nbio=2" \
3224 "$P_CLI nbio=2 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
3225 request_size=123 force_version=tls1" \
3226 0 \
3227 -S "Read from client: 123 bytes read" \
3228 -s "Read from client: 1 bytes read" \
3229 -s "122 bytes read"
3230
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003231# Tests for Session Tickets
3232
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003233run_test "Session resume using tickets: basic" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003234 "$P_SRV debug_level=3 tickets=1" \
3235 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003236 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003237 -c "client hello, adding session ticket extension" \
3238 -s "found session ticket extension" \
3239 -s "server hello, adding session ticket extension" \
3240 -c "found session_ticket extension" \
3241 -c "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003242 -S "session successfully restored from cache" \
3243 -s "session successfully restored from ticket" \
3244 -s "a session has been resumed" \
3245 -c "a session has been resumed"
3246
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003247run_test "Session resume using tickets: cache disabled" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003248 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
3249 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01003250 0 \
3251 -c "client hello, adding session ticket extension" \
3252 -s "found session ticket extension" \
3253 -s "server hello, adding session ticket extension" \
3254 -c "found session_ticket extension" \
3255 -c "parse new session ticket" \
3256 -S "session successfully restored from cache" \
3257 -s "session successfully restored from ticket" \
3258 -s "a session has been resumed" \
3259 -c "a session has been resumed"
3260
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003261run_test "Session resume using tickets: timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003262 "$P_SRV debug_level=3 tickets=1 cache_max=0 ticket_timeout=1" \
3263 "$P_CLI debug_level=3 tickets=1 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01003264 0 \
3265 -c "client hello, adding session ticket extension" \
3266 -s "found session ticket extension" \
3267 -s "server hello, adding session ticket extension" \
3268 -c "found session_ticket extension" \
3269 -c "parse new session ticket" \
3270 -S "session successfully restored from cache" \
3271 -S "session successfully restored from ticket" \
3272 -S "a session has been resumed" \
3273 -C "a session has been resumed"
3274
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003275run_test "Session resume using tickets: session copy" \
3276 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
3277 "$P_CLI debug_level=3 tickets=1 reconnect=1 reco_mode=0" \
3278 0 \
3279 -c "client hello, adding session ticket extension" \
3280 -s "found session ticket extension" \
3281 -s "server hello, adding session ticket extension" \
3282 -c "found session_ticket extension" \
3283 -c "parse new session ticket" \
3284 -S "session successfully restored from cache" \
3285 -s "session successfully restored from ticket" \
3286 -s "a session has been resumed" \
3287 -c "a session has been resumed"
3288
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003289run_test "Session resume using tickets: openssl server" \
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01003290 "$O_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003291 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01003292 0 \
3293 -c "client hello, adding session ticket extension" \
3294 -c "found session_ticket extension" \
3295 -c "parse new session ticket" \
3296 -c "a session has been resumed"
3297
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003298run_test "Session resume using tickets: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003299 "$P_SRV debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02003300 "( $O_CLI -sess_out $SESSION; \
3301 $O_CLI -sess_in $SESSION; \
3302 rm -f $SESSION )" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01003303 0 \
3304 -s "found session ticket extension" \
3305 -s "server hello, adding session ticket extension" \
3306 -S "session successfully restored from cache" \
3307 -s "session successfully restored from ticket" \
3308 -s "a session has been resumed"
3309
Hanno Becker1d739932018-08-21 13:55:22 +01003310# Tests for Session Tickets with DTLS
3311
3312run_test "Session resume using tickets, DTLS: basic" \
3313 "$P_SRV debug_level=3 dtls=1 tickets=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003314 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003315 0 \
3316 -c "client hello, adding session ticket extension" \
3317 -s "found session ticket extension" \
3318 -s "server hello, adding session ticket extension" \
3319 -c "found session_ticket extension" \
3320 -c "parse new session ticket" \
3321 -S "session successfully restored from cache" \
3322 -s "session successfully restored from ticket" \
3323 -s "a session has been resumed" \
3324 -c "a session has been resumed"
3325
3326run_test "Session resume using tickets, DTLS: cache disabled" \
3327 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003328 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003329 0 \
3330 -c "client hello, adding session ticket extension" \
3331 -s "found session ticket extension" \
3332 -s "server hello, adding session ticket extension" \
3333 -c "found session_ticket extension" \
3334 -c "parse new session ticket" \
3335 -S "session successfully restored from cache" \
3336 -s "session successfully restored from ticket" \
3337 -s "a session has been resumed" \
3338 -c "a session has been resumed"
3339
3340run_test "Session resume using tickets, DTLS: timeout" \
3341 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0 ticket_timeout=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003342 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1 reco_delay=2" \
Hanno Becker1d739932018-08-21 13:55:22 +01003343 0 \
3344 -c "client hello, adding session ticket extension" \
3345 -s "found session ticket extension" \
3346 -s "server hello, adding session ticket extension" \
3347 -c "found session_ticket extension" \
3348 -c "parse new session ticket" \
3349 -S "session successfully restored from cache" \
3350 -S "session successfully restored from ticket" \
3351 -S "a session has been resumed" \
3352 -C "a session has been resumed"
3353
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003354run_test "Session resume using tickets, DTLS: session copy" \
3355 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003356 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003357 0 \
3358 -c "client hello, adding session ticket extension" \
3359 -s "found session ticket extension" \
3360 -s "server hello, adding session ticket extension" \
3361 -c "found session_ticket extension" \
3362 -c "parse new session ticket" \
3363 -S "session successfully restored from cache" \
3364 -s "session successfully restored from ticket" \
3365 -s "a session has been resumed" \
3366 -c "a session has been resumed"
3367
Hanno Becker1d739932018-08-21 13:55:22 +01003368run_test "Session resume using tickets, DTLS: openssl server" \
3369 "$O_SRV -dtls1" \
3370 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1" \
3371 0 \
3372 -c "client hello, adding session ticket extension" \
3373 -c "found session_ticket extension" \
3374 -c "parse new session ticket" \
3375 -c "a session has been resumed"
3376
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003377# For reasons that aren't fully understood, this test randomly fails with high
Paul Elliott7ca2f392021-10-13 16:13:44 +01003378# probability with OpenSSL 1.0.2g on the CI, see #5012.
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003379requires_openssl_next
Hanno Becker1d739932018-08-21 13:55:22 +01003380run_test "Session resume using tickets, DTLS: openssl client" \
3381 "$P_SRV dtls=1 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003382 "( $O_NEXT_CLI -dtls1 -sess_out $SESSION; \
3383 $O_NEXT_CLI -dtls1 -sess_in $SESSION; \
Hanno Becker1d739932018-08-21 13:55:22 +01003384 rm -f $SESSION )" \
3385 0 \
3386 -s "found session ticket extension" \
3387 -s "server hello, adding session ticket extension" \
3388 -S "session successfully restored from cache" \
3389 -s "session successfully restored from ticket" \
3390 -s "a session has been resumed"
3391
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003392# Tests for Session Resume based on session-ID and cache
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003393
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003394run_test "Session resume using cache: tickets enabled on client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003395 "$P_SRV debug_level=3 tickets=0" \
3396 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003397 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003398 -c "client hello, adding session ticket extension" \
3399 -s "found session ticket extension" \
3400 -S "server hello, adding session ticket extension" \
3401 -C "found session_ticket extension" \
3402 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003403 -s "session successfully restored from cache" \
3404 -S "session successfully restored from ticket" \
3405 -s "a session has been resumed" \
3406 -c "a session has been resumed"
3407
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003408run_test "Session resume using cache: tickets enabled on server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003409 "$P_SRV debug_level=3 tickets=1" \
3410 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003411 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003412 -C "client hello, adding session ticket extension" \
3413 -S "found session ticket extension" \
3414 -S "server hello, adding session ticket extension" \
3415 -C "found session_ticket extension" \
3416 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003417 -s "session successfully restored from cache" \
3418 -S "session successfully restored from ticket" \
3419 -s "a session has been resumed" \
3420 -c "a session has been resumed"
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003421
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003422run_test "Session resume using cache: cache_max=0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003423 "$P_SRV debug_level=3 tickets=0 cache_max=0" \
3424 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01003425 0 \
3426 -S "session successfully restored from cache" \
3427 -S "session successfully restored from ticket" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003428 -S "a session has been resumed" \
3429 -C "a session has been resumed"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01003430
Gilles Peskine111fde42022-02-25 19:51:52 +01003431requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003432run_test "Session resume using cache: cache_max=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003433 "$P_SRV debug_level=3 tickets=0 cache_max=1" \
3434 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003435 0 \
3436 -s "session successfully restored from cache" \
3437 -S "session successfully restored from ticket" \
3438 -s "a session has been resumed" \
3439 -c "a session has been resumed"
3440
Gilles Peskine111fde42022-02-25 19:51:52 +01003441requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard6df31962015-05-04 10:55:47 +02003442run_test "Session resume using cache: timeout > delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003443 "$P_SRV debug_level=3 tickets=0" \
3444 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=0" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003445 0 \
3446 -s "session successfully restored from cache" \
3447 -S "session successfully restored from ticket" \
3448 -s "a session has been resumed" \
3449 -c "a session has been resumed"
3450
Gilles Peskine111fde42022-02-25 19:51:52 +01003451requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003452run_test "Session resume using cache: timeout < delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003453 "$P_SRV debug_level=3 tickets=0 cache_timeout=1" \
3454 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003455 0 \
3456 -S "session successfully restored from cache" \
3457 -S "session successfully restored from ticket" \
3458 -S "a session has been resumed" \
3459 -C "a session has been resumed"
3460
Gilles Peskine111fde42022-02-25 19:51:52 +01003461requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003462run_test "Session resume using cache: no timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003463 "$P_SRV debug_level=3 tickets=0 cache_timeout=0" \
3464 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01003465 0 \
3466 -s "session successfully restored from cache" \
3467 -S "session successfully restored from ticket" \
3468 -s "a session has been resumed" \
3469 -c "a session has been resumed"
3470
Gilles Peskine111fde42022-02-25 19:51:52 +01003471requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003472run_test "Session resume using cache: session copy" \
3473 "$P_SRV debug_level=3 tickets=0" \
3474 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_mode=0" \
3475 0 \
3476 -s "session successfully restored from cache" \
3477 -S "session successfully restored from ticket" \
3478 -s "a session has been resumed" \
3479 -c "a session has been resumed"
3480
Gilles Peskine111fde42022-02-25 19:51:52 +01003481requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003482run_test "Session resume using cache: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003483 "$P_SRV debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02003484 "( $O_CLI -sess_out $SESSION; \
3485 $O_CLI -sess_in $SESSION; \
3486 rm -f $SESSION )" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01003487 0 \
3488 -s "found session ticket extension" \
3489 -S "server hello, adding session ticket extension" \
3490 -s "session successfully restored from cache" \
3491 -S "session successfully restored from ticket" \
3492 -s "a session has been resumed"
3493
Gilles Peskine111fde42022-02-25 19:51:52 +01003494requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003495run_test "Session resume using cache: openssl server" \
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01003496 "$O_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003497 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01003498 0 \
3499 -C "found session_ticket extension" \
3500 -C "parse new session ticket" \
3501 -c "a session has been resumed"
3502
Hanno Becker1d739932018-08-21 13:55:22 +01003503# Tests for Session Resume based on session-ID and cache, DTLS
3504
Gilles Peskine111fde42022-02-25 19:51:52 +01003505requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003506run_test "Session resume using cache, DTLS: tickets enabled on client" \
3507 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003508 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003509 0 \
3510 -c "client hello, adding session ticket extension" \
3511 -s "found session ticket extension" \
3512 -S "server hello, adding session ticket extension" \
3513 -C "found session_ticket extension" \
3514 -C "parse new session ticket" \
3515 -s "session successfully restored from cache" \
3516 -S "session successfully restored from ticket" \
3517 -s "a session has been resumed" \
3518 -c "a session has been resumed"
3519
Gilles Peskine111fde42022-02-25 19:51:52 +01003520requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003521run_test "Session resume using cache, DTLS: tickets enabled on server" \
3522 "$P_SRV dtls=1 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003523 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003524 0 \
3525 -C "client hello, adding session ticket extension" \
3526 -S "found session ticket extension" \
3527 -S "server hello, adding session ticket extension" \
3528 -C "found session_ticket extension" \
3529 -C "parse new session ticket" \
3530 -s "session successfully restored from cache" \
3531 -S "session successfully restored from ticket" \
3532 -s "a session has been resumed" \
3533 -c "a session has been resumed"
3534
Gilles Peskine111fde42022-02-25 19:51:52 +01003535requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003536run_test "Session resume using cache, DTLS: cache_max=0" \
3537 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003538 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003539 0 \
3540 -S "session successfully restored from cache" \
3541 -S "session successfully restored from ticket" \
3542 -S "a session has been resumed" \
3543 -C "a session has been resumed"
3544
Gilles Peskine111fde42022-02-25 19:51:52 +01003545requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003546run_test "Session resume using cache, DTLS: cache_max=1" \
3547 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003548 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01003549 0 \
3550 -s "session successfully restored from cache" \
3551 -S "session successfully restored from ticket" \
3552 -s "a session has been resumed" \
3553 -c "a session has been resumed"
3554
Gilles Peskine111fde42022-02-25 19:51:52 +01003555requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003556run_test "Session resume using cache, DTLS: timeout > delay" \
3557 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003558 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=0" \
Hanno Becker1d739932018-08-21 13:55:22 +01003559 0 \
3560 -s "session successfully restored from cache" \
3561 -S "session successfully restored from ticket" \
3562 -s "a session has been resumed" \
3563 -c "a session has been resumed"
3564
Gilles Peskine111fde42022-02-25 19:51:52 +01003565requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003566run_test "Session resume using cache, DTLS: timeout < delay" \
3567 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003568 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=2" \
Hanno Becker1d739932018-08-21 13:55:22 +01003569 0 \
3570 -S "session successfully restored from cache" \
3571 -S "session successfully restored from ticket" \
3572 -S "a session has been resumed" \
3573 -C "a session has been resumed"
3574
Gilles Peskine111fde42022-02-25 19:51:52 +01003575requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003576run_test "Session resume using cache, DTLS: no timeout" \
3577 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003578 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=2" \
Hanno Becker1d739932018-08-21 13:55:22 +01003579 0 \
3580 -s "session successfully restored from cache" \
3581 -S "session successfully restored from ticket" \
3582 -s "a session has been resumed" \
3583 -c "a session has been resumed"
3584
Gilles Peskine111fde42022-02-25 19:51:52 +01003585requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003586run_test "Session resume using cache, DTLS: session copy" \
3587 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01003588 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003589 0 \
3590 -s "session successfully restored from cache" \
3591 -S "session successfully restored from ticket" \
3592 -s "a session has been resumed" \
3593 -c "a session has been resumed"
3594
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003595# For reasons that aren't fully understood, this test randomly fails with high
Paul Elliott7ca2f392021-10-13 16:13:44 +01003596# probability with OpenSSL 1.0.2g on the CI, see #5012.
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003597requires_openssl_next
Gilles Peskine111fde42022-02-25 19:51:52 +01003598requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003599run_test "Session resume using cache, DTLS: openssl client" \
3600 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardd76c47d2021-10-13 13:12:47 +02003601 "( $O_NEXT_CLI -dtls1 -sess_out $SESSION; \
3602 $O_NEXT_CLI -dtls1 -sess_in $SESSION; \
Hanno Becker1d739932018-08-21 13:55:22 +01003603 rm -f $SESSION )" \
3604 0 \
3605 -s "found session ticket extension" \
3606 -S "server hello, adding session ticket extension" \
3607 -s "session successfully restored from cache" \
3608 -S "session successfully restored from ticket" \
3609 -s "a session has been resumed"
3610
Gilles Peskine111fde42022-02-25 19:51:52 +01003611requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01003612run_test "Session resume using cache, DTLS: openssl server" \
3613 "$O_SRV -dtls1" \
3614 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
3615 0 \
3616 -C "found session_ticket extension" \
3617 -C "parse new session ticket" \
3618 -c "a session has been resumed"
3619
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003620# Tests for Max Fragment Length extension
3621
Hanno Becker4aed27e2017-09-18 15:00:34 +01003622requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Hanno Beckerc5266962017-09-18 15:01:50 +01003623run_test "Max fragment length: enabled, default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003624 "$P_SRV debug_level=3" \
3625 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003626 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003627 -c "Maximum input fragment length is $MAX_CONTENT_LEN" \
3628 -c "Maximum output fragment length is $MAX_CONTENT_LEN" \
3629 -s "Maximum input fragment length is $MAX_CONTENT_LEN" \
3630 -s "Maximum output fragment length is $MAX_CONTENT_LEN" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003631 -C "client hello, adding max_fragment_length extension" \
3632 -S "found max fragment length extension" \
3633 -S "server hello, max_fragment_length extension" \
3634 -C "found max_fragment_length extension"
3635
Hanno Becker4aed27e2017-09-18 15:00:34 +01003636requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Hanno Beckerc5266962017-09-18 15:01:50 +01003637run_test "Max fragment length: enabled, default, larger message" \
3638 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003639 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003640 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003641 -c "Maximum input fragment length is $MAX_CONTENT_LEN" \
3642 -c "Maximum output fragment length is $MAX_CONTENT_LEN" \
3643 -s "Maximum input fragment length is $MAX_CONTENT_LEN" \
3644 -s "Maximum output fragment length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003645 -C "client hello, adding max_fragment_length extension" \
3646 -S "found max fragment length extension" \
3647 -S "server hello, max_fragment_length extension" \
3648 -C "found max_fragment_length extension" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003649 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
3650 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01003651 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01003652
3653requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3654run_test "Max fragment length, DTLS: enabled, default, larger message" \
3655 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003656 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003657 1 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003658 -c "Maximum input fragment length is $MAX_CONTENT_LEN" \
3659 -c "Maximum output fragment length is $MAX_CONTENT_LEN" \
3660 -s "Maximum input fragment length is $MAX_CONTENT_LEN" \
3661 -s "Maximum output fragment length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003662 -C "client hello, adding max_fragment_length extension" \
3663 -S "found max fragment length extension" \
3664 -S "server hello, max_fragment_length extension" \
3665 -C "found max_fragment_length extension" \
3666 -c "fragment larger than.*maximum "
3667
Angus Grattonc4dd0732018-04-11 16:28:39 +10003668# Run some tests with MBEDTLS_SSL_MAX_FRAGMENT_LENGTH disabled
3669# (session fragment length will be 16384 regardless of mbedtls
3670# content length configuration.)
3671
Hanno Beckerc5266962017-09-18 15:01:50 +01003672requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3673run_test "Max fragment length: disabled, larger message" \
3674 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003675 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003676 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003677 -C "Maximum input fragment length is 16384" \
3678 -C "Maximum output fragment length is 16384" \
3679 -S "Maximum input fragment length is 16384" \
3680 -S "Maximum output fragment length is 16384" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003681 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
3682 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01003683 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01003684
3685requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takano18ddccc2021-06-21 19:43:33 +01003686run_test "Max fragment length, DTLS: disabled, larger message" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003687 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10003688 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003689 1 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003690 -C "Maximum input fragment length is 16384" \
3691 -C "Maximum output fragment length is 16384" \
3692 -S "Maximum input fragment length is 16384" \
3693 -S "Maximum output fragment length is 16384" \
Hanno Beckerc5266962017-09-18 15:01:50 +01003694 -c "fragment larger than.*maximum "
3695
Yuto Takanobec7cf72021-07-02 10:10:49 +01003696requires_max_content_len 4096
Hanno Beckerc5266962017-09-18 15:01:50 +01003697requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003698run_test "Max fragment length: used by client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003699 "$P_SRV debug_level=3" \
3700 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003701 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003702 -c "Maximum input fragment length is 4096" \
3703 -c "Maximum output fragment length is 4096" \
3704 -s "Maximum input fragment length is 4096" \
3705 -s "Maximum output fragment length is 4096" \
3706 -c "client hello, adding max_fragment_length extension" \
3707 -s "found max fragment length extension" \
3708 -s "server hello, max_fragment_length extension" \
3709 -c "found max_fragment_length extension"
3710
Yuto Takanobec7cf72021-07-02 10:10:49 +01003711requires_max_content_len 1024
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003712requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3713run_test "Max fragment length: client 512, server 1024" \
3714 "$P_SRV debug_level=3 max_frag_len=1024" \
3715 "$P_CLI debug_level=3 max_frag_len=512" \
3716 0 \
3717 -c "Maximum input fragment length is 512" \
3718 -c "Maximum output fragment length is 512" \
3719 -s "Maximum input fragment length is 512" \
3720 -s "Maximum output fragment length is 512" \
3721 -c "client hello, adding max_fragment_length extension" \
3722 -s "found max fragment length extension" \
3723 -s "server hello, max_fragment_length extension" \
3724 -c "found max_fragment_length extension"
3725
Yuto Takanobec7cf72021-07-02 10:10:49 +01003726requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003727requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3728run_test "Max fragment length: client 512, server 2048" \
3729 "$P_SRV debug_level=3 max_frag_len=2048" \
3730 "$P_CLI debug_level=3 max_frag_len=512" \
3731 0 \
3732 -c "Maximum input fragment length is 512" \
3733 -c "Maximum output fragment length is 512" \
3734 -s "Maximum input fragment length is 512" \
3735 -s "Maximum output fragment length is 512" \
3736 -c "client hello, adding max_fragment_length extension" \
3737 -s "found max fragment length extension" \
3738 -s "server hello, max_fragment_length extension" \
3739 -c "found max_fragment_length extension"
3740
Yuto Takanobec7cf72021-07-02 10:10:49 +01003741requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003742requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3743run_test "Max fragment length: client 512, server 4096" \
3744 "$P_SRV debug_level=3 max_frag_len=4096" \
3745 "$P_CLI debug_level=3 max_frag_len=512" \
3746 0 \
3747 -c "Maximum input fragment length is 512" \
3748 -c "Maximum output fragment length is 512" \
3749 -s "Maximum input fragment length is 512" \
3750 -s "Maximum output fragment length is 512" \
3751 -c "client hello, adding max_fragment_length extension" \
3752 -s "found max fragment length extension" \
3753 -s "server hello, max_fragment_length extension" \
3754 -c "found max_fragment_length extension"
3755
Yuto Takanobec7cf72021-07-02 10:10:49 +01003756requires_max_content_len 1024
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003757requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3758run_test "Max fragment length: client 1024, server 512" \
3759 "$P_SRV debug_level=3 max_frag_len=512" \
3760 "$P_CLI debug_level=3 max_frag_len=1024" \
3761 0 \
3762 -c "Maximum input fragment length is 1024" \
3763 -c "Maximum output fragment length is 1024" \
3764 -s "Maximum input fragment length is 1024" \
3765 -s "Maximum output fragment length is 512" \
3766 -c "client hello, adding max_fragment_length extension" \
3767 -s "found max fragment length extension" \
3768 -s "server hello, max_fragment_length extension" \
3769 -c "found max_fragment_length extension"
3770
Yuto Takanobec7cf72021-07-02 10:10:49 +01003771requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003772requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3773run_test "Max fragment length: client 1024, server 2048" \
3774 "$P_SRV debug_level=3 max_frag_len=2048" \
3775 "$P_CLI debug_level=3 max_frag_len=1024" \
3776 0 \
3777 -c "Maximum input fragment length is 1024" \
3778 -c "Maximum output fragment length is 1024" \
3779 -s "Maximum input fragment length is 1024" \
3780 -s "Maximum output fragment length is 1024" \
3781 -c "client hello, adding max_fragment_length extension" \
3782 -s "found max fragment length extension" \
3783 -s "server hello, max_fragment_length extension" \
3784 -c "found max_fragment_length extension"
3785
Yuto Takanobec7cf72021-07-02 10:10:49 +01003786requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003787requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3788run_test "Max fragment length: client 1024, server 4096" \
3789 "$P_SRV debug_level=3 max_frag_len=4096" \
3790 "$P_CLI debug_level=3 max_frag_len=1024" \
3791 0 \
3792 -c "Maximum input fragment length is 1024" \
3793 -c "Maximum output fragment length is 1024" \
3794 -s "Maximum input fragment length is 1024" \
3795 -s "Maximum output fragment length is 1024" \
3796 -c "client hello, adding max_fragment_length extension" \
3797 -s "found max fragment length extension" \
3798 -s "server hello, max_fragment_length extension" \
3799 -c "found max_fragment_length extension"
3800
Yuto Takanobec7cf72021-07-02 10:10:49 +01003801requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003802requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3803run_test "Max fragment length: client 2048, server 512" \
3804 "$P_SRV debug_level=3 max_frag_len=512" \
3805 "$P_CLI debug_level=3 max_frag_len=2048" \
3806 0 \
3807 -c "Maximum input fragment length is 2048" \
3808 -c "Maximum output fragment length is 2048" \
3809 -s "Maximum input fragment length is 2048" \
3810 -s "Maximum output fragment length is 512" \
3811 -c "client hello, adding max_fragment_length extension" \
3812 -s "found max fragment length extension" \
3813 -s "server hello, max_fragment_length extension" \
3814 -c "found max_fragment_length extension"
3815
Yuto Takanobec7cf72021-07-02 10:10:49 +01003816requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003817requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3818run_test "Max fragment length: client 2048, server 1024" \
3819 "$P_SRV debug_level=3 max_frag_len=1024" \
3820 "$P_CLI debug_level=3 max_frag_len=2048" \
3821 0 \
3822 -c "Maximum input fragment length is 2048" \
3823 -c "Maximum output fragment length is 2048" \
3824 -s "Maximum input fragment length is 2048" \
3825 -s "Maximum output fragment length is 1024" \
3826 -c "client hello, adding max_fragment_length extension" \
3827 -s "found max fragment length extension" \
3828 -s "server hello, max_fragment_length extension" \
3829 -c "found max_fragment_length extension"
3830
Yuto Takanobec7cf72021-07-02 10:10:49 +01003831requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003832requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3833run_test "Max fragment length: client 2048, server 4096" \
3834 "$P_SRV debug_level=3 max_frag_len=4096" \
3835 "$P_CLI debug_level=3 max_frag_len=2048" \
3836 0 \
3837 -c "Maximum input fragment length is 2048" \
3838 -c "Maximum output fragment length is 2048" \
3839 -s "Maximum input fragment length is 2048" \
3840 -s "Maximum output fragment length is 2048" \
3841 -c "client hello, adding max_fragment_length extension" \
3842 -s "found max fragment length extension" \
3843 -s "server hello, max_fragment_length extension" \
3844 -c "found max_fragment_length extension"
3845
Yuto Takanobec7cf72021-07-02 10:10:49 +01003846requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003847requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3848run_test "Max fragment length: client 4096, server 512" \
3849 "$P_SRV debug_level=3 max_frag_len=512" \
3850 "$P_CLI debug_level=3 max_frag_len=4096" \
3851 0 \
3852 -c "Maximum input fragment length is 4096" \
3853 -c "Maximum output fragment length is 4096" \
3854 -s "Maximum input fragment length is 4096" \
3855 -s "Maximum output fragment length is 512" \
3856 -c "client hello, adding max_fragment_length extension" \
3857 -s "found max fragment length extension" \
3858 -s "server hello, max_fragment_length extension" \
3859 -c "found max_fragment_length extension"
3860
Yuto Takanobec7cf72021-07-02 10:10:49 +01003861requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003862requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3863run_test "Max fragment length: client 4096, server 1024" \
3864 "$P_SRV debug_level=3 max_frag_len=1024" \
3865 "$P_CLI debug_level=3 max_frag_len=4096" \
3866 0 \
3867 -c "Maximum input fragment length is 4096" \
3868 -c "Maximum output fragment length is 4096" \
3869 -s "Maximum input fragment length is 4096" \
3870 -s "Maximum output fragment length is 1024" \
3871 -c "client hello, adding max_fragment_length extension" \
3872 -s "found max fragment length extension" \
3873 -s "server hello, max_fragment_length extension" \
3874 -c "found max_fragment_length extension"
3875
Yuto Takanobec7cf72021-07-02 10:10:49 +01003876requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003877requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
3878run_test "Max fragment length: client 4096, server 2048" \
3879 "$P_SRV debug_level=3 max_frag_len=2048" \
3880 "$P_CLI debug_level=3 max_frag_len=4096" \
3881 0 \
3882 -c "Maximum input fragment length is 4096" \
3883 -c "Maximum output fragment length is 4096" \
3884 -s "Maximum input fragment length is 4096" \
3885 -s "Maximum output fragment length is 2048" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003886 -c "client hello, adding max_fragment_length extension" \
3887 -s "found max fragment length extension" \
3888 -s "server hello, max_fragment_length extension" \
3889 -c "found max_fragment_length extension"
3890
Yuto Takanobec7cf72021-07-02 10:10:49 +01003891requires_max_content_len 4096
Hanno Becker4aed27e2017-09-18 15:00:34 +01003892requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003893run_test "Max fragment length: used by server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003894 "$P_SRV debug_level=3 max_frag_len=4096" \
3895 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003896 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003897 -c "Maximum input fragment length is $MAX_CONTENT_LEN" \
3898 -c "Maximum output fragment length is $MAX_CONTENT_LEN" \
3899 -s "Maximum input fragment length is $MAX_CONTENT_LEN" \
3900 -s "Maximum output fragment length is 4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01003901 -C "client hello, adding max_fragment_length extension" \
3902 -S "found max fragment length extension" \
3903 -S "server hello, max_fragment_length extension" \
3904 -C "found max_fragment_length extension"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003905
Yuto Takanobec7cf72021-07-02 10:10:49 +01003906requires_max_content_len 4096
Hanno Becker4aed27e2017-09-18 15:00:34 +01003907requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003908requires_gnutls
3909run_test "Max fragment length: gnutls server" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02003910 "$G_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003911 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02003912 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003913 -c "Maximum input fragment length is 4096" \
3914 -c "Maximum output fragment length is 4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02003915 -c "client hello, adding max_fragment_length extension" \
3916 -c "found max_fragment_length extension"
3917
Yuto Takanobec7cf72021-07-02 10:10:49 +01003918requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01003919requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003920run_test "Max fragment length: client, message just fits" \
3921 "$P_SRV debug_level=3" \
3922 "$P_CLI debug_level=3 max_frag_len=2048 request_size=2048" \
3923 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003924 -c "Maximum input fragment length is 2048" \
3925 -c "Maximum output fragment length is 2048" \
3926 -s "Maximum input fragment length is 2048" \
3927 -s "Maximum output fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003928 -c "client hello, adding max_fragment_length extension" \
3929 -s "found max fragment length extension" \
3930 -s "server hello, max_fragment_length extension" \
3931 -c "found max_fragment_length extension" \
3932 -c "2048 bytes written in 1 fragments" \
3933 -s "2048 bytes read"
3934
Yuto Takanobec7cf72021-07-02 10:10:49 +01003935requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01003936requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003937run_test "Max fragment length: client, larger message" \
3938 "$P_SRV debug_level=3" \
3939 "$P_CLI debug_level=3 max_frag_len=2048 request_size=2345" \
3940 0 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003941 -c "Maximum input fragment length is 2048" \
3942 -c "Maximum output fragment length is 2048" \
3943 -s "Maximum input fragment length is 2048" \
3944 -s "Maximum output fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003945 -c "client hello, adding max_fragment_length extension" \
3946 -s "found max fragment length extension" \
3947 -s "server hello, max_fragment_length extension" \
3948 -c "found max_fragment_length extension" \
3949 -c "2345 bytes written in 2 fragments" \
3950 -s "2048 bytes read" \
3951 -s "297 bytes read"
3952
Yuto Takanobec7cf72021-07-02 10:10:49 +01003953requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01003954requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard23eb74d2015-01-21 14:37:13 +00003955run_test "Max fragment length: DTLS client, larger message" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003956 "$P_SRV debug_level=3 dtls=1" \
3957 "$P_CLI debug_level=3 dtls=1 max_frag_len=2048 request_size=2345" \
3958 1 \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04003959 -c "Maximum input fragment length is 2048" \
3960 -c "Maximum output fragment length is 2048" \
3961 -s "Maximum input fragment length is 2048" \
3962 -s "Maximum output fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02003963 -c "client hello, adding max_fragment_length extension" \
3964 -s "found max fragment length extension" \
3965 -s "server hello, max_fragment_length extension" \
3966 -c "found max_fragment_length extension" \
3967 -c "fragment larger than.*maximum"
3968
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003969# Tests for renegotiation
3970
Hanno Becker6a243642017-10-12 15:18:45 +01003971# Renegotiation SCSV always added, regardless of SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003972run_test "Renegotiation: none, for reference" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01003973 "$P_SRV debug_level=3 exchanges=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003974 "$P_CLI debug_level=3 exchanges=2" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003975 0 \
3976 -C "client hello, adding renegotiation extension" \
3977 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3978 -S "found renegotiation extension" \
3979 -s "server hello, secure renegotiation extension" \
3980 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01003981 -C "=> renegotiate" \
3982 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003983 -S "write hello request"
3984
Hanno Becker6a243642017-10-12 15:18:45 +01003985requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003986run_test "Renegotiation: client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01003987 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003988 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003989 0 \
3990 -c "client hello, adding renegotiation extension" \
3991 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3992 -s "found renegotiation extension" \
3993 -s "server hello, secure renegotiation extension" \
3994 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01003995 -c "=> renegotiate" \
3996 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003997 -S "write hello request"
3998
Hanno Becker6a243642017-10-12 15:18:45 +01003999requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004000run_test "Renegotiation: server-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004001 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004002 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004003 0 \
4004 -c "client hello, adding renegotiation extension" \
4005 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4006 -s "found renegotiation extension" \
4007 -s "server hello, secure renegotiation extension" \
4008 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004009 -c "=> renegotiate" \
4010 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004011 -s "write hello request"
4012
Janos Follathb0f148c2017-10-05 12:29:42 +01004013# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
4014# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
4015# algorithm stronger than SHA-1 is enabled in config.h
Hanno Becker6a243642017-10-12 15:18:45 +01004016requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01004017run_test "Renegotiation: Signature Algorithms parsing, client-initiated" \
4018 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
4019 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
4020 0 \
4021 -c "client hello, adding renegotiation extension" \
4022 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4023 -s "found renegotiation extension" \
4024 -s "server hello, secure renegotiation extension" \
4025 -c "found renegotiation extension" \
4026 -c "=> renegotiate" \
4027 -s "=> renegotiate" \
4028 -S "write hello request" \
4029 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
4030
4031# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
4032# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
4033# algorithm stronger than SHA-1 is enabled in config.h
Hanno Becker6a243642017-10-12 15:18:45 +01004034requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01004035run_test "Renegotiation: Signature Algorithms parsing, server-initiated" \
4036 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
4037 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
4038 0 \
4039 -c "client hello, adding renegotiation extension" \
4040 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4041 -s "found renegotiation extension" \
4042 -s "server hello, secure renegotiation extension" \
4043 -c "found renegotiation extension" \
4044 -c "=> renegotiate" \
4045 -s "=> renegotiate" \
4046 -s "write hello request" \
4047 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
4048
Hanno Becker6a243642017-10-12 15:18:45 +01004049requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004050run_test "Renegotiation: double" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004051 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004052 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004053 0 \
4054 -c "client hello, adding renegotiation extension" \
4055 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4056 -s "found renegotiation extension" \
4057 -s "server hello, secure renegotiation extension" \
4058 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004059 -c "=> renegotiate" \
4060 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004061 -s "write hello request"
4062
Hanno Becker6a243642017-10-12 15:18:45 +01004063requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Andrzej Kurek8ea68722020-04-03 06:40:47 -04004064requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobec7cf72021-07-02 10:10:49 +01004065requires_max_content_len 2048
Andrzej Kurek8ea68722020-04-03 06:40:47 -04004066run_test "Renegotiation with max fragment length: client 2048, server 512" \
4067 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1 max_frag_len=512" \
4068 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 max_frag_len=2048 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
4069 0 \
4070 -c "Maximum input fragment length is 2048" \
4071 -c "Maximum output fragment length is 2048" \
4072 -s "Maximum input fragment length is 2048" \
4073 -s "Maximum output fragment length is 512" \
4074 -c "client hello, adding max_fragment_length extension" \
4075 -s "found max fragment length extension" \
4076 -s "server hello, max_fragment_length extension" \
4077 -c "found max_fragment_length extension" \
4078 -c "client hello, adding renegotiation extension" \
4079 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4080 -s "found renegotiation extension" \
4081 -s "server hello, secure renegotiation extension" \
4082 -c "found renegotiation extension" \
4083 -c "=> renegotiate" \
4084 -s "=> renegotiate" \
4085 -s "write hello request"
4086
4087requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004088run_test "Renegotiation: client-initiated, server-rejected" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004089 "$P_SRV debug_level=3 exchanges=2 renegotiation=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004090 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004091 1 \
4092 -c "client hello, adding renegotiation extension" \
4093 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4094 -S "found renegotiation extension" \
4095 -s "server hello, secure renegotiation extension" \
4096 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004097 -c "=> renegotiate" \
4098 -S "=> renegotiate" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004099 -S "write hello request" \
Manuel Pégourié-Gonnard65919622014-08-19 12:50:30 +02004100 -c "SSL - Unexpected message at ServerHello in renegotiation" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004101 -c "failed"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004102
Hanno Becker6a243642017-10-12 15:18:45 +01004103requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004104run_test "Renegotiation: server-initiated, client-rejected, default" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004105 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004106 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004107 0 \
4108 -C "client hello, adding renegotiation extension" \
4109 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4110 -S "found renegotiation extension" \
4111 -s "server hello, secure renegotiation extension" \
4112 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004113 -C "=> renegotiate" \
4114 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004115 -s "write hello request" \
Manuel Pégourié-Gonnarda9964db2014-07-03 19:29:16 +02004116 -S "SSL - An unexpected message was received from our peer" \
4117 -S "failed"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01004118
Hanno Becker6a243642017-10-12 15:18:45 +01004119requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004120run_test "Renegotiation: server-initiated, client-rejected, not enforced" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004121 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004122 renego_delay=-1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004123 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004124 0 \
4125 -C "client hello, adding renegotiation extension" \
4126 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4127 -S "found renegotiation extension" \
4128 -s "server hello, secure renegotiation extension" \
4129 -c "found renegotiation extension" \
4130 -C "=> renegotiate" \
4131 -S "=> renegotiate" \
4132 -s "write hello request" \
4133 -S "SSL - An unexpected message was received from our peer" \
4134 -S "failed"
4135
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004136# delay 2 for 1 alert record + 1 application data record
Hanno Becker6a243642017-10-12 15:18:45 +01004137requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004138run_test "Renegotiation: server-initiated, client-rejected, delay 2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004139 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004140 renego_delay=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004141 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004142 0 \
4143 -C "client hello, adding renegotiation extension" \
4144 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4145 -S "found renegotiation extension" \
4146 -s "server hello, secure renegotiation extension" \
4147 -c "found renegotiation extension" \
4148 -C "=> renegotiate" \
4149 -S "=> renegotiate" \
4150 -s "write hello request" \
4151 -S "SSL - An unexpected message was received from our peer" \
4152 -S "failed"
4153
Hanno Becker6a243642017-10-12 15:18:45 +01004154requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004155run_test "Renegotiation: server-initiated, client-rejected, delay 0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004156 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004157 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004158 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004159 0 \
4160 -C "client hello, adding renegotiation extension" \
4161 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4162 -S "found renegotiation extension" \
4163 -s "server hello, secure renegotiation extension" \
4164 -c "found renegotiation extension" \
4165 -C "=> renegotiate" \
4166 -S "=> renegotiate" \
4167 -s "write hello request" \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004168 -s "SSL - An unexpected message was received from our peer"
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004169
Hanno Becker6a243642017-10-12 15:18:45 +01004170requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004171run_test "Renegotiation: server-initiated, client-accepted, delay 0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004172 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004173 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004174 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004175 0 \
4176 -c "client hello, adding renegotiation extension" \
4177 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4178 -s "found renegotiation extension" \
4179 -s "server hello, secure renegotiation extension" \
4180 -c "found renegotiation extension" \
4181 -c "=> renegotiate" \
4182 -s "=> renegotiate" \
4183 -s "write hello request" \
4184 -S "SSL - An unexpected message was received from our peer" \
4185 -S "failed"
4186
Hanno Becker6a243642017-10-12 15:18:45 +01004187requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004188run_test "Renegotiation: periodic, just below period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004189 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004190 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
4191 0 \
4192 -C "client hello, adding renegotiation extension" \
4193 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4194 -S "found renegotiation extension" \
4195 -s "server hello, secure renegotiation extension" \
4196 -c "found renegotiation extension" \
4197 -S "record counter limit reached: renegotiate" \
4198 -C "=> renegotiate" \
4199 -S "=> renegotiate" \
4200 -S "write hello request" \
4201 -S "SSL - An unexpected message was received from our peer" \
4202 -S "failed"
4203
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01004204# one extra exchange to be able to complete renego
Hanno Becker6a243642017-10-12 15:18:45 +01004205requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004206run_test "Renegotiation: periodic, just above period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004207 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01004208 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004209 0 \
4210 -c "client hello, adding renegotiation extension" \
4211 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4212 -s "found renegotiation extension" \
4213 -s "server hello, secure renegotiation extension" \
4214 -c "found renegotiation extension" \
4215 -s "record counter limit reached: renegotiate" \
4216 -c "=> renegotiate" \
4217 -s "=> renegotiate" \
4218 -s "write hello request" \
4219 -S "SSL - An unexpected message was received from our peer" \
4220 -S "failed"
4221
Hanno Becker6a243642017-10-12 15:18:45 +01004222requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004223run_test "Renegotiation: periodic, two times period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004224 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01004225 "$P_CLI debug_level=3 exchanges=7 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004226 0 \
4227 -c "client hello, adding renegotiation extension" \
4228 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4229 -s "found renegotiation extension" \
4230 -s "server hello, secure renegotiation extension" \
4231 -c "found renegotiation extension" \
4232 -s "record counter limit reached: renegotiate" \
4233 -c "=> renegotiate" \
4234 -s "=> renegotiate" \
4235 -s "write hello request" \
4236 -S "SSL - An unexpected message was received from our peer" \
4237 -S "failed"
4238
Hanno Becker6a243642017-10-12 15:18:45 +01004239requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004240run_test "Renegotiation: periodic, above period, disabled" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004241 "$P_SRV debug_level=3 exchanges=9 renegotiation=0 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004242 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
4243 0 \
4244 -C "client hello, adding renegotiation extension" \
4245 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4246 -S "found renegotiation extension" \
4247 -s "server hello, secure renegotiation extension" \
4248 -c "found renegotiation extension" \
4249 -S "record counter limit reached: renegotiate" \
4250 -C "=> renegotiate" \
4251 -S "=> renegotiate" \
4252 -S "write hello request" \
4253 -S "SSL - An unexpected message was received from our peer" \
4254 -S "failed"
4255
Hanno Becker6a243642017-10-12 15:18:45 +01004256requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004257run_test "Renegotiation: nbio, client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004258 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004259 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02004260 0 \
4261 -c "client hello, adding renegotiation extension" \
4262 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4263 -s "found renegotiation extension" \
4264 -s "server hello, secure renegotiation extension" \
4265 -c "found renegotiation extension" \
4266 -c "=> renegotiate" \
4267 -s "=> renegotiate" \
4268 -S "write hello request"
4269
Hanno Becker6a243642017-10-12 15:18:45 +01004270requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004271run_test "Renegotiation: nbio, server-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004272 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004273 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02004274 0 \
4275 -c "client hello, adding renegotiation extension" \
4276 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4277 -s "found renegotiation extension" \
4278 -s "server hello, secure renegotiation extension" \
4279 -c "found renegotiation extension" \
4280 -c "=> renegotiate" \
4281 -s "=> renegotiate" \
4282 -s "write hello request"
4283
Hanno Becker6a243642017-10-12 15:18:45 +01004284requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004285run_test "Renegotiation: openssl server, client-initiated" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02004286 "$O_SRV -www" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004287 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02004288 0 \
4289 -c "client hello, adding renegotiation extension" \
4290 -c "found renegotiation extension" \
4291 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004292 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02004293 -C "error" \
4294 -c "HTTP/1.0 200 [Oo][Kk]"
4295
Paul Bakker539d9722015-02-08 16:18:35 +01004296requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004297requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004298run_test "Renegotiation: gnutls server strict, client-initiated" \
4299 "$G_SRV --priority=NORMAL:%SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004300 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02004301 0 \
4302 -c "client hello, adding renegotiation extension" \
4303 -c "found renegotiation extension" \
4304 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004305 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02004306 -C "error" \
4307 -c "HTTP/1.0 200 [Oo][Kk]"
4308
Paul Bakker539d9722015-02-08 16:18:35 +01004309requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004310requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004311run_test "Renegotiation: gnutls server unsafe, client-initiated default" \
4312 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4313 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
4314 1 \
4315 -c "client hello, adding renegotiation extension" \
4316 -C "found renegotiation extension" \
4317 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004318 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004319 -c "error" \
4320 -C "HTTP/1.0 200 [Oo][Kk]"
4321
Paul Bakker539d9722015-02-08 16:18:35 +01004322requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004323requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004324run_test "Renegotiation: gnutls server unsafe, client-inititated no legacy" \
4325 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4326 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
4327 allow_legacy=0" \
4328 1 \
4329 -c "client hello, adding renegotiation extension" \
4330 -C "found renegotiation extension" \
4331 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004332 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004333 -c "error" \
4334 -C "HTTP/1.0 200 [Oo][Kk]"
4335
Paul Bakker539d9722015-02-08 16:18:35 +01004336requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004337requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004338run_test "Renegotiation: gnutls server unsafe, client-inititated legacy" \
4339 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4340 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
4341 allow_legacy=1" \
4342 0 \
4343 -c "client hello, adding renegotiation extension" \
4344 -C "found renegotiation extension" \
4345 -c "=> renegotiate" \
4346 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004347 -C "error" \
4348 -c "HTTP/1.0 200 [Oo][Kk]"
4349
Hanno Becker6a243642017-10-12 15:18:45 +01004350requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard30d16eb2014-08-19 17:43:50 +02004351run_test "Renegotiation: DTLS, client-initiated" \
4352 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1" \
4353 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
4354 0 \
4355 -c "client hello, adding renegotiation extension" \
4356 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4357 -s "found renegotiation extension" \
4358 -s "server hello, secure renegotiation extension" \
4359 -c "found renegotiation extension" \
4360 -c "=> renegotiate" \
4361 -s "=> renegotiate" \
4362 -S "write hello request"
4363
Hanno Becker6a243642017-10-12 15:18:45 +01004364requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02004365run_test "Renegotiation: DTLS, server-initiated" \
4366 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnarddf9a0a82014-10-02 14:17:18 +02004367 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 \
4368 read_timeout=1000 max_resend=2" \
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02004369 0 \
4370 -c "client hello, adding renegotiation extension" \
4371 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4372 -s "found renegotiation extension" \
4373 -s "server hello, secure renegotiation extension" \
4374 -c "found renegotiation extension" \
4375 -c "=> renegotiate" \
4376 -s "=> renegotiate" \
4377 -s "write hello request"
4378
Hanno Becker6a243642017-10-12 15:18:45 +01004379requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Andres AG692ad842017-01-19 16:30:57 +00004380run_test "Renegotiation: DTLS, renego_period overflow" \
4381 "$P_SRV debug_level=3 dtls=1 exchanges=4 renegotiation=1 renego_period=18446462598732840962 auth_mode=optional" \
4382 "$P_CLI debug_level=3 dtls=1 exchanges=4 renegotiation=1" \
4383 0 \
4384 -c "client hello, adding renegotiation extension" \
4385 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4386 -s "found renegotiation extension" \
4387 -s "server hello, secure renegotiation extension" \
4388 -s "record counter limit reached: renegotiate" \
4389 -c "=> renegotiate" \
4390 -s "=> renegotiate" \
Hanno Becker6a243642017-10-12 15:18:45 +01004391 -s "write hello request"
Andres AG692ad842017-01-19 16:30:57 +00004392
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +00004393requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01004394requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02004395run_test "Renegotiation: DTLS, gnutls server, client-initiated" \
4396 "$G_SRV -u --mtu 4096" \
4397 "$P_CLI debug_level=3 dtls=1 exchanges=1 renegotiation=1 renegotiate=1" \
4398 0 \
4399 -c "client hello, adding renegotiation extension" \
4400 -c "found renegotiation extension" \
4401 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004402 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02004403 -C "error" \
4404 -s "Extra-header:"
4405
Shaun Case0e7791f2021-12-20 21:14:10 -08004406# Test for the "secure renegotiation" extension only (no actual renegotiation)
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004407
Paul Bakker539d9722015-02-08 16:18:35 +01004408requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004409run_test "Renego ext: gnutls server strict, client default" \
4410 "$G_SRV --priority=NORMAL:%SAFE_RENEGOTIATION" \
4411 "$P_CLI debug_level=3" \
4412 0 \
4413 -c "found renegotiation extension" \
4414 -C "error" \
4415 -c "HTTP/1.0 200 [Oo][Kk]"
4416
Paul Bakker539d9722015-02-08 16:18:35 +01004417requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004418run_test "Renego ext: gnutls server unsafe, client default" \
4419 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4420 "$P_CLI debug_level=3" \
4421 0 \
4422 -C "found renegotiation extension" \
4423 -C "error" \
4424 -c "HTTP/1.0 200 [Oo][Kk]"
4425
Paul Bakker539d9722015-02-08 16:18:35 +01004426requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004427run_test "Renego ext: gnutls server unsafe, client break legacy" \
4428 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
4429 "$P_CLI debug_level=3 allow_legacy=-1" \
4430 1 \
4431 -C "found renegotiation extension" \
4432 -c "error" \
4433 -C "HTTP/1.0 200 [Oo][Kk]"
4434
Paul Bakker539d9722015-02-08 16:18:35 +01004435requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004436run_test "Renego ext: gnutls client strict, server default" \
4437 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004438 "$G_CLI --priority=NORMAL:%SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004439 0 \
4440 -s "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
4441 -s "server hello, secure renegotiation extension"
4442
Paul Bakker539d9722015-02-08 16:18:35 +01004443requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004444run_test "Renego ext: gnutls client unsafe, server default" \
4445 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004446 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004447 0 \
4448 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
4449 -S "server hello, secure renegotiation extension"
4450
Paul Bakker539d9722015-02-08 16:18:35 +01004451requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004452run_test "Renego ext: gnutls client unsafe, server break legacy" \
4453 "$P_SRV debug_level=3 allow_legacy=-1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004454 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01004455 1 \
4456 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
4457 -S "server hello, secure renegotiation extension"
4458
Janos Follath0b242342016-02-17 10:11:21 +00004459# Tests for silently dropping trailing extra bytes in .der certificates
4460
4461requires_gnutls
4462run_test "DER format: no trailing bytes" \
4463 "$P_SRV crt_file=data_files/server5-der0.crt \
4464 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004465 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004466 0 \
4467 -c "Handshake was completed" \
4468
4469requires_gnutls
4470run_test "DER format: with a trailing zero byte" \
4471 "$P_SRV crt_file=data_files/server5-der1a.crt \
4472 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004473 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004474 0 \
4475 -c "Handshake was completed" \
4476
4477requires_gnutls
4478run_test "DER format: with a trailing random byte" \
4479 "$P_SRV crt_file=data_files/server5-der1b.crt \
4480 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004481 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004482 0 \
4483 -c "Handshake was completed" \
4484
4485requires_gnutls
4486run_test "DER format: with 2 trailing random bytes" \
4487 "$P_SRV crt_file=data_files/server5-der2.crt \
4488 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004489 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004490 0 \
4491 -c "Handshake was completed" \
4492
4493requires_gnutls
4494run_test "DER format: with 4 trailing random bytes" \
4495 "$P_SRV crt_file=data_files/server5-der4.crt \
4496 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004497 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004498 0 \
4499 -c "Handshake was completed" \
4500
4501requires_gnutls
4502run_test "DER format: with 8 trailing random bytes" \
4503 "$P_SRV crt_file=data_files/server5-der8.crt \
4504 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004505 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004506 0 \
4507 -c "Handshake was completed" \
4508
4509requires_gnutls
4510run_test "DER format: with 9 trailing random bytes" \
4511 "$P_SRV crt_file=data_files/server5-der9.crt \
4512 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004513 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00004514 0 \
4515 -c "Handshake was completed" \
4516
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03004517# Tests for auth_mode, there are duplicated tests using ca callback for authentication
4518# When updating these tests, modify the matching authentication tests accordingly
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004519
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004520run_test "Authentication: server badcert, client required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004521 "$P_SRV crt_file=data_files/server5-badsign.crt \
4522 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004523 "$P_CLI debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004524 1 \
4525 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004526 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004527 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004528 -c "X509 - Certificate verification failed"
4529
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004530run_test "Authentication: server badcert, client optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004531 "$P_SRV crt_file=data_files/server5-badsign.crt \
4532 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004533 "$P_CLI debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004534 0 \
4535 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004536 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004537 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004538 -C "X509 - Certificate verification failed"
4539
Hanno Beckere6706e62017-05-15 16:05:15 +01004540run_test "Authentication: server goodcert, client optional, no trusted CA" \
4541 "$P_SRV" \
4542 "$P_CLI debug_level=3 auth_mode=optional ca_file=none ca_path=none" \
4543 0 \
4544 -c "x509_verify_cert() returned" \
4545 -c "! The certificate is not correctly signed by the trusted CA" \
4546 -c "! Certificate verification flags"\
4547 -C "! mbedtls_ssl_handshake returned" \
4548 -C "X509 - Certificate verification failed" \
4549 -C "SSL - No CA Chain is set, but required to operate"
4550
4551run_test "Authentication: server goodcert, client required, no trusted CA" \
4552 "$P_SRV" \
4553 "$P_CLI debug_level=3 auth_mode=required ca_file=none ca_path=none" \
4554 1 \
4555 -c "x509_verify_cert() returned" \
4556 -c "! The certificate is not correctly signed by the trusted CA" \
4557 -c "! Certificate verification flags"\
4558 -c "! mbedtls_ssl_handshake returned" \
4559 -c "SSL - No CA Chain is set, but required to operate"
4560
4561# The purpose of the next two tests is to test the client's behaviour when receiving a server
4562# certificate with an unsupported elliptic curve. This should usually not happen because
4563# the client informs the server about the supported curves - it does, though, in the
4564# corner case of a static ECDH suite, because the server doesn't check the curve on that
4565# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
4566# different means to have the server ignoring the client's supported curve list.
4567
4568requires_config_enabled MBEDTLS_ECP_C
4569run_test "Authentication: server ECDH p256v1, client required, p256v1 unsupported" \
4570 "$P_SRV debug_level=1 key_file=data_files/server5.key \
4571 crt_file=data_files/server5.ku-ka.crt" \
4572 "$P_CLI debug_level=3 auth_mode=required curves=secp521r1" \
4573 1 \
4574 -c "bad certificate (EC key curve)"\
4575 -c "! Certificate verification flags"\
4576 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
4577
4578requires_config_enabled MBEDTLS_ECP_C
4579run_test "Authentication: server ECDH p256v1, client optional, p256v1 unsupported" \
4580 "$P_SRV debug_level=1 key_file=data_files/server5.key \
4581 crt_file=data_files/server5.ku-ka.crt" \
4582 "$P_CLI debug_level=3 auth_mode=optional curves=secp521r1" \
4583 1 \
4584 -c "bad certificate (EC key curve)"\
4585 -c "! Certificate verification flags"\
4586 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
4587
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004588run_test "Authentication: server badcert, client none" \
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01004589 "$P_SRV crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004590 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004591 "$P_CLI debug_level=1 auth_mode=none" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004592 0 \
4593 -C "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004594 -C "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004595 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004596 -C "X509 - Certificate verification failed"
4597
Simon Butcher99000142016-10-13 17:21:01 +01004598run_test "Authentication: client SHA256, server required" \
4599 "$P_SRV auth_mode=required" \
4600 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
4601 key_file=data_files/server6.key \
4602 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
4603 0 \
4604 -c "Supported Signature Algorithm found: 4," \
4605 -c "Supported Signature Algorithm found: 5,"
4606
4607run_test "Authentication: client SHA384, server required" \
4608 "$P_SRV auth_mode=required" \
4609 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
4610 key_file=data_files/server6.key \
4611 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
4612 0 \
4613 -c "Supported Signature Algorithm found: 4," \
4614 -c "Supported Signature Algorithm found: 5,"
4615
Gilles Peskinefd8332e2017-05-03 16:25:07 +02004616run_test "Authentication: client has no cert, server required (SSLv3)" \
4617 "$P_SRV debug_level=3 min_version=ssl3 auth_mode=required" \
4618 "$P_CLI debug_level=3 force_version=ssl3 crt_file=none \
4619 key_file=data_files/server5.key" \
4620 1 \
4621 -S "skip write certificate request" \
4622 -C "skip parse certificate request" \
4623 -c "got a certificate request" \
4624 -c "got no certificate to send" \
4625 -S "x509_verify_cert() returned" \
4626 -s "client has no certificate" \
4627 -s "! mbedtls_ssl_handshake returned" \
4628 -c "! mbedtls_ssl_handshake returned" \
4629 -s "No client certification received from the client, but required by the authentication mode"
4630
4631run_test "Authentication: client has no cert, server required (TLS)" \
4632 "$P_SRV debug_level=3 auth_mode=required" \
4633 "$P_CLI debug_level=3 crt_file=none \
4634 key_file=data_files/server5.key" \
4635 1 \
4636 -S "skip write certificate request" \
4637 -C "skip parse certificate request" \
4638 -c "got a certificate request" \
4639 -c "= write certificate$" \
4640 -C "skip write certificate$" \
4641 -S "x509_verify_cert() returned" \
4642 -s "client has no certificate" \
4643 -s "! mbedtls_ssl_handshake returned" \
4644 -c "! mbedtls_ssl_handshake returned" \
4645 -s "No client certification received from the client, but required by the authentication mode"
4646
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004647run_test "Authentication: client badcert, server required" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004648 "$P_SRV debug_level=3 auth_mode=required" \
4649 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004650 key_file=data_files/server5.key" \
4651 1 \
4652 -S "skip write certificate request" \
4653 -C "skip parse certificate request" \
4654 -c "got a certificate request" \
4655 -C "skip write certificate" \
4656 -C "skip write certificate verify" \
4657 -S "skip parse certificate verify" \
4658 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02004659 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004660 -s "! mbedtls_ssl_handshake returned" \
Gilles Peskine1cc8e342017-05-03 16:28:34 +02004661 -s "send alert level=2 message=48" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004662 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004663 -s "X509 - Certificate verification failed"
Gilles Peskine1cc8e342017-05-03 16:28:34 +02004664# We don't check that the client receives the alert because it might
4665# detect that its write end of the connection is closed and abort
4666# before reading the alert message.
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004667
Gilles Peskine8c681b72022-01-07 23:10:56 +01004668run_test "Authentication: client cert self-signed and trusted, server required" \
4669 "$P_SRV debug_level=3 auth_mode=required ca_file=data_files/server5-selfsigned.crt" \
4670 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
4671 key_file=data_files/server5.key" \
4672 0 \
4673 -S "skip write certificate request" \
4674 -C "skip parse certificate request" \
4675 -c "got a certificate request" \
4676 -C "skip write certificate" \
4677 -C "skip write certificate verify" \
4678 -S "skip parse certificate verify" \
4679 -S "x509_verify_cert() returned" \
4680 -S "! The certificate is not correctly signed" \
4681 -S "X509 - Certificate verification failed"
4682
Janos Follath89baba22017-04-10 14:34:35 +01004683run_test "Authentication: client cert not trusted, server required" \
4684 "$P_SRV debug_level=3 auth_mode=required" \
4685 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
4686 key_file=data_files/server5.key" \
4687 1 \
4688 -S "skip write certificate request" \
4689 -C "skip parse certificate request" \
4690 -c "got a certificate request" \
4691 -C "skip write certificate" \
4692 -C "skip write certificate verify" \
4693 -S "skip parse certificate verify" \
4694 -s "x509_verify_cert() returned" \
4695 -s "! The certificate is not correctly signed by the trusted CA" \
4696 -s "! mbedtls_ssl_handshake returned" \
4697 -c "! mbedtls_ssl_handshake returned" \
4698 -s "X509 - Certificate verification failed"
4699
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004700run_test "Authentication: client badcert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004701 "$P_SRV debug_level=3 auth_mode=optional" \
4702 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004703 key_file=data_files/server5.key" \
4704 0 \
4705 -S "skip write certificate request" \
4706 -C "skip parse certificate request" \
4707 -c "got a certificate request" \
4708 -C "skip write certificate" \
4709 -C "skip write certificate verify" \
4710 -S "skip parse certificate verify" \
4711 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004712 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004713 -S "! mbedtls_ssl_handshake returned" \
4714 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004715 -S "X509 - Certificate verification failed"
4716
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004717run_test "Authentication: client badcert, server none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004718 "$P_SRV debug_level=3 auth_mode=none" \
4719 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004720 key_file=data_files/server5.key" \
4721 0 \
4722 -s "skip write certificate request" \
4723 -C "skip parse certificate request" \
4724 -c "got no certificate request" \
4725 -c "skip write certificate" \
4726 -c "skip write certificate verify" \
4727 -s "skip parse certificate verify" \
4728 -S "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004729 -S "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004730 -S "! mbedtls_ssl_handshake returned" \
4731 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01004732 -S "X509 - Certificate verification failed"
4733
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004734run_test "Authentication: client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004735 "$P_SRV debug_level=3 auth_mode=optional" \
4736 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004737 0 \
4738 -S "skip write certificate request" \
4739 -C "skip parse certificate request" \
4740 -c "got a certificate request" \
4741 -C "skip write certificate$" \
4742 -C "got no certificate to send" \
4743 -S "SSLv3 client has no certificate" \
4744 -c "skip write certificate verify" \
4745 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004746 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004747 -S "! mbedtls_ssl_handshake returned" \
4748 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004749 -S "X509 - Certificate verification failed"
4750
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004751run_test "Authentication: openssl client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004752 "$P_SRV debug_level=3 auth_mode=optional" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004753 "$O_CLI" \
4754 0 \
4755 -S "skip write certificate request" \
4756 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004757 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004758 -S "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004759 -S "X509 - Certificate verification failed"
4760
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004761run_test "Authentication: client no cert, openssl server optional" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004762 "$O_SRV -verify 10" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004763 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004764 0 \
4765 -C "skip parse certificate request" \
4766 -c "got a certificate request" \
4767 -C "skip write certificate$" \
4768 -c "skip write certificate verify" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004769 -C "! mbedtls_ssl_handshake returned"
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004770
Gilles Peskinefd8332e2017-05-03 16:25:07 +02004771run_test "Authentication: client no cert, openssl server required" \
4772 "$O_SRV -Verify 10" \
4773 "$P_CLI debug_level=3 crt_file=none key_file=none" \
4774 1 \
4775 -C "skip parse certificate request" \
4776 -c "got a certificate request" \
4777 -C "skip write certificate$" \
4778 -c "skip write certificate verify" \
4779 -c "! mbedtls_ssl_handshake returned"
4780
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004781run_test "Authentication: client no cert, ssl3" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004782 "$P_SRV debug_level=3 auth_mode=optional force_version=ssl3" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01004783 "$P_CLI debug_level=3 crt_file=none key_file=none min_version=ssl3" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004784 0 \
4785 -S "skip write certificate request" \
4786 -C "skip parse certificate request" \
4787 -c "got a certificate request" \
4788 -C "skip write certificate$" \
4789 -c "skip write certificate verify" \
4790 -c "got no certificate to send" \
4791 -s "SSLv3 client has no certificate" \
4792 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01004793 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004794 -S "! mbedtls_ssl_handshake returned" \
4795 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01004796 -S "X509 - Certificate verification failed"
4797
Yuto Takanoccdd25c2021-07-02 13:05:15 +01004798# This script assumes that MBEDTLS_X509_MAX_INTERMEDIATE_CA has its default
4799# value, defined here as MAX_IM_CA. Some test cases will be skipped if the
4800# library is configured with a different value.
Hanno Beckera6bca9f2017-07-26 13:35:11 +01004801
Simon Butcherbcfa6f42017-07-28 15:59:35 +01004802MAX_IM_CA='8'
Hanno Beckera6bca9f2017-07-26 13:35:11 +01004803
Yuto Takanoccdd25c2021-07-02 13:05:15 +01004804# The tests for the max_int tests can pass with any number higher than MAX_IM_CA
4805# because only a chain of MAX_IM_CA length is tested. Equally, the max_int+1
4806# tests can pass with any number less than MAX_IM_CA. However, stricter preconditions
4807# are in place so that the semantics are consistent with the test description.
Yuto Takano8a693ef2021-07-02 13:10:41 +01004808requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004809requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004810run_test "Authentication: server max_int chain, client default" \
4811 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
4812 key_file=data_files/dir-maxpath/09.key" \
4813 "$P_CLI server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
4814 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004815 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004816
Yuto Takano8a693ef2021-07-02 13:10:41 +01004817requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004818requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004819run_test "Authentication: server max_int+1 chain, client default" \
4820 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
4821 key_file=data_files/dir-maxpath/10.key" \
4822 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
4823 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004824 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004825
Yuto Takano8a693ef2021-07-02 13:10:41 +01004826requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004827requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004828run_test "Authentication: server max_int+1 chain, client optional" \
4829 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
4830 key_file=data_files/dir-maxpath/10.key" \
4831 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
4832 auth_mode=optional" \
4833 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004834 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004835
Yuto Takano8a693ef2021-07-02 13:10:41 +01004836requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004837requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004838run_test "Authentication: server max_int+1 chain, client none" \
4839 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
4840 key_file=data_files/dir-maxpath/10.key" \
4841 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
4842 auth_mode=none" \
4843 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004844 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004845
Yuto Takano8a693ef2021-07-02 13:10:41 +01004846requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004847requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004848run_test "Authentication: client max_int+1 chain, server default" \
4849 "$P_SRV ca_file=data_files/dir-maxpath/00.crt" \
4850 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
4851 key_file=data_files/dir-maxpath/10.key" \
4852 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004853 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004854
Yuto Takano8a693ef2021-07-02 13:10:41 +01004855requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004856requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004857run_test "Authentication: client max_int+1 chain, server optional" \
4858 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
4859 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
4860 key_file=data_files/dir-maxpath/10.key" \
4861 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004862 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004863
Yuto Takano8a693ef2021-07-02 13:10:41 +01004864requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004865requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004866run_test "Authentication: client max_int+1 chain, server required" \
4867 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
4868 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
4869 key_file=data_files/dir-maxpath/10.key" \
4870 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004871 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004872
Yuto Takano8a693ef2021-07-02 13:10:41 +01004873requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10004874requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004875run_test "Authentication: client max_int chain, server required" \
4876 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
4877 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
4878 key_file=data_files/dir-maxpath/09.key" \
4879 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01004880 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02004881
Janos Follath89baba22017-04-10 14:34:35 +01004882# Tests for CA list in CertificateRequest messages
4883
4884run_test "Authentication: send CA list in CertificateRequest (default)" \
4885 "$P_SRV debug_level=3 auth_mode=required" \
4886 "$P_CLI crt_file=data_files/server6.crt \
4887 key_file=data_files/server6.key" \
4888 0 \
4889 -s "requested DN"
4890
4891run_test "Authentication: do not send CA list in CertificateRequest" \
4892 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
4893 "$P_CLI crt_file=data_files/server6.crt \
4894 key_file=data_files/server6.key" \
4895 0 \
4896 -S "requested DN"
4897
4898run_test "Authentication: send CA list in CertificateRequest, client self signed" \
4899 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
4900 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
4901 key_file=data_files/server5.key" \
4902 1 \
4903 -S "requested DN" \
4904 -s "x509_verify_cert() returned" \
4905 -s "! The certificate is not correctly signed by the trusted CA" \
4906 -s "! mbedtls_ssl_handshake returned" \
4907 -c "! mbedtls_ssl_handshake returned" \
4908 -s "X509 - Certificate verification failed"
4909
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03004910# Tests for auth_mode, using CA callback, these are duplicated from the authentication tests
4911# When updating these tests, modify the matching authentication tests accordingly
Hanno Becker746aaf32019-03-28 15:25:23 +00004912
4913requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4914run_test "Authentication, CA callback: server badcert, client required" \
4915 "$P_SRV crt_file=data_files/server5-badsign.crt \
4916 key_file=data_files/server5.key" \
4917 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required" \
4918 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004919 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004920 -c "x509_verify_cert() returned" \
4921 -c "! The certificate is not correctly signed by the trusted CA" \
4922 -c "! mbedtls_ssl_handshake returned" \
4923 -c "X509 - Certificate verification failed"
4924
4925requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4926run_test "Authentication, CA callback: server badcert, client optional" \
4927 "$P_SRV crt_file=data_files/server5-badsign.crt \
4928 key_file=data_files/server5.key" \
4929 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional" \
4930 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004931 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004932 -c "x509_verify_cert() returned" \
4933 -c "! The certificate is not correctly signed by the trusted CA" \
4934 -C "! mbedtls_ssl_handshake returned" \
4935 -C "X509 - Certificate verification failed"
4936
4937# The purpose of the next two tests is to test the client's behaviour when receiving a server
4938# certificate with an unsupported elliptic curve. This should usually not happen because
4939# the client informs the server about the supported curves - it does, though, in the
4940# corner case of a static ECDH suite, because the server doesn't check the curve on that
4941# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
4942# different means to have the server ignoring the client's supported curve list.
4943
4944requires_config_enabled MBEDTLS_ECP_C
4945requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4946run_test "Authentication, CA callback: server ECDH p256v1, client required, p256v1 unsupported" \
4947 "$P_SRV debug_level=1 key_file=data_files/server5.key \
4948 crt_file=data_files/server5.ku-ka.crt" \
4949 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required curves=secp521r1" \
4950 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004951 -c "use CA callback for X.509 CRT verification" \
4952 -c "bad certificate (EC key curve)" \
4953 -c "! Certificate verification flags" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004954 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
4955
4956requires_config_enabled MBEDTLS_ECP_C
4957requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4958run_test "Authentication, CA callback: server ECDH p256v1, client optional, p256v1 unsupported" \
4959 "$P_SRV debug_level=1 key_file=data_files/server5.key \
4960 crt_file=data_files/server5.ku-ka.crt" \
4961 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional curves=secp521r1" \
4962 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004963 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004964 -c "bad certificate (EC key curve)"\
4965 -c "! Certificate verification flags"\
4966 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
4967
4968requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4969run_test "Authentication, CA callback: client SHA256, server required" \
4970 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
4971 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
4972 key_file=data_files/server6.key \
4973 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
4974 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004975 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004976 -c "Supported Signature Algorithm found: 4," \
4977 -c "Supported Signature Algorithm found: 5,"
4978
4979requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4980run_test "Authentication, CA callback: client SHA384, server required" \
4981 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
4982 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
4983 key_file=data_files/server6.key \
4984 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
4985 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004986 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004987 -c "Supported Signature Algorithm found: 4," \
4988 -c "Supported Signature Algorithm found: 5,"
4989
4990requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
4991run_test "Authentication, CA callback: client badcert, server required" \
4992 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
4993 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
4994 key_file=data_files/server5.key" \
4995 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01004996 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00004997 -S "skip write certificate request" \
4998 -C "skip parse certificate request" \
4999 -c "got a certificate request" \
5000 -C "skip write certificate" \
5001 -C "skip write certificate verify" \
5002 -S "skip parse certificate verify" \
5003 -s "x509_verify_cert() returned" \
5004 -s "! The certificate is not correctly signed by the trusted CA" \
5005 -s "! mbedtls_ssl_handshake returned" \
5006 -s "send alert level=2 message=48" \
5007 -c "! mbedtls_ssl_handshake returned" \
5008 -s "X509 - Certificate verification failed"
5009# We don't check that the client receives the alert because it might
5010# detect that its write end of the connection is closed and abort
5011# before reading the alert message.
5012
5013requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5014run_test "Authentication, CA callback: client cert not trusted, server required" \
5015 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
5016 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
5017 key_file=data_files/server5.key" \
5018 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005019 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005020 -S "skip write certificate request" \
5021 -C "skip parse certificate request" \
5022 -c "got a certificate request" \
5023 -C "skip write certificate" \
5024 -C "skip write certificate verify" \
5025 -S "skip parse certificate verify" \
5026 -s "x509_verify_cert() returned" \
5027 -s "! The certificate is not correctly signed by the trusted CA" \
5028 -s "! mbedtls_ssl_handshake returned" \
5029 -c "! mbedtls_ssl_handshake returned" \
5030 -s "X509 - Certificate verification failed"
5031
5032requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5033run_test "Authentication, CA callback: client badcert, server optional" \
5034 "$P_SRV ca_callback=1 debug_level=3 auth_mode=optional" \
5035 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
5036 key_file=data_files/server5.key" \
5037 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005038 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005039 -S "skip write certificate request" \
5040 -C "skip parse certificate request" \
5041 -c "got a certificate request" \
5042 -C "skip write certificate" \
5043 -C "skip write certificate verify" \
5044 -S "skip parse certificate verify" \
5045 -s "x509_verify_cert() returned" \
5046 -s "! The certificate is not correctly signed by the trusted CA" \
5047 -S "! mbedtls_ssl_handshake returned" \
5048 -C "! mbedtls_ssl_handshake returned" \
5049 -S "X509 - Certificate verification failed"
5050
Yuto Takano8a693ef2021-07-02 13:10:41 +01005051requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005052requires_full_size_output_buffer
5053requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5054run_test "Authentication, CA callback: server max_int chain, client default" \
5055 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
5056 key_file=data_files/dir-maxpath/09.key" \
5057 "$P_CLI ca_callback=1 debug_level=3 server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
5058 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005059 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005060 -C "X509 - A fatal error occurred"
5061
Yuto Takano8a693ef2021-07-02 13:10:41 +01005062requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005063requires_full_size_output_buffer
5064requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5065run_test "Authentication, CA callback: server max_int+1 chain, client default" \
5066 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5067 key_file=data_files/dir-maxpath/10.key" \
5068 "$P_CLI debug_level=3 ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
5069 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005070 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005071 -c "X509 - A fatal error occurred"
5072
Yuto Takano8a693ef2021-07-02 13:10:41 +01005073requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005074requires_full_size_output_buffer
5075requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5076run_test "Authentication, CA callback: server max_int+1 chain, client optional" \
5077 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5078 key_file=data_files/dir-maxpath/10.key" \
5079 "$P_CLI ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
5080 debug_level=3 auth_mode=optional" \
5081 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005082 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005083 -c "X509 - A fatal error occurred"
5084
Yuto Takano8a693ef2021-07-02 13:10:41 +01005085requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005086requires_full_size_output_buffer
5087requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5088run_test "Authentication, CA callback: client max_int+1 chain, server optional" \
5089 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
5090 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5091 key_file=data_files/dir-maxpath/10.key" \
5092 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005093 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005094 -s "X509 - A fatal error occurred"
5095
Yuto Takano8a693ef2021-07-02 13:10:41 +01005096requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005097requires_full_size_output_buffer
5098requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5099run_test "Authentication, CA callback: client max_int+1 chain, server required" \
5100 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
5101 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5102 key_file=data_files/dir-maxpath/10.key" \
5103 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005104 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005105 -s "X509 - A fatal error occurred"
5106
Yuto Takano8a693ef2021-07-02 13:10:41 +01005107requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005108requires_full_size_output_buffer
5109requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5110run_test "Authentication, CA callback: client max_int chain, server required" \
5111 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
5112 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
5113 key_file=data_files/dir-maxpath/09.key" \
5114 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005115 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005116 -S "X509 - A fatal error occurred"
5117
Shaun Case0e7791f2021-12-20 21:14:10 -08005118# Tests for certificate selection based on SHA version
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01005119
5120run_test "Certificate hash: client TLS 1.2 -> SHA-2" \
5121 "$P_SRV crt_file=data_files/server5.crt \
5122 key_file=data_files/server5.key \
5123 crt_file2=data_files/server5-sha1.crt \
5124 key_file2=data_files/server5.key" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00005125 "$P_CLI force_version=tls12" \
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01005126 0 \
5127 -c "signed using.*ECDSA with SHA256" \
5128 -C "signed using.*ECDSA with SHA1"
5129
5130run_test "Certificate hash: client TLS 1.1 -> SHA-1" \
5131 "$P_SRV crt_file=data_files/server5.crt \
5132 key_file=data_files/server5.key \
5133 crt_file2=data_files/server5-sha1.crt \
5134 key_file2=data_files/server5.key" \
5135 "$P_CLI force_version=tls1_1" \
5136 0 \
5137 -C "signed using.*ECDSA with SHA256" \
5138 -c "signed using.*ECDSA with SHA1"
5139
5140run_test "Certificate hash: client TLS 1.0 -> SHA-1" \
5141 "$P_SRV crt_file=data_files/server5.crt \
5142 key_file=data_files/server5.key \
5143 crt_file2=data_files/server5-sha1.crt \
5144 key_file2=data_files/server5.key" \
5145 "$P_CLI force_version=tls1" \
5146 0 \
5147 -C "signed using.*ECDSA with SHA256" \
5148 -c "signed using.*ECDSA with SHA1"
5149
5150run_test "Certificate hash: client TLS 1.1, no SHA-1 -> SHA-2 (order 1)" \
5151 "$P_SRV crt_file=data_files/server5.crt \
5152 key_file=data_files/server5.key \
5153 crt_file2=data_files/server6.crt \
5154 key_file2=data_files/server6.key" \
5155 "$P_CLI force_version=tls1_1" \
5156 0 \
5157 -c "serial number.*09" \
5158 -c "signed using.*ECDSA with SHA256" \
5159 -C "signed using.*ECDSA with SHA1"
5160
5161run_test "Certificate hash: client TLS 1.1, no SHA-1 -> SHA-2 (order 2)" \
5162 "$P_SRV crt_file=data_files/server6.crt \
5163 key_file=data_files/server6.key \
5164 crt_file2=data_files/server5.crt \
5165 key_file2=data_files/server5.key" \
5166 "$P_CLI force_version=tls1_1" \
5167 0 \
5168 -c "serial number.*0A" \
5169 -c "signed using.*ECDSA with SHA256" \
5170 -C "signed using.*ECDSA with SHA1"
5171
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005172# tests for SNI
5173
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005174run_test "SNI: no SNI callback" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005175 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005176 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005177 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005178 0 \
5179 -S "parse ServerName extension" \
5180 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
5181 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005182
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005183run_test "SNI: matching cert 1" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005184 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005185 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02005186 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005187 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005188 0 \
5189 -s "parse ServerName extension" \
5190 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5191 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005192
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005193run_test "SNI: matching cert 2" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005194 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005195 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02005196 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005197 "$P_CLI server_name=polarssl.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005198 0 \
5199 -s "parse ServerName extension" \
5200 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5201 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005202
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005203run_test "SNI: no matching cert" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005204 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005205 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02005206 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005207 "$P_CLI server_name=nonesuch.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005208 1 \
5209 -s "parse ServerName extension" \
5210 -s "ssl_sni_wrapper() returned" \
5211 -s "mbedtls_ssl_handshake returned" \
5212 -c "mbedtls_ssl_handshake returned" \
5213 -c "SSL - A fatal alert message was received from our peer"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005214
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02005215run_test "SNI: client auth no override: optional" \
5216 "$P_SRV debug_level=3 auth_mode=optional \
5217 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5218 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
5219 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005220 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02005221 -S "skip write certificate request" \
5222 -C "skip parse certificate request" \
5223 -c "got a certificate request" \
5224 -C "skip write certificate" \
5225 -C "skip write certificate verify" \
5226 -S "skip parse certificate verify"
5227
5228run_test "SNI: client auth override: none -> optional" \
5229 "$P_SRV debug_level=3 auth_mode=none \
5230 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5231 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
5232 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005233 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02005234 -S "skip write certificate request" \
5235 -C "skip parse certificate request" \
5236 -c "got a certificate request" \
5237 -C "skip write certificate" \
5238 -C "skip write certificate verify" \
5239 -S "skip parse certificate verify"
5240
5241run_test "SNI: client auth override: optional -> none" \
5242 "$P_SRV debug_level=3 auth_mode=optional \
5243 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5244 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
5245 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005246 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02005247 -s "skip write certificate request" \
5248 -C "skip parse certificate request" \
5249 -c "got no certificate request" \
5250 -c "skip write certificate" \
5251 -c "skip write certificate verify" \
5252 -s "skip parse certificate verify"
5253
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005254run_test "SNI: CA no override" \
5255 "$P_SRV debug_level=3 auth_mode=optional \
5256 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5257 ca_file=data_files/test-ca.crt \
5258 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
5259 "$P_CLI debug_level=3 server_name=localhost \
5260 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5261 1 \
5262 -S "skip write certificate request" \
5263 -C "skip parse certificate request" \
5264 -c "got a certificate request" \
5265 -C "skip write certificate" \
5266 -C "skip write certificate verify" \
5267 -S "skip parse certificate verify" \
5268 -s "x509_verify_cert() returned" \
5269 -s "! The certificate is not correctly signed by the trusted CA" \
5270 -S "The certificate has been revoked (is on a CRL)"
5271
5272run_test "SNI: CA override" \
5273 "$P_SRV debug_level=3 auth_mode=optional \
5274 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5275 ca_file=data_files/test-ca.crt \
5276 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
5277 "$P_CLI debug_level=3 server_name=localhost \
5278 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5279 0 \
5280 -S "skip write certificate request" \
5281 -C "skip parse certificate request" \
5282 -c "got a certificate request" \
5283 -C "skip write certificate" \
5284 -C "skip write certificate verify" \
5285 -S "skip parse certificate verify" \
5286 -S "x509_verify_cert() returned" \
5287 -S "! The certificate is not correctly signed by the trusted CA" \
5288 -S "The certificate has been revoked (is on a CRL)"
5289
5290run_test "SNI: CA override with CRL" \
5291 "$P_SRV debug_level=3 auth_mode=optional \
5292 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5293 ca_file=data_files/test-ca.crt \
5294 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
5295 "$P_CLI debug_level=3 server_name=localhost \
5296 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5297 1 \
5298 -S "skip write certificate request" \
5299 -C "skip parse certificate request" \
5300 -c "got a certificate request" \
5301 -C "skip write certificate" \
5302 -C "skip write certificate verify" \
5303 -S "skip parse certificate verify" \
5304 -s "x509_verify_cert() returned" \
5305 -S "! The certificate is not correctly signed by the trusted CA" \
5306 -s "The certificate has been revoked (is on a CRL)"
5307
Andres AG1a834452016-12-07 10:01:30 +00005308# Tests for SNI and DTLS
5309
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01005310run_test "SNI: DTLS, no SNI callback" \
5311 "$P_SRV debug_level=3 dtls=1 \
5312 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
5313 "$P_CLI server_name=localhost dtls=1" \
5314 0 \
5315 -S "parse ServerName extension" \
5316 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
5317 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
5318
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01005319run_test "SNI: DTLS, matching cert 1" \
Andres AG1a834452016-12-07 10:01:30 +00005320 "$P_SRV debug_level=3 dtls=1 \
5321 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5322 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
5323 "$P_CLI server_name=localhost dtls=1" \
5324 0 \
5325 -s "parse ServerName extension" \
5326 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5327 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
5328
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01005329run_test "SNI: DTLS, matching cert 2" \
5330 "$P_SRV debug_level=3 dtls=1 \
5331 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5332 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
5333 "$P_CLI server_name=polarssl.example dtls=1" \
5334 0 \
5335 -s "parse ServerName extension" \
5336 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5337 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
5338
5339run_test "SNI: DTLS, no matching cert" \
5340 "$P_SRV debug_level=3 dtls=1 \
5341 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5342 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
5343 "$P_CLI server_name=nonesuch.example dtls=1" \
5344 1 \
5345 -s "parse ServerName extension" \
5346 -s "ssl_sni_wrapper() returned" \
5347 -s "mbedtls_ssl_handshake returned" \
5348 -c "mbedtls_ssl_handshake returned" \
5349 -c "SSL - A fatal alert message was received from our peer"
5350
5351run_test "SNI: DTLS, client auth no override: optional" \
5352 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
5353 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5354 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
5355 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
5356 0 \
5357 -S "skip write certificate request" \
5358 -C "skip parse certificate request" \
5359 -c "got a certificate request" \
5360 -C "skip write certificate" \
5361 -C "skip write certificate verify" \
5362 -S "skip parse certificate verify"
5363
5364run_test "SNI: DTLS, client auth override: none -> optional" \
5365 "$P_SRV debug_level=3 auth_mode=none dtls=1 \
5366 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5367 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
5368 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
5369 0 \
5370 -S "skip write certificate request" \
5371 -C "skip parse certificate request" \
5372 -c "got a certificate request" \
5373 -C "skip write certificate" \
5374 -C "skip write certificate verify" \
5375 -S "skip parse certificate verify"
5376
5377run_test "SNI: DTLS, client auth override: optional -> none" \
5378 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
5379 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5380 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
5381 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
5382 0 \
5383 -s "skip write certificate request" \
5384 -C "skip parse certificate request" \
5385 -c "got no certificate request" \
5386 -c "skip write certificate" \
5387 -c "skip write certificate verify" \
5388 -s "skip parse certificate verify"
5389
5390run_test "SNI: DTLS, CA no override" \
5391 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
5392 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5393 ca_file=data_files/test-ca.crt \
5394 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
5395 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
5396 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5397 1 \
5398 -S "skip write certificate request" \
5399 -C "skip parse certificate request" \
5400 -c "got a certificate request" \
5401 -C "skip write certificate" \
5402 -C "skip write certificate verify" \
5403 -S "skip parse certificate verify" \
5404 -s "x509_verify_cert() returned" \
5405 -s "! The certificate is not correctly signed by the trusted CA" \
5406 -S "The certificate has been revoked (is on a CRL)"
5407
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01005408run_test "SNI: DTLS, CA override" \
Andres AG1a834452016-12-07 10:01:30 +00005409 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
5410 crt_file=data_files/server5.crt key_file=data_files/server5.key \
5411 ca_file=data_files/test-ca.crt \
5412 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
5413 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
5414 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5415 0 \
5416 -S "skip write certificate request" \
5417 -C "skip parse certificate request" \
5418 -c "got a certificate request" \
5419 -C "skip write certificate" \
5420 -C "skip write certificate verify" \
5421 -S "skip parse certificate verify" \
5422 -S "x509_verify_cert() returned" \
5423 -S "! The certificate is not correctly signed by the trusted CA" \
5424 -S "The certificate has been revoked (is on a CRL)"
5425
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01005426run_test "SNI: DTLS, CA override with CRL" \
Andres AG1a834452016-12-07 10:01:30 +00005427 "$P_SRV debug_level=3 auth_mode=optional \
5428 crt_file=data_files/server5.crt key_file=data_files/server5.key dtls=1 \
5429 ca_file=data_files/test-ca.crt \
5430 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
5431 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
5432 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
5433 1 \
5434 -S "skip write certificate request" \
5435 -C "skip parse certificate request" \
5436 -c "got a certificate request" \
5437 -C "skip write certificate" \
5438 -C "skip write certificate verify" \
5439 -S "skip parse certificate verify" \
5440 -s "x509_verify_cert() returned" \
5441 -S "! The certificate is not correctly signed by the trusted CA" \
5442 -s "The certificate has been revoked (is on a CRL)"
5443
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005444# Tests for non-blocking I/O: exercise a variety of handshake flows
5445
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005446run_test "Non-blocking I/O: basic handshake" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005447 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
5448 "$P_CLI nbio=2 tickets=0" \
5449 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005450 -S "mbedtls_ssl_handshake returned" \
5451 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005452 -c "Read from server: .* bytes read"
5453
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005454run_test "Non-blocking I/O: client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005455 "$P_SRV nbio=2 tickets=0 auth_mode=required" \
5456 "$P_CLI nbio=2 tickets=0" \
5457 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005458 -S "mbedtls_ssl_handshake returned" \
5459 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005460 -c "Read from server: .* bytes read"
5461
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005462run_test "Non-blocking I/O: ticket" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005463 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
5464 "$P_CLI nbio=2 tickets=1" \
5465 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005466 -S "mbedtls_ssl_handshake returned" \
5467 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005468 -c "Read from server: .* bytes read"
5469
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005470run_test "Non-blocking I/O: ticket + client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005471 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
5472 "$P_CLI nbio=2 tickets=1" \
5473 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005474 -S "mbedtls_ssl_handshake returned" \
5475 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005476 -c "Read from server: .* bytes read"
5477
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005478run_test "Non-blocking I/O: ticket + client auth + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005479 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
5480 "$P_CLI nbio=2 tickets=1 reconnect=1" \
5481 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005482 -S "mbedtls_ssl_handshake returned" \
5483 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005484 -c "Read from server: .* bytes read"
5485
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005486run_test "Non-blocking I/O: ticket + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005487 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
5488 "$P_CLI nbio=2 tickets=1 reconnect=1" \
5489 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005490 -S "mbedtls_ssl_handshake returned" \
5491 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005492 -c "Read from server: .* bytes read"
5493
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005494run_test "Non-blocking I/O: session-id resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005495 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
5496 "$P_CLI nbio=2 tickets=0 reconnect=1" \
5497 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005498 -S "mbedtls_ssl_handshake returned" \
5499 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01005500 -c "Read from server: .* bytes read"
5501
Hanno Becker00076712017-11-15 16:39:08 +00005502# Tests for event-driven I/O: exercise a variety of handshake flows
5503
5504run_test "Event-driven I/O: basic handshake" \
5505 "$P_SRV event=1 tickets=0 auth_mode=none" \
5506 "$P_CLI event=1 tickets=0" \
5507 0 \
5508 -S "mbedtls_ssl_handshake returned" \
5509 -C "mbedtls_ssl_handshake returned" \
5510 -c "Read from server: .* bytes read"
5511
5512run_test "Event-driven I/O: client auth" \
5513 "$P_SRV event=1 tickets=0 auth_mode=required" \
5514 "$P_CLI event=1 tickets=0" \
5515 0 \
5516 -S "mbedtls_ssl_handshake returned" \
5517 -C "mbedtls_ssl_handshake returned" \
5518 -c "Read from server: .* bytes read"
5519
5520run_test "Event-driven I/O: ticket" \
5521 "$P_SRV event=1 tickets=1 auth_mode=none" \
5522 "$P_CLI event=1 tickets=1" \
5523 0 \
5524 -S "mbedtls_ssl_handshake returned" \
5525 -C "mbedtls_ssl_handshake returned" \
5526 -c "Read from server: .* bytes read"
5527
5528run_test "Event-driven I/O: ticket + client auth" \
5529 "$P_SRV event=1 tickets=1 auth_mode=required" \
5530 "$P_CLI event=1 tickets=1" \
5531 0 \
5532 -S "mbedtls_ssl_handshake returned" \
5533 -C "mbedtls_ssl_handshake returned" \
5534 -c "Read from server: .* bytes read"
5535
5536run_test "Event-driven I/O: ticket + client auth + resume" \
5537 "$P_SRV event=1 tickets=1 auth_mode=required" \
5538 "$P_CLI event=1 tickets=1 reconnect=1" \
5539 0 \
5540 -S "mbedtls_ssl_handshake returned" \
5541 -C "mbedtls_ssl_handshake returned" \
5542 -c "Read from server: .* bytes read"
5543
5544run_test "Event-driven I/O: ticket + resume" \
5545 "$P_SRV event=1 tickets=1 auth_mode=none" \
5546 "$P_CLI event=1 tickets=1 reconnect=1" \
5547 0 \
5548 -S "mbedtls_ssl_handshake returned" \
5549 -C "mbedtls_ssl_handshake returned" \
5550 -c "Read from server: .* bytes read"
5551
5552run_test "Event-driven I/O: session-id resume" \
5553 "$P_SRV event=1 tickets=0 auth_mode=none" \
5554 "$P_CLI event=1 tickets=0 reconnect=1" \
5555 0 \
5556 -S "mbedtls_ssl_handshake returned" \
5557 -C "mbedtls_ssl_handshake returned" \
5558 -c "Read from server: .* bytes read"
5559
Hanno Becker6a33f592018-03-13 11:38:46 +00005560run_test "Event-driven I/O, DTLS: basic handshake" \
5561 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
5562 "$P_CLI dtls=1 event=1 tickets=0" \
5563 0 \
5564 -c "Read from server: .* bytes read"
5565
5566run_test "Event-driven I/O, DTLS: client auth" \
5567 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
5568 "$P_CLI dtls=1 event=1 tickets=0" \
5569 0 \
5570 -c "Read from server: .* bytes read"
5571
5572run_test "Event-driven I/O, DTLS: ticket" \
5573 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
5574 "$P_CLI dtls=1 event=1 tickets=1" \
5575 0 \
5576 -c "Read from server: .* bytes read"
5577
5578run_test "Event-driven I/O, DTLS: ticket + client auth" \
5579 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
5580 "$P_CLI dtls=1 event=1 tickets=1" \
5581 0 \
5582 -c "Read from server: .* bytes read"
5583
5584run_test "Event-driven I/O, DTLS: ticket + client auth + resume" \
5585 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01005586 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00005587 0 \
5588 -c "Read from server: .* bytes read"
5589
5590run_test "Event-driven I/O, DTLS: ticket + resume" \
5591 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01005592 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00005593 0 \
5594 -c "Read from server: .* bytes read"
5595
5596run_test "Event-driven I/O, DTLS: session-id resume" \
5597 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01005598 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00005599 0 \
5600 -c "Read from server: .* bytes read"
Hanno Beckerbc6c1102018-03-13 11:39:40 +00005601
5602# This test demonstrates the need for the mbedtls_ssl_check_pending function.
5603# During session resumption, the client will send its ApplicationData record
5604# within the same datagram as the Finished messages. In this situation, the
5605# server MUST NOT idle on the underlying transport after handshake completion,
5606# because the ApplicationData request has already been queued internally.
5607run_test "Event-driven I/O, DTLS: session-id resume, UDP packing" \
Hanno Becker8d832182018-03-15 10:14:19 +00005608 -p "$P_PXY pack=50" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00005609 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01005610 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00005611 0 \
5612 -c "Read from server: .* bytes read"
5613
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005614# Tests for version negotiation
5615
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005616requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005617run_test "Version check: all -> 1.2" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005618 "$P_SRV" \
5619 "$P_CLI" \
5620 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005621 -S "mbedtls_ssl_handshake returned" \
5622 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005623 -s "Protocol is TLSv1.2" \
5624 -c "Protocol is TLSv1.2"
5625
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005626requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005627run_test "Version check: cli max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005628 "$P_SRV" \
5629 "$P_CLI max_version=tls1_1" \
5630 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005631 -S "mbedtls_ssl_handshake returned" \
5632 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005633 -s "Protocol is TLSv1.1" \
5634 -c "Protocol is TLSv1.1"
5635
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005636requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005637run_test "Version check: srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005638 "$P_SRV max_version=tls1_1" \
5639 "$P_CLI" \
5640 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005641 -S "mbedtls_ssl_handshake returned" \
5642 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005643 -s "Protocol is TLSv1.1" \
5644 -c "Protocol is TLSv1.1"
5645
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005646requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005647run_test "Version check: cli+srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005648 "$P_SRV max_version=tls1_1" \
5649 "$P_CLI max_version=tls1_1" \
5650 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005651 -S "mbedtls_ssl_handshake returned" \
5652 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005653 -s "Protocol is TLSv1.1" \
5654 -c "Protocol is TLSv1.1"
5655
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005656requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005657run_test "Version check: cli max 1.1, srv min 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005658 "$P_SRV min_version=tls1_1" \
5659 "$P_CLI max_version=tls1_1" \
5660 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005661 -S "mbedtls_ssl_handshake returned" \
5662 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005663 -s "Protocol is TLSv1.1" \
5664 -c "Protocol is TLSv1.1"
5665
Gilles Peskinedf4ad902022-04-08 15:14:38 +02005666requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005667run_test "Version check: cli min 1.1, srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005668 "$P_SRV max_version=tls1_1" \
5669 "$P_CLI min_version=tls1_1" \
5670 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005671 -S "mbedtls_ssl_handshake returned" \
5672 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005673 -s "Protocol is TLSv1.1" \
5674 -c "Protocol is TLSv1.1"
5675
Gilles Peskinebcb2ab02022-04-09 00:11:16 +02005676requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
5677requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005678run_test "Version check: cli min 1.2, srv max 1.1 -> fail" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005679 "$P_SRV max_version=tls1_1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00005680 "$P_CLI min_version=tls12" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005681 1 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005682 -s "mbedtls_ssl_handshake returned" \
5683 -c "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005684 -c "SSL - Handshake protocol not within min/max boundaries"
5685
Gilles Peskinebcb2ab02022-04-09 00:11:16 +02005686requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
5687requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005688run_test "Version check: srv min 1.2, cli max 1.1 -> fail" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00005689 "$P_SRV min_version=tls12" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005690 "$P_CLI max_version=tls1_1" \
5691 1 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005692 -s "mbedtls_ssl_handshake returned" \
5693 -c "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01005694 -s "SSL - Handshake protocol not within min/max boundaries"
5695
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005696# Tests for ALPN extension
5697
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005698run_test "ALPN: none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005699 "$P_SRV debug_level=3" \
5700 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005701 0 \
5702 -C "client hello, adding alpn extension" \
5703 -S "found alpn extension" \
5704 -C "got an alert message, type: \\[2:120]" \
5705 -S "server hello, adding alpn extension" \
5706 -C "found alpn extension " \
5707 -C "Application Layer Protocol is" \
5708 -S "Application Layer Protocol is"
5709
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005710run_test "ALPN: client only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005711 "$P_SRV debug_level=3" \
5712 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005713 0 \
5714 -c "client hello, adding alpn extension" \
5715 -s "found alpn extension" \
5716 -C "got an alert message, type: \\[2:120]" \
5717 -S "server hello, adding alpn extension" \
5718 -C "found alpn extension " \
5719 -c "Application Layer Protocol is (none)" \
5720 -S "Application Layer Protocol is"
5721
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005722run_test "ALPN: server only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005723 "$P_SRV debug_level=3 alpn=abc,1234" \
5724 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005725 0 \
5726 -C "client hello, adding alpn extension" \
5727 -S "found alpn extension" \
5728 -C "got an alert message, type: \\[2:120]" \
5729 -S "server hello, adding alpn extension" \
5730 -C "found alpn extension " \
5731 -C "Application Layer Protocol is" \
5732 -s "Application Layer Protocol is (none)"
5733
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005734run_test "ALPN: both, common cli1-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005735 "$P_SRV debug_level=3 alpn=abc,1234" \
5736 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005737 0 \
5738 -c "client hello, adding alpn extension" \
5739 -s "found alpn extension" \
5740 -C "got an alert message, type: \\[2:120]" \
5741 -s "server hello, adding alpn extension" \
5742 -c "found alpn extension" \
5743 -c "Application Layer Protocol is abc" \
5744 -s "Application Layer Protocol is abc"
5745
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005746run_test "ALPN: both, common cli2-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005747 "$P_SRV debug_level=3 alpn=abc,1234" \
5748 "$P_CLI debug_level=3 alpn=1234,abc" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005749 0 \
5750 -c "client hello, adding alpn extension" \
5751 -s "found alpn extension" \
5752 -C "got an alert message, type: \\[2:120]" \
5753 -s "server hello, adding alpn extension" \
5754 -c "found alpn extension" \
5755 -c "Application Layer Protocol is abc" \
5756 -s "Application Layer Protocol is abc"
5757
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005758run_test "ALPN: both, common cli1-srv2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005759 "$P_SRV debug_level=3 alpn=abc,1234" \
5760 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005761 0 \
5762 -c "client hello, adding alpn extension" \
5763 -s "found alpn extension" \
5764 -C "got an alert message, type: \\[2:120]" \
5765 -s "server hello, adding alpn extension" \
5766 -c "found alpn extension" \
5767 -c "Application Layer Protocol is 1234" \
5768 -s "Application Layer Protocol is 1234"
5769
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005770run_test "ALPN: both, no common" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005771 "$P_SRV debug_level=3 alpn=abc,123" \
5772 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02005773 1 \
5774 -c "client hello, adding alpn extension" \
5775 -s "found alpn extension" \
5776 -c "got an alert message, type: \\[2:120]" \
5777 -S "server hello, adding alpn extension" \
5778 -C "found alpn extension" \
5779 -C "Application Layer Protocol is 1234" \
5780 -S "Application Layer Protocol is 1234"
5781
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +02005782
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005783# Tests for keyUsage in leaf certificates, part 1:
5784# server-side certificate/suite selection
5785
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005786run_test "keyUsage srv: RSA, digitalSignature -> (EC)DHE-RSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005787 "$P_SRV key_file=data_files/server2.key \
5788 crt_file=data_files/server2.ku-ds.crt" \
5789 "$P_CLI" \
5790 0 \
Manuel Pégourié-Gonnard17cde5f2014-05-22 14:42:39 +02005791 -c "Ciphersuite is TLS-[EC]*DHE-RSA-WITH-"
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005792
5793
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005794run_test "keyUsage srv: RSA, keyEncipherment -> RSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005795 "$P_SRV key_file=data_files/server2.key \
5796 crt_file=data_files/server2.ku-ke.crt" \
5797 "$P_CLI" \
5798 0 \
5799 -c "Ciphersuite is TLS-RSA-WITH-"
5800
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005801run_test "keyUsage srv: RSA, keyAgreement -> fail" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02005802 "$P_SRV key_file=data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005803 crt_file=data_files/server2.ku-ka.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02005804 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005805 1 \
5806 -C "Ciphersuite is "
5807
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005808run_test "keyUsage srv: ECDSA, digitalSignature -> ECDHE-ECDSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005809 "$P_SRV key_file=data_files/server5.key \
5810 crt_file=data_files/server5.ku-ds.crt" \
5811 "$P_CLI" \
5812 0 \
5813 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-"
5814
5815
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005816run_test "keyUsage srv: ECDSA, keyAgreement -> ECDH-" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005817 "$P_SRV key_file=data_files/server5.key \
5818 crt_file=data_files/server5.ku-ka.crt" \
5819 "$P_CLI" \
5820 0 \
5821 -c "Ciphersuite is TLS-ECDH-"
5822
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005823run_test "keyUsage srv: ECDSA, keyEncipherment -> fail" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02005824 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005825 crt_file=data_files/server5.ku-ke.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02005826 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005827 1 \
5828 -C "Ciphersuite is "
5829
5830# Tests for keyUsage in leaf certificates, part 2:
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005831# client-side checking of server cert
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005832
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005833run_test "keyUsage cli: DigitalSignature+KeyEncipherment, RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005834 "$O_SRV -key data_files/server2.key \
5835 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005836 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005837 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
5838 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005839 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005840 -C "Processing of the Certificate handshake message failed" \
5841 -c "Ciphersuite is TLS-"
5842
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005843run_test "keyUsage cli: DigitalSignature+KeyEncipherment, DHE-RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005844 "$O_SRV -key data_files/server2.key \
5845 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005846 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005847 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
5848 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005849 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005850 -C "Processing of the Certificate handshake message failed" \
5851 -c "Ciphersuite is TLS-"
5852
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005853run_test "keyUsage cli: KeyEncipherment, RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005854 "$O_SRV -key data_files/server2.key \
5855 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005856 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005857 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
5858 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005859 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005860 -C "Processing of the Certificate handshake message failed" \
5861 -c "Ciphersuite is TLS-"
5862
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005863run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005864 "$O_SRV -key data_files/server2.key \
5865 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005866 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005867 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
5868 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005869 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005870 -c "Processing of the Certificate handshake message failed" \
5871 -C "Ciphersuite is TLS-"
5872
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01005873run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail, soft" \
5874 "$O_SRV -key data_files/server2.key \
5875 -cert data_files/server2.ku-ke.crt" \
5876 "$P_CLI debug_level=1 auth_mode=optional \
5877 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
5878 0 \
5879 -c "bad certificate (usage extensions)" \
5880 -C "Processing of the Certificate handshake message failed" \
5881 -c "Ciphersuite is TLS-" \
5882 -c "! Usage does not match the keyUsage extension"
5883
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005884run_test "keyUsage cli: DigitalSignature, DHE-RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005885 "$O_SRV -key data_files/server2.key \
5886 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005887 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005888 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
5889 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005890 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005891 -C "Processing of the Certificate handshake message failed" \
5892 -c "Ciphersuite is TLS-"
5893
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005894run_test "keyUsage cli: DigitalSignature, RSA: fail" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005895 "$O_SRV -key data_files/server2.key \
5896 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005897 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005898 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
5899 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005900 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02005901 -c "Processing of the Certificate handshake message failed" \
5902 -C "Ciphersuite is TLS-"
5903
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01005904run_test "keyUsage cli: DigitalSignature, RSA: fail, soft" \
5905 "$O_SRV -key data_files/server2.key \
5906 -cert data_files/server2.ku-ds.crt" \
5907 "$P_CLI debug_level=1 auth_mode=optional \
5908 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
5909 0 \
5910 -c "bad certificate (usage extensions)" \
5911 -C "Processing of the Certificate handshake message failed" \
5912 -c "Ciphersuite is TLS-" \
5913 -c "! Usage does not match the keyUsage extension"
5914
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005915# Tests for keyUsage in leaf certificates, part 3:
5916# server-side checking of client cert
5917
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005918run_test "keyUsage cli-auth: RSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005919 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005920 "$O_CLI -key data_files/server2.key \
5921 -cert data_files/server2.ku-ds.crt" \
5922 0 \
5923 -S "bad certificate (usage extensions)" \
5924 -S "Processing of the Certificate handshake message failed"
5925
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005926run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005927 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005928 "$O_CLI -key data_files/server2.key \
5929 -cert data_files/server2.ku-ke.crt" \
5930 0 \
5931 -s "bad certificate (usage extensions)" \
5932 -S "Processing of the Certificate handshake message failed"
5933
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005934run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005935 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005936 "$O_CLI -key data_files/server2.key \
5937 -cert data_files/server2.ku-ke.crt" \
5938 1 \
5939 -s "bad certificate (usage extensions)" \
5940 -s "Processing of the Certificate handshake message failed"
5941
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005942run_test "keyUsage cli-auth: ECDSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005943 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005944 "$O_CLI -key data_files/server5.key \
5945 -cert data_files/server5.ku-ds.crt" \
5946 0 \
5947 -S "bad certificate (usage extensions)" \
5948 -S "Processing of the Certificate handshake message failed"
5949
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005950run_test "keyUsage cli-auth: ECDSA, KeyAgreement: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005951 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02005952 "$O_CLI -key data_files/server5.key \
5953 -cert data_files/server5.ku-ka.crt" \
5954 0 \
5955 -s "bad certificate (usage extensions)" \
5956 -S "Processing of the Certificate handshake message failed"
5957
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005958# Tests for extendedKeyUsage, part 1: server-side certificate/suite selection
5959
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005960run_test "extKeyUsage srv: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005961 "$P_SRV key_file=data_files/server5.key \
5962 crt_file=data_files/server5.eku-srv.crt" \
5963 "$P_CLI" \
5964 0
5965
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005966run_test "extKeyUsage srv: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005967 "$P_SRV key_file=data_files/server5.key \
5968 crt_file=data_files/server5.eku-srv.crt" \
5969 "$P_CLI" \
5970 0
5971
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005972run_test "extKeyUsage srv: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005973 "$P_SRV key_file=data_files/server5.key \
5974 crt_file=data_files/server5.eku-cs_any.crt" \
5975 "$P_CLI" \
5976 0
5977
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005978run_test "extKeyUsage srv: codeSign -> fail" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02005979 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005980 crt_file=data_files/server5.eku-cli.crt" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02005981 "$P_CLI" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005982 1
5983
5984# Tests for extendedKeyUsage, part 2: client-side checking of server cert
5985
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005986run_test "extKeyUsage cli: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005987 "$O_SRV -key data_files/server5.key \
5988 -cert data_files/server5.eku-srv.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005989 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005990 0 \
5991 -C "bad certificate (usage extensions)" \
5992 -C "Processing of the Certificate handshake message failed" \
5993 -c "Ciphersuite is TLS-"
5994
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005995run_test "extKeyUsage cli: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005996 "$O_SRV -key data_files/server5.key \
5997 -cert data_files/server5.eku-srv_cli.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005998 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02005999 0 \
6000 -C "bad certificate (usage extensions)" \
6001 -C "Processing of the Certificate handshake message failed" \
6002 -c "Ciphersuite is TLS-"
6003
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006004run_test "extKeyUsage cli: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006005 "$O_SRV -key data_files/server5.key \
6006 -cert data_files/server5.eku-cs_any.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006007 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006008 0 \
6009 -C "bad certificate (usage extensions)" \
6010 -C "Processing of the Certificate handshake message failed" \
6011 -c "Ciphersuite is TLS-"
6012
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006013run_test "extKeyUsage cli: codeSign -> fail" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006014 "$O_SRV -key data_files/server5.key \
6015 -cert data_files/server5.eku-cs.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006016 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006017 1 \
6018 -c "bad certificate (usage extensions)" \
6019 -c "Processing of the Certificate handshake message failed" \
6020 -C "Ciphersuite is TLS-"
6021
6022# Tests for extendedKeyUsage, part 3: server-side checking of client cert
6023
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006024run_test "extKeyUsage cli-auth: clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006025 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006026 "$O_CLI -key data_files/server5.key \
6027 -cert data_files/server5.eku-cli.crt" \
6028 0 \
6029 -S "bad certificate (usage extensions)" \
6030 -S "Processing of the Certificate handshake message failed"
6031
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006032run_test "extKeyUsage cli-auth: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006033 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006034 "$O_CLI -key data_files/server5.key \
6035 -cert data_files/server5.eku-srv_cli.crt" \
6036 0 \
6037 -S "bad certificate (usage extensions)" \
6038 -S "Processing of the Certificate handshake message failed"
6039
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006040run_test "extKeyUsage cli-auth: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006041 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006042 "$O_CLI -key data_files/server5.key \
6043 -cert data_files/server5.eku-cs_any.crt" \
6044 0 \
6045 -S "bad certificate (usage extensions)" \
6046 -S "Processing of the Certificate handshake message failed"
6047
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006048run_test "extKeyUsage cli-auth: codeSign -> fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006049 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006050 "$O_CLI -key data_files/server5.key \
6051 -cert data_files/server5.eku-cs.crt" \
6052 0 \
6053 -s "bad certificate (usage extensions)" \
6054 -S "Processing of the Certificate handshake message failed"
6055
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006056run_test "extKeyUsage cli-auth: codeSign -> fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006057 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006058 "$O_CLI -key data_files/server5.key \
6059 -cert data_files/server5.eku-cs.crt" \
6060 1 \
6061 -s "bad certificate (usage extensions)" \
6062 -s "Processing of the Certificate handshake message failed"
6063
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006064# Tests for DHM parameters loading
6065
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006066run_test "DHM parameters: reference" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006067 "$P_SRV" \
6068 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6069 debug_level=3" \
6070 0 \
6071 -c "value of 'DHM: P ' (2048 bits)" \
Hanno Becker13be9902017-09-27 17:17:30 +01006072 -c "value of 'DHM: G ' (2 bits)"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006073
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006074run_test "DHM parameters: other parameters" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006075 "$P_SRV dhm_file=data_files/dhparams.pem" \
6076 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6077 debug_level=3" \
6078 0 \
6079 -c "value of 'DHM: P ' (1024 bits)" \
6080 -c "value of 'DHM: G ' (2 bits)"
6081
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02006082# Tests for DHM client-side size checking
6083
6084run_test "DHM size: server default, client default, OK" \
6085 "$P_SRV" \
6086 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6087 debug_level=1" \
6088 0 \
6089 -C "DHM prime too short:"
6090
6091run_test "DHM size: server default, client 2048, OK" \
6092 "$P_SRV" \
6093 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6094 debug_level=1 dhmlen=2048" \
6095 0 \
6096 -C "DHM prime too short:"
6097
6098run_test "DHM size: server 1024, client default, OK" \
6099 "$P_SRV dhm_file=data_files/dhparams.pem" \
6100 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6101 debug_level=1" \
6102 0 \
6103 -C "DHM prime too short:"
6104
Gilles Peskinec6b0d962020-12-08 22:31:52 +01006105run_test "DHM size: server 999, client 999, OK" \
6106 "$P_SRV dhm_file=data_files/dh.999.pem" \
6107 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6108 debug_level=1 dhmlen=999" \
6109 0 \
6110 -C "DHM prime too short:"
6111
6112run_test "DHM size: server 1000, client 1000, OK" \
6113 "$P_SRV dhm_file=data_files/dh.1000.pem" \
6114 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6115 debug_level=1 dhmlen=1000" \
6116 0 \
6117 -C "DHM prime too short:"
6118
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02006119run_test "DHM size: server 1000, client default, rejected" \
6120 "$P_SRV dhm_file=data_files/dh.1000.pem" \
6121 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6122 debug_level=1" \
6123 1 \
6124 -c "DHM prime too short:"
6125
Gilles Peskinec6b0d962020-12-08 22:31:52 +01006126run_test "DHM size: server 1000, client 1001, rejected" \
6127 "$P_SRV dhm_file=data_files/dh.1000.pem" \
6128 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6129 debug_level=1 dhmlen=1001" \
6130 1 \
6131 -c "DHM prime too short:"
6132
6133run_test "DHM size: server 999, client 1000, rejected" \
6134 "$P_SRV dhm_file=data_files/dh.999.pem" \
6135 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6136 debug_level=1 dhmlen=1000" \
6137 1 \
6138 -c "DHM prime too short:"
6139
6140run_test "DHM size: server 998, client 999, rejected" \
6141 "$P_SRV dhm_file=data_files/dh.998.pem" \
6142 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6143 debug_level=1 dhmlen=999" \
6144 1 \
6145 -c "DHM prime too short:"
6146
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02006147run_test "DHM size: server default, client 2049, rejected" \
6148 "$P_SRV" \
6149 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
6150 debug_level=1 dhmlen=2049" \
6151 1 \
6152 -c "DHM prime too short:"
6153
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006154# Tests for PSK callback
6155
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006156run_test "PSK callback: psk, no callback" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006157 "$P_SRV psk=abc123 psk_identity=foo" \
6158 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6159 psk_identity=foo psk=abc123" \
6160 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006161 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02006162 -S "SSL - Unknown identity received" \
6163 -S "SSL - Verification of the message MAC failed"
6164
Hanno Beckerf7027512018-10-23 15:27:39 +01006165requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6166run_test "PSK callback: opaque psk on client, no callback" \
6167 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006168 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00006169 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01006170 0 \
6171 -c "skip PMS generation for opaque PSK"\
6172 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006173 -C "session hash for extended master secret"\
6174 -S "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01006175 -S "SSL - None of the common ciphersuites is usable" \
6176 -S "SSL - Unknown identity received" \
6177 -S "SSL - Verification of the message MAC failed"
6178
6179requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6180run_test "PSK callback: opaque psk on client, no callback, SHA-384" \
6181 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006182 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00006183 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01006184 0 \
6185 -c "skip PMS generation for opaque PSK"\
6186 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006187 -C "session hash for extended master secret"\
6188 -S "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01006189 -S "SSL - None of the common ciphersuites is usable" \
6190 -S "SSL - Unknown identity received" \
6191 -S "SSL - Verification of the message MAC failed"
6192
6193requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6194run_test "PSK callback: opaque psk on client, no callback, EMS" \
6195 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006196 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00006197 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01006198 0 \
6199 -c "skip PMS generation for opaque PSK"\
6200 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006201 -c "session hash for extended master secret"\
6202 -s "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01006203 -S "SSL - None of the common ciphersuites is usable" \
6204 -S "SSL - Unknown identity received" \
6205 -S "SSL - Verification of the message MAC failed"
6206
6207requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6208run_test "PSK callback: opaque psk on client, no callback, SHA-384, EMS" \
6209 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006210 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00006211 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01006212 0 \
6213 -c "skip PMS generation for opaque PSK"\
6214 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006215 -c "session hash for extended master secret"\
6216 -s "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01006217 -S "SSL - None of the common ciphersuites is usable" \
6218 -S "SSL - Unknown identity received" \
6219 -S "SSL - Verification of the message MAC failed"
6220
Hanno Becker28c79dc2018-10-26 13:15:08 +01006221requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6222run_test "PSK callback: raw psk on client, static opaque on server, no callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006223 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6224 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006225 psk_identity=foo psk=abc123" \
6226 0 \
6227 -C "skip PMS generation for opaque PSK"\
6228 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006229 -C "session hash for extended master secret"\
6230 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006231 -S "SSL - None of the common ciphersuites is usable" \
6232 -S "SSL - Unknown identity received" \
6233 -S "SSL - Verification of the message MAC failed"
6234
6235requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6236run_test "PSK callback: raw psk on client, static opaque on server, no callback, SHA-384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006237 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
6238 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006239 psk_identity=foo psk=abc123" \
6240 0 \
6241 -C "skip PMS generation for opaque PSK"\
6242 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006243 -C "session hash for extended master secret"\
6244 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006245 -S "SSL - None of the common ciphersuites is usable" \
6246 -S "SSL - Unknown identity received" \
6247 -S "SSL - Verification of the message MAC failed"
6248
6249requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6250run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006251 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006252 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006253 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006254 psk_identity=foo psk=abc123 extended_ms=1" \
6255 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006256 -c "session hash for extended master secret"\
6257 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006258 -C "skip PMS generation for opaque PSK"\
6259 -s "skip PMS generation for opaque PSK"\
6260 -S "SSL - None of the common ciphersuites is usable" \
6261 -S "SSL - Unknown identity received" \
6262 -S "SSL - Verification of the message MAC failed"
6263
6264requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6265run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS, SHA384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006266 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006267 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006268 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006269 psk_identity=foo psk=abc123 extended_ms=1" \
6270 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006271 -c "session hash for extended master secret"\
6272 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006273 -C "skip PMS generation for opaque PSK"\
6274 -s "skip PMS generation for opaque PSK"\
6275 -S "SSL - None of the common ciphersuites is usable" \
6276 -S "SSL - Unknown identity received" \
6277 -S "SSL - Verification of the message MAC failed"
6278
6279requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6280run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006281 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6282 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006283 psk_identity=def psk=beef" \
6284 0 \
6285 -C "skip PMS generation for opaque PSK"\
6286 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006287 -C "session hash for extended master secret"\
6288 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006289 -S "SSL - None of the common ciphersuites is usable" \
6290 -S "SSL - Unknown identity received" \
6291 -S "SSL - Verification of the message MAC failed"
6292
6293requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6294run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, SHA-384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006295 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
6296 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006297 psk_identity=def psk=beef" \
6298 0 \
6299 -C "skip PMS generation for opaque PSK"\
6300 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006301 -C "session hash for extended master secret"\
6302 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006303 -S "SSL - None of the common ciphersuites is usable" \
6304 -S "SSL - Unknown identity received" \
6305 -S "SSL - Verification of the message MAC failed"
6306
6307requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6308run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006309 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006310 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006311 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006312 psk_identity=abc psk=dead extended_ms=1" \
6313 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006314 -c "session hash for extended master secret"\
6315 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006316 -C "skip PMS generation for opaque PSK"\
6317 -s "skip PMS generation for opaque PSK"\
6318 -S "SSL - None of the common ciphersuites is usable" \
6319 -S "SSL - Unknown identity received" \
6320 -S "SSL - Verification of the message MAC failed"
6321
6322requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6323run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS, SHA384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006324 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006325 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006326 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006327 psk_identity=abc psk=dead extended_ms=1" \
6328 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006329 -c "session hash for extended master secret"\
6330 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006331 -C "skip PMS generation for opaque PSK"\
6332 -s "skip PMS generation for opaque PSK"\
6333 -S "SSL - None of the common ciphersuites is usable" \
6334 -S "SSL - Unknown identity received" \
6335 -S "SSL - Verification of the message MAC failed"
6336
6337requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6338run_test "PSK callback: raw psk on client, mismatching static raw PSK on server, opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006339 "$P_SRV extended_ms=0 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6340 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006341 psk_identity=def psk=beef" \
6342 0 \
6343 -C "skip PMS generation for opaque PSK"\
6344 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006345 -C "session hash for extended master secret"\
6346 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006347 -S "SSL - None of the common ciphersuites is usable" \
6348 -S "SSL - Unknown identity received" \
6349 -S "SSL - Verification of the message MAC failed"
6350
6351requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6352run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006353 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6354 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006355 psk_identity=def psk=beef" \
6356 0 \
6357 -C "skip PMS generation for opaque PSK"\
6358 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006359 -C "session hash for extended master secret"\
6360 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006361 -S "SSL - None of the common ciphersuites is usable" \
6362 -S "SSL - Unknown identity received" \
6363 -S "SSL - Verification of the message MAC failed"
6364
6365requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6366run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, raw PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006367 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6368 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006369 psk_identity=def psk=beef" \
6370 0 \
6371 -C "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006372 -C "session hash for extended master secret"\
6373 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006374 -S "SSL - None of the common ciphersuites is usable" \
6375 -S "SSL - Unknown identity received" \
6376 -S "SSL - Verification of the message MAC failed"
6377
6378requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6379run_test "PSK callback: raw psk on client, id-matching but wrong raw PSK on server, opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006380 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6381 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006382 psk_identity=def psk=beef" \
6383 0 \
6384 -C "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02006385 -C "session hash for extended master secret"\
6386 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01006387 -S "SSL - None of the common ciphersuites is usable" \
6388 -S "SSL - Unknown identity received" \
6389 -S "SSL - Verification of the message MAC failed"
6390
6391requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
6392run_test "PSK callback: raw psk on client, matching opaque PSK on server, wrong opaque PSK from callback" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006393 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=beef debug_level=3 psk_list=abc,dead,def,abc123 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
6394 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01006395 psk_identity=def psk=beef" \
6396 1 \
6397 -s "SSL - Verification of the message MAC failed"
6398
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006399run_test "PSK callback: no psk, no callback" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02006400 "$P_SRV" \
6401 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6402 psk_identity=foo psk=abc123" \
6403 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006404 -s "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006405 -S "SSL - Unknown identity received" \
6406 -S "SSL - Verification of the message MAC failed"
6407
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006408run_test "PSK callback: callback overrides other settings" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006409 "$P_SRV psk=abc123 psk_identity=foo psk_list=abc,dead,def,beef" \
6410 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6411 psk_identity=foo psk=abc123" \
6412 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006413 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006414 -s "SSL - Unknown identity received" \
6415 -S "SSL - Verification of the message MAC failed"
6416
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006417run_test "PSK callback: first id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006418 "$P_SRV psk_list=abc,dead,def,beef" \
6419 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6420 psk_identity=abc psk=dead" \
6421 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006422 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006423 -S "SSL - Unknown identity received" \
6424 -S "SSL - Verification of the message MAC failed"
6425
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006426run_test "PSK callback: second id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006427 "$P_SRV psk_list=abc,dead,def,beef" \
6428 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6429 psk_identity=def psk=beef" \
6430 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006431 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006432 -S "SSL - Unknown identity received" \
6433 -S "SSL - Verification of the message MAC failed"
6434
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006435run_test "PSK callback: no match" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006436 "$P_SRV psk_list=abc,dead,def,beef" \
6437 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6438 psk_identity=ghi psk=beef" \
6439 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006440 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006441 -s "SSL - Unknown identity received" \
6442 -S "SSL - Verification of the message MAC failed"
6443
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006444run_test "PSK callback: wrong key" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006445 "$P_SRV psk_list=abc,dead,def,beef" \
6446 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
6447 psk_identity=abc psk=beef" \
6448 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01006449 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02006450 -S "SSL - Unknown identity received" \
6451 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02006452
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006453# Tests for EC J-PAKE
6454
Hanno Beckerfa452c42020-08-14 15:42:49 +01006455requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006456run_test "ECJPAKE: client not configured" \
6457 "$P_SRV debug_level=3" \
6458 "$P_CLI debug_level=3" \
6459 0 \
Hanno Beckeree63af62020-08-14 15:41:23 +01006460 -C "add ciphersuite: 0xc0ff" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006461 -C "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006462 -S "found ecjpake kkpp extension" \
6463 -S "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006464 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02006465 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02006466 -C "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006467 -S "None of the common ciphersuites is usable"
6468
Hanno Beckerfa452c42020-08-14 15:42:49 +01006469requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006470run_test "ECJPAKE: server not configured" \
6471 "$P_SRV debug_level=3" \
6472 "$P_CLI debug_level=3 ecjpake_pw=bla \
6473 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6474 1 \
Hanno Beckeree63af62020-08-14 15:41:23 +01006475 -c "add ciphersuite: 0xc0ff" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006476 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006477 -s "found ecjpake kkpp extension" \
6478 -s "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006479 -s "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02006480 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02006481 -C "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02006482 -s "None of the common ciphersuites is usable"
6483
Hanno Beckerfa452c42020-08-14 15:42:49 +01006484requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006485run_test "ECJPAKE: working, TLS" \
6486 "$P_SRV debug_level=3 ecjpake_pw=bla" \
6487 "$P_CLI debug_level=3 ecjpake_pw=bla \
6488 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
Manuel Pégourié-Gonnard0f1660a2015-09-16 22:41:06 +02006489 0 \
Hanno Beckeree63af62020-08-14 15:41:23 +01006490 -c "add ciphersuite: 0xc0ff" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006491 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006492 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006493 -s "found ecjpake kkpp extension" \
6494 -S "skip ecjpake kkpp extension" \
6495 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02006496 -s "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02006497 -c "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006498 -S "None of the common ciphersuites is usable" \
6499 -S "SSL - Verification of the message MAC failed"
6500
Janos Follath74537a62016-09-02 13:45:28 +01006501server_needs_more_time 1
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006502requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006503run_test "ECJPAKE: password mismatch, TLS" \
6504 "$P_SRV debug_level=3 ecjpake_pw=bla" \
6505 "$P_CLI debug_level=3 ecjpake_pw=bad \
6506 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6507 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006508 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006509 -s "SSL - Verification of the message MAC failed"
6510
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006511requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006512run_test "ECJPAKE: working, DTLS" \
6513 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
6514 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
6515 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6516 0 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006517 -c "re-using cached ecjpake parameters" \
6518 -S "SSL - Verification of the message MAC failed"
6519
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006520requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006521run_test "ECJPAKE: working, DTLS, no cookie" \
6522 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla cookies=0" \
6523 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
6524 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6525 0 \
6526 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006527 -S "SSL - Verification of the message MAC failed"
6528
Janos Follath74537a62016-09-02 13:45:28 +01006529server_needs_more_time 1
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006530requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006531run_test "ECJPAKE: password mismatch, DTLS" \
6532 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
6533 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bad \
6534 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6535 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02006536 -c "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02006537 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02006538
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02006539# for tests with configs/config-thread.h
Dave Rodgman7ed75e22021-06-29 19:05:34 +01006540requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02006541run_test "ECJPAKE: working, DTLS, nolog" \
6542 "$P_SRV dtls=1 ecjpake_pw=bla" \
6543 "$P_CLI dtls=1 ecjpake_pw=bla \
6544 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
6545 0
6546
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006547# Tests for ciphersuites per version
6548
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006549requires_config_enabled MBEDTLS_CAMELLIA_C
6550requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006551run_test "Per-version suites: SSL3" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006552 "$P_SRV min_version=ssl3 version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006553 "$P_CLI force_version=ssl3" \
6554 0 \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006555 -c "Ciphersuite is TLS-RSA-WITH-CAMELLIA-128-CBC-SHA"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006556
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006557requires_config_enabled MBEDTLS_CAMELLIA_C
6558requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006559run_test "Per-version suites: TLS 1.0" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006560 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01006561 "$P_CLI force_version=tls1 arc4=1" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006562 0 \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006563 -c "Ciphersuite is TLS-RSA-WITH-AES-256-CBC-SHA"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006564
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006565requires_config_enabled MBEDTLS_CAMELLIA_C
6566requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006567run_test "Per-version suites: TLS 1.1" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006568 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006569 "$P_CLI force_version=tls1_1" \
6570 0 \
6571 -c "Ciphersuite is TLS-RSA-WITH-AES-128-CBC-SHA"
6572
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006573requires_config_enabled MBEDTLS_CAMELLIA_C
6574requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006575run_test "Per-version suites: TLS 1.2" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01006576 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006577 "$P_CLI force_version=tls12" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006578 0 \
6579 -c "Ciphersuite is TLS-RSA-WITH-AES-128-GCM-SHA256"
6580
Manuel Pégourié-Gonnard4cc8c632015-07-23 12:24:03 +02006581# Test for ClientHello without extensions
6582
Manuel Pégourié-Gonnardd55bc202015-08-04 16:22:30 +02006583requires_gnutls
Manuel Pégourié-Gonnardbc4da292020-01-30 12:45:14 +01006584run_test "ClientHello without extensions" \
Manuel Pégourié-Gonnard77cbeff2020-01-30 10:58:57 +01006585 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02006586 "$G_CLI --priority=NORMAL:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION localhost" \
Gilles Peskine5d2511c2017-05-12 13:16:40 +02006587 0 \
6588 -s "dumping 'client hello extensions' (0 bytes)"
6589
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006590# Tests for mbedtls_ssl_get_bytes_avail()
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02006591
Gilles Peskine5a1b3bd2022-04-06 23:35:56 +02006592# The server first reads buffer_size-1 bytes, then reads the remainder.
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006593run_test "mbedtls_ssl_get_bytes_avail: no extra data" \
Gilles Peskine5a1b3bd2022-04-06 23:35:56 +02006594 "$P_SRV buffer_size=100" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02006595 "$P_CLI request_size=100" \
6596 0 \
6597 -s "Read from client: 100 bytes read$"
6598
Gilles Peskine5a1b3bd2022-04-06 23:35:56 +02006599run_test "mbedtls_ssl_get_bytes_avail: extra data (+1)" \
6600 "$P_SRV buffer_size=100" \
6601 "$P_CLI request_size=101" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02006602 0 \
Gilles Peskine5a1b3bd2022-04-06 23:35:56 +02006603 -s "Read from client: 101 bytes read (100 + 1)"
6604
6605requires_max_content_len 200
6606run_test "mbedtls_ssl_get_bytes_avail: extra data (*2)" \
6607 "$P_SRV buffer_size=100" \
6608 "$P_CLI request_size=200" \
6609 0 \
6610 -s "Read from client: 200 bytes read (100 + 100)"
6611
6612run_test "mbedtls_ssl_get_bytes_avail: extra data (max)" \
6613 "$P_SRV buffer_size=100" \
6614 "$P_CLI request_size=$MAX_CONTENT_LEN" \
6615 0 \
6616 -s "Read from client: $MAX_CONTENT_LEN bytes read (100 + $((MAX_CONTENT_LEN - 100)))"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02006617
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006618# Tests for small client packets
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006619
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006620run_test "Small client packet SSLv3 BlockCipher" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01006621 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006622 "$P_CLI request_size=1 force_version=ssl3 \
6623 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6624 0 \
6625 -s "Read from client: 1 bytes read"
6626
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006627run_test "Small client packet SSLv3 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006628 "$P_SRV min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006629 "$P_CLI request_size=1 force_version=ssl3 \
6630 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6631 0 \
6632 -s "Read from client: 1 bytes read"
6633
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006634run_test "Small client packet TLS 1.0 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006635 "$P_SRV" \
6636 "$P_CLI request_size=1 force_version=tls1 \
6637 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6638 0 \
6639 -s "Read from client: 1 bytes read"
6640
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006641run_test "Small client packet TLS 1.0 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006642 "$P_SRV" \
6643 "$P_CLI request_size=1 force_version=tls1 etm=0 \
6644 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6645 0 \
6646 -s "Read from client: 1 bytes read"
6647
Hanno Becker32c55012017-11-10 08:42:54 +00006648requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006649run_test "Small client packet TLS 1.0 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006650 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006651 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006652 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006653 0 \
6654 -s "Read from client: 1 bytes read"
6655
Hanno Becker32c55012017-11-10 08:42:54 +00006656requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006657run_test "Small client packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006658 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00006659 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006660 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00006661 0 \
6662 -s "Read from client: 1 bytes read"
6663
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006664run_test "Small client packet TLS 1.0 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006665 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006666 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker8501f982017-11-10 08:59:04 +00006667 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6668 0 \
6669 -s "Read from client: 1 bytes read"
6670
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006671run_test "Small client packet TLS 1.0 StreamCipher, without EtM" \
Hanno Becker8501f982017-11-10 08:59:04 +00006672 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6673 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006674 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00006675 0 \
6676 -s "Read from client: 1 bytes read"
6677
6678requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006679run_test "Small client packet TLS 1.0 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006680 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006681 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006682 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006683 0 \
6684 -s "Read from client: 1 bytes read"
6685
Hanno Becker8501f982017-11-10 08:59:04 +00006686requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006687run_test "Small client packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006688 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6689 "$P_CLI request_size=1 force_version=tls1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
6690 trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006691 0 \
6692 -s "Read from client: 1 bytes read"
6693
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006694run_test "Small client packet TLS 1.1 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006695 "$P_SRV" \
6696 "$P_CLI request_size=1 force_version=tls1_1 \
6697 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6698 0 \
6699 -s "Read from client: 1 bytes read"
6700
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006701run_test "Small client packet TLS 1.1 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006702 "$P_SRV" \
Hanno Becker8501f982017-11-10 08:59:04 +00006703 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006704 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00006705 0 \
6706 -s "Read from client: 1 bytes read"
6707
6708requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006709run_test "Small client packet TLS 1.1 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006710 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00006711 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006712 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00006713 0 \
6714 -s "Read from client: 1 bytes read"
6715
6716requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006717run_test "Small client packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006718 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00006719 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006720 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006721 0 \
6722 -s "Read from client: 1 bytes read"
6723
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006724run_test "Small client packet TLS 1.1 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006725 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006726 "$P_CLI request_size=1 force_version=tls1_1 \
6727 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6728 0 \
6729 -s "Read from client: 1 bytes read"
6730
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006731run_test "Small client packet TLS 1.1 StreamCipher, without EtM" \
Hanno Becker8501f982017-11-10 08:59:04 +00006732 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006733 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006734 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006735 0 \
6736 -s "Read from client: 1 bytes read"
6737
Hanno Becker8501f982017-11-10 08:59:04 +00006738requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006739run_test "Small client packet TLS 1.1 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006740 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006741 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006742 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006743 0 \
6744 -s "Read from client: 1 bytes read"
6745
Hanno Becker32c55012017-11-10 08:42:54 +00006746requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006747run_test "Small client packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006748 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006749 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006750 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006751 0 \
6752 -s "Read from client: 1 bytes read"
6753
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006754run_test "Small client packet TLS 1.2 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006755 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006756 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006757 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6758 0 \
6759 -s "Read from client: 1 bytes read"
6760
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006761run_test "Small client packet TLS 1.2 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006762 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006763 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006764 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01006765 0 \
6766 -s "Read from client: 1 bytes read"
6767
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006768run_test "Small client packet TLS 1.2 BlockCipher larger MAC" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006769 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006770 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01006771 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006772 0 \
6773 -s "Read from client: 1 bytes read"
6774
Hanno Becker32c55012017-11-10 08:42:54 +00006775requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006776run_test "Small client packet TLS 1.2 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006777 "$P_SRV trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006778 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006779 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006780 0 \
6781 -s "Read from client: 1 bytes read"
6782
Hanno Becker8501f982017-11-10 08:59:04 +00006783requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006784run_test "Small client packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006785 "$P_SRV trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006786 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006787 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006788 0 \
6789 -s "Read from client: 1 bytes read"
6790
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006791run_test "Small client packet TLS 1.2 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006792 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006793 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006794 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6795 0 \
6796 -s "Read from client: 1 bytes read"
6797
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006798run_test "Small client packet TLS 1.2 StreamCipher, without EtM" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006799 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006800 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006801 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00006802 0 \
6803 -s "Read from client: 1 bytes read"
6804
Hanno Becker32c55012017-11-10 08:42:54 +00006805requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006806run_test "Small client packet TLS 1.2 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006807 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006808 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006809 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006810 0 \
6811 -s "Read from client: 1 bytes read"
6812
Hanno Becker8501f982017-11-10 08:59:04 +00006813requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006814run_test "Small client packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006815 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006816 "$P_CLI request_size=1 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006817 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006818 0 \
6819 -s "Read from client: 1 bytes read"
6820
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006821run_test "Small client packet TLS 1.2 AEAD" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006822 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006823 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006824 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
6825 0 \
6826 -s "Read from client: 1 bytes read"
6827
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006828run_test "Small client packet TLS 1.2 AEAD shorter tag" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006829 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006830 "$P_CLI request_size=1 force_version=tls12 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02006831 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
6832 0 \
6833 -s "Read from client: 1 bytes read"
6834
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006835# Tests for small client packets in DTLS
Hanno Beckere2148042017-11-10 08:59:18 +00006836
6837requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006838run_test "Small client packet DTLS 1.0" \
Hanno Beckere2148042017-11-10 08:59:18 +00006839 "$P_SRV dtls=1 force_version=dtls1" \
6840 "$P_CLI dtls=1 request_size=1 \
6841 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6842 0 \
6843 -s "Read from client: 1 bytes read"
6844
6845requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006846run_test "Small client packet DTLS 1.0, without EtM" \
Hanno Beckere2148042017-11-10 08:59:18 +00006847 "$P_SRV dtls=1 force_version=dtls1 etm=0" \
6848 "$P_CLI dtls=1 request_size=1 \
6849 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6850 0 \
6851 -s "Read from client: 1 bytes read"
6852
6853requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6854requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006855run_test "Small client packet DTLS 1.0, truncated hmac" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006856 "$P_SRV dtls=1 force_version=dtls1 trunc_hmac=1" \
6857 "$P_CLI dtls=1 request_size=1 trunc_hmac=1 \
Hanno Beckere2148042017-11-10 08:59:18 +00006858 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6859 0 \
6860 -s "Read from client: 1 bytes read"
6861
6862requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6863requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006864run_test "Small client packet DTLS 1.0, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006865 "$P_SRV dtls=1 force_version=dtls1 trunc_hmac=1 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00006866 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006867 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
Hanno Beckere2148042017-11-10 08:59:18 +00006868 0 \
6869 -s "Read from client: 1 bytes read"
6870
6871requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006872run_test "Small client packet DTLS 1.2" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006873 "$P_SRV dtls=1 force_version=dtls12" \
Hanno Beckere2148042017-11-10 08:59:18 +00006874 "$P_CLI dtls=1 request_size=1 \
6875 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6876 0 \
6877 -s "Read from client: 1 bytes read"
6878
6879requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006880run_test "Small client packet DTLS 1.2, without EtM" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006881 "$P_SRV dtls=1 force_version=dtls12 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00006882 "$P_CLI dtls=1 request_size=1 \
6883 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6884 0 \
6885 -s "Read from client: 1 bytes read"
6886
6887requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6888requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006889run_test "Small client packet DTLS 1.2, truncated hmac" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006890 "$P_SRV dtls=1 force_version=dtls12 trunc_hmac=1" \
Hanno Beckere2148042017-11-10 08:59:18 +00006891 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006892 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Beckere2148042017-11-10 08:59:18 +00006893 0 \
6894 -s "Read from client: 1 bytes read"
6895
6896requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6897requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006898run_test "Small client packet DTLS 1.2, without EtM, truncated MAC" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00006899 "$P_SRV dtls=1 force_version=dtls12 trunc_hmac=1 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00006900 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006901 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
Hanno Beckere2148042017-11-10 08:59:18 +00006902 0 \
6903 -s "Read from client: 1 bytes read"
6904
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006905# Tests for small server packets
6906
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006907run_test "Small server packet SSLv3 BlockCipher" \
6908 "$P_SRV response_size=1 min_version=ssl3" \
6909 "$P_CLI force_version=ssl3 \
6910 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6911 0 \
6912 -c "Read from server: 1 bytes read"
6913
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006914run_test "Small server packet SSLv3 StreamCipher" \
6915 "$P_SRV response_size=1 min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6916 "$P_CLI force_version=ssl3 \
6917 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6918 0 \
6919 -c "Read from server: 1 bytes read"
6920
6921run_test "Small server packet TLS 1.0 BlockCipher" \
6922 "$P_SRV response_size=1" \
6923 "$P_CLI force_version=tls1 \
6924 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6925 0 \
6926 -c "Read from server: 1 bytes read"
6927
6928run_test "Small server packet TLS 1.0 BlockCipher, without EtM" \
6929 "$P_SRV response_size=1" \
6930 "$P_CLI force_version=tls1 etm=0 \
6931 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6932 0 \
6933 -c "Read from server: 1 bytes read"
6934
6935requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6936run_test "Small server packet TLS 1.0 BlockCipher, truncated MAC" \
6937 "$P_SRV response_size=1 trunc_hmac=1" \
6938 "$P_CLI force_version=tls1 \
6939 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
6940 0 \
6941 -c "Read from server: 1 bytes read"
6942
6943requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6944run_test "Small server packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
6945 "$P_SRV response_size=1 trunc_hmac=1" \
6946 "$P_CLI force_version=tls1 \
6947 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
6948 0 \
6949 -c "Read from server: 1 bytes read"
6950
6951run_test "Small server packet TLS 1.0 StreamCipher" \
6952 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6953 "$P_CLI force_version=tls1 \
6954 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6955 0 \
6956 -c "Read from server: 1 bytes read"
6957
6958run_test "Small server packet TLS 1.0 StreamCipher, without EtM" \
6959 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6960 "$P_CLI force_version=tls1 \
6961 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
6962 0 \
6963 -c "Read from server: 1 bytes read"
6964
6965requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6966run_test "Small server packet TLS 1.0 StreamCipher, truncated MAC" \
6967 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6968 "$P_CLI force_version=tls1 \
6969 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6970 0 \
6971 -c "Read from server: 1 bytes read"
6972
6973requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6974run_test "Small server packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
6975 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6976 "$P_CLI force_version=tls1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
6977 trunc_hmac=1 etm=0" \
6978 0 \
6979 -c "Read from server: 1 bytes read"
6980
6981run_test "Small server packet TLS 1.1 BlockCipher" \
6982 "$P_SRV response_size=1" \
6983 "$P_CLI force_version=tls1_1 \
6984 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6985 0 \
6986 -c "Read from server: 1 bytes read"
6987
6988run_test "Small server packet TLS 1.1 BlockCipher, without EtM" \
6989 "$P_SRV response_size=1" \
6990 "$P_CLI force_version=tls1_1 \
6991 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
6992 0 \
6993 -c "Read from server: 1 bytes read"
6994
6995requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6996run_test "Small server packet TLS 1.1 BlockCipher, truncated MAC" \
6997 "$P_SRV response_size=1 trunc_hmac=1" \
6998 "$P_CLI force_version=tls1_1 \
6999 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
7000 0 \
7001 -c "Read from server: 1 bytes read"
7002
7003requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7004run_test "Small server packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
7005 "$P_SRV response_size=1 trunc_hmac=1" \
7006 "$P_CLI force_version=tls1_1 \
7007 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
7008 0 \
7009 -c "Read from server: 1 bytes read"
7010
7011run_test "Small server packet TLS 1.1 StreamCipher" \
7012 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7013 "$P_CLI force_version=tls1_1 \
7014 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7015 0 \
7016 -c "Read from server: 1 bytes read"
7017
7018run_test "Small server packet TLS 1.1 StreamCipher, without EtM" \
7019 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7020 "$P_CLI force_version=tls1_1 \
7021 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7022 0 \
7023 -c "Read from server: 1 bytes read"
7024
7025requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7026run_test "Small server packet TLS 1.1 StreamCipher, truncated MAC" \
7027 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7028 "$P_CLI force_version=tls1_1 \
7029 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7030 0 \
7031 -c "Read from server: 1 bytes read"
7032
7033requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7034run_test "Small server packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
7035 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7036 "$P_CLI force_version=tls1_1 \
7037 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7038 0 \
7039 -c "Read from server: 1 bytes read"
7040
7041run_test "Small server packet TLS 1.2 BlockCipher" \
7042 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007043 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007044 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7045 0 \
7046 -c "Read from server: 1 bytes read"
7047
7048run_test "Small server packet TLS 1.2 BlockCipher, without EtM" \
7049 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007050 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007051 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
7052 0 \
7053 -c "Read from server: 1 bytes read"
7054
7055run_test "Small server packet TLS 1.2 BlockCipher larger MAC" \
7056 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007057 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007058 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
7059 0 \
7060 -c "Read from server: 1 bytes read"
7061
7062requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7063run_test "Small server packet TLS 1.2 BlockCipher, truncated MAC" \
7064 "$P_SRV response_size=1 trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007065 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007066 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
7067 0 \
7068 -c "Read from server: 1 bytes read"
7069
7070requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7071run_test "Small server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
7072 "$P_SRV response_size=1 trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007073 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007074 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
7075 0 \
7076 -c "Read from server: 1 bytes read"
7077
7078run_test "Small server packet TLS 1.2 StreamCipher" \
7079 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007080 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007081 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7082 0 \
7083 -c "Read from server: 1 bytes read"
7084
7085run_test "Small server packet TLS 1.2 StreamCipher, without EtM" \
7086 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007087 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007088 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7089 0 \
7090 -c "Read from server: 1 bytes read"
7091
7092requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7093run_test "Small server packet TLS 1.2 StreamCipher, truncated MAC" \
7094 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007095 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007096 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7097 0 \
7098 -c "Read from server: 1 bytes read"
7099
7100requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7101run_test "Small server packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
7102 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007103 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007104 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7105 0 \
7106 -c "Read from server: 1 bytes read"
7107
7108run_test "Small server packet TLS 1.2 AEAD" \
7109 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007110 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007111 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
7112 0 \
7113 -c "Read from server: 1 bytes read"
7114
7115run_test "Small server packet TLS 1.2 AEAD shorter tag" \
7116 "$P_SRV response_size=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007117 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007118 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
7119 0 \
7120 -c "Read from server: 1 bytes read"
7121
7122# Tests for small server packets in DTLS
7123
7124requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7125run_test "Small server packet DTLS 1.0" \
7126 "$P_SRV dtls=1 response_size=1 force_version=dtls1" \
7127 "$P_CLI dtls=1 \
7128 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7129 0 \
7130 -c "Read from server: 1 bytes read"
7131
7132requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7133run_test "Small server packet DTLS 1.0, without EtM" \
7134 "$P_SRV dtls=1 response_size=1 force_version=dtls1 etm=0" \
7135 "$P_CLI dtls=1 \
7136 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7137 0 \
7138 -c "Read from server: 1 bytes read"
7139
7140requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7141requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7142run_test "Small server packet DTLS 1.0, truncated hmac" \
7143 "$P_SRV dtls=1 response_size=1 force_version=dtls1 trunc_hmac=1" \
7144 "$P_CLI dtls=1 trunc_hmac=1 \
7145 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7146 0 \
7147 -c "Read from server: 1 bytes read"
7148
7149requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7150requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7151run_test "Small server packet DTLS 1.0, without EtM, truncated MAC" \
7152 "$P_SRV dtls=1 response_size=1 force_version=dtls1 trunc_hmac=1 etm=0" \
7153 "$P_CLI dtls=1 \
7154 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
7155 0 \
7156 -c "Read from server: 1 bytes read"
7157
7158requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7159run_test "Small server packet DTLS 1.2" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007160 "$P_SRV dtls=1 response_size=1 force_version=dtls12" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007161 "$P_CLI dtls=1 \
7162 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7163 0 \
7164 -c "Read from server: 1 bytes read"
7165
7166requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7167run_test "Small server packet DTLS 1.2, without EtM" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007168 "$P_SRV dtls=1 response_size=1 force_version=dtls12 etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007169 "$P_CLI dtls=1 \
7170 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7171 0 \
7172 -c "Read from server: 1 bytes read"
7173
7174requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7175requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7176run_test "Small server packet DTLS 1.2, truncated hmac" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007177 "$P_SRV dtls=1 response_size=1 force_version=dtls12 trunc_hmac=1" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007178 "$P_CLI dtls=1 \
7179 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
7180 0 \
7181 -c "Read from server: 1 bytes read"
7182
7183requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7184requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7185run_test "Small server packet DTLS 1.2, without EtM, truncated MAC" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007186 "$P_SRV dtls=1 response_size=1 force_version=dtls12 trunc_hmac=1 etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007187 "$P_CLI dtls=1 \
7188 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
7189 0 \
7190 -c "Read from server: 1 bytes read"
7191
Janos Follath00efff72016-05-06 13:48:23 +01007192# A test for extensions in SSLv3
Yuto Takanoa49124e2021-07-08 15:56:33 +01007193requires_max_content_len 4096
Janos Follath00efff72016-05-06 13:48:23 +01007194run_test "SSLv3 with extensions, server side" \
7195 "$P_SRV min_version=ssl3 debug_level=3" \
7196 "$P_CLI force_version=ssl3 tickets=1 max_frag_len=4096 alpn=abc,1234" \
7197 0 \
7198 -S "dumping 'client hello extensions'" \
7199 -S "server hello, total extension length:"
7200
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007201# Test for large client packets
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007202
Angus Grattonc4dd0732018-04-11 16:28:39 +10007203# How many fragments do we expect to write $1 bytes?
7204fragments_for_write() {
7205 echo "$(( ( $1 + $MAX_OUT_LEN - 1 ) / $MAX_OUT_LEN ))"
7206}
7207
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007208run_test "Large client packet SSLv3 BlockCipher" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01007209 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01007210 "$P_CLI request_size=16384 force_version=ssl3 recsplit=0 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007211 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7212 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007213 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7214 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007215
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007216run_test "Large client packet SSLv3 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01007217 "$P_SRV min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007218 "$P_CLI request_size=16384 force_version=ssl3 \
7219 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7220 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007221 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7222 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007223
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007224run_test "Large client packet TLS 1.0 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007225 "$P_SRV" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01007226 "$P_CLI request_size=16384 force_version=tls1 recsplit=0 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007227 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7228 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007229 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7230 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007231
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007232run_test "Large client packet TLS 1.0 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007233 "$P_SRV" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007234 "$P_CLI request_size=16384 force_version=tls1 etm=0 recsplit=0 \
7235 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7236 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007237 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007238
Hanno Becker32c55012017-11-10 08:42:54 +00007239requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007240run_test "Large client packet TLS 1.0 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007241 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01007242 "$P_CLI request_size=16384 force_version=tls1 recsplit=0 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007243 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007244 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007245 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7246 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007247
Hanno Becker32c55012017-11-10 08:42:54 +00007248requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007249run_test "Large client packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007250 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007251 "$P_CLI request_size=16384 force_version=tls1 etm=0 recsplit=0 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007252 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007253 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007254 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007255
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007256run_test "Large client packet TLS 1.0 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01007257 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007258 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007259 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7260 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007261 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007262
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007263run_test "Large client packet TLS 1.0 StreamCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007264 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7265 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007266 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007267 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007268 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007269
7270requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007271run_test "Large client packet TLS 1.0 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007272 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007273 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007274 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007275 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007276 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007277
Hanno Becker278fc7a2017-11-10 09:16:28 +00007278requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007279run_test "Large client packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007280 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007281 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007282 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007283 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007284 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7285 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007286
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007287run_test "Large client packet TLS 1.1 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007288 "$P_SRV" \
7289 "$P_CLI request_size=16384 force_version=tls1_1 \
7290 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7291 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007292 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7293 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007294
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007295run_test "Large client packet TLS 1.1 BlockCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007296 "$P_SRV" \
7297 "$P_CLI request_size=16384 force_version=tls1_1 etm=0 \
7298 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007299 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007300 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007301
Hanno Becker32c55012017-11-10 08:42:54 +00007302requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007303run_test "Large client packet TLS 1.1 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007304 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007305 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007306 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007307 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007308 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007309
Hanno Becker32c55012017-11-10 08:42:54 +00007310requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007311run_test "Large client packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007312 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007313 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007314 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007315 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007316 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007317
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007318run_test "Large client packet TLS 1.1 StreamCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007319 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7320 "$P_CLI request_size=16384 force_version=tls1_1 \
7321 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7322 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007323 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7324 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007325
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007326run_test "Large client packet TLS 1.1 StreamCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007327 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007328 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007329 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007330 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007331 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7332 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007333
Hanno Becker278fc7a2017-11-10 09:16:28 +00007334requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007335run_test "Large client packet TLS 1.1 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007336 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007337 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007338 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007339 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007340 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007341
Hanno Becker278fc7a2017-11-10 09:16:28 +00007342requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007343run_test "Large client packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007344 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007345 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007346 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007347 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007348 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7349 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007350
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007351run_test "Large client packet TLS 1.2 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007352 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007353 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007354 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7355 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007356 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7357 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007358
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007359run_test "Large client packet TLS 1.2 BlockCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007360 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007361 "$P_CLI request_size=16384 force_version=tls12 etm=0 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007362 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7363 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007364 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007365
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007366run_test "Large client packet TLS 1.2 BlockCipher larger MAC" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007367 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007368 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01007369 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007370 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007371 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7372 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007373
Hanno Becker32c55012017-11-10 08:42:54 +00007374requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007375run_test "Large client packet TLS 1.2 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007376 "$P_SRV trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007377 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007378 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007379 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007380 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007381
Hanno Becker278fc7a2017-11-10 09:16:28 +00007382requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007383run_test "Large client packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007384 "$P_SRV trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007385 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007386 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007387 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007388 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7389 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007390
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007391run_test "Large client packet TLS 1.2 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01007392 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007393 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007394 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7395 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007396 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7397 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007398
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007399run_test "Large client packet TLS 1.2 StreamCipher, without EtM" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01007400 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007401 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00007402 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7403 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007404 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00007405
Hanno Becker32c55012017-11-10 08:42:54 +00007406requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007407run_test "Large client packet TLS 1.2 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007408 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007409 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007410 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007411 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007412 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007413
Hanno Becker278fc7a2017-11-10 09:16:28 +00007414requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007415run_test "Large client packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00007416 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007417 "$P_CLI request_size=16384 force_version=tls12 \
Hanno Becker909f9a32017-11-21 17:10:12 +00007418 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007419 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007420 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7421 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007422
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007423run_test "Large client packet TLS 1.2 AEAD" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007424 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007425 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007426 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
7427 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007428 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7429 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007430
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007431run_test "Large client packet TLS 1.2 AEAD shorter tag" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007432 "$P_SRV" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007433 "$P_CLI request_size=16384 force_version=tls12 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007434 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
7435 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10007436 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
7437 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02007438
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007439# Test for large server packets
Yuto Takanoa49124e2021-07-08 15:56:33 +01007440# The tests below fail when the server's OUT_CONTENT_LEN is less than 16384.
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007441run_test "Large server packet SSLv3 StreamCipher" \
7442 "$P_SRV response_size=16384 min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7443 "$P_CLI force_version=ssl3 \
7444 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7445 0 \
7446 -c "Read from server: 16384 bytes read"
7447
Andrzej Kurek6a4f2242018-08-27 08:00:13 -04007448# Checking next 4 tests logs for 1n-1 split against BEAST too
Andrzej Kurek6a4f2242018-08-27 08:00:13 -04007449run_test "Large server packet SSLv3 BlockCipher" \
7450 "$P_SRV response_size=16384 min_version=ssl3" \
7451 "$P_CLI force_version=ssl3 recsplit=0 \
7452 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7453 0 \
7454 -c "Read from server: 1 bytes read"\
7455 -c "16383 bytes read"\
7456 -C "Read from server: 16384 bytes read"
7457
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007458run_test "Large server packet TLS 1.0 BlockCipher" \
7459 "$P_SRV response_size=16384" \
7460 "$P_CLI force_version=tls1 recsplit=0 \
7461 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7462 0 \
7463 -c "Read from server: 1 bytes read"\
7464 -c "16383 bytes read"\
7465 -C "Read from server: 16384 bytes read"
7466
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007467run_test "Large server packet TLS 1.0 BlockCipher, without EtM" \
7468 "$P_SRV response_size=16384" \
7469 "$P_CLI force_version=tls1 etm=0 recsplit=0 \
7470 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7471 0 \
7472 -c "Read from server: 1 bytes read"\
7473 -c "16383 bytes read"\
7474 -C "Read from server: 16384 bytes read"
7475
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007476requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7477run_test "Large server packet TLS 1.0 BlockCipher truncated MAC" \
7478 "$P_SRV response_size=16384" \
7479 "$P_CLI force_version=tls1 recsplit=0 \
7480 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
7481 trunc_hmac=1" \
7482 0 \
7483 -c "Read from server: 1 bytes read"\
7484 -c "16383 bytes read"\
7485 -C "Read from server: 16384 bytes read"
7486
7487requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7488run_test "Large server packet TLS 1.0 StreamCipher truncated MAC" \
7489 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7490 "$P_CLI force_version=tls1 \
7491 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
7492 trunc_hmac=1" \
7493 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007494 -s "16384 bytes written in 1 fragments" \
7495 -c "Read from server: 16384 bytes read"
7496
7497run_test "Large server packet TLS 1.0 StreamCipher" \
7498 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7499 "$P_CLI force_version=tls1 \
7500 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7501 0 \
7502 -s "16384 bytes written in 1 fragments" \
7503 -c "Read from server: 16384 bytes read"
7504
7505run_test "Large server packet TLS 1.0 StreamCipher, without EtM" \
7506 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7507 "$P_CLI force_version=tls1 \
7508 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7509 0 \
7510 -s "16384 bytes written in 1 fragments" \
7511 -c "Read from server: 16384 bytes read"
7512
7513requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7514run_test "Large server packet TLS 1.0 StreamCipher, truncated MAC" \
7515 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7516 "$P_CLI force_version=tls1 \
7517 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7518 0 \
7519 -s "16384 bytes written in 1 fragments" \
7520 -c "Read from server: 16384 bytes read"
7521
7522requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7523run_test "Large server packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
7524 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7525 "$P_CLI force_version=tls1 \
7526 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7527 0 \
7528 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007529 -c "Read from server: 16384 bytes read"
7530
7531run_test "Large server packet TLS 1.1 BlockCipher" \
7532 "$P_SRV response_size=16384" \
7533 "$P_CLI force_version=tls1_1 \
7534 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7535 0 \
7536 -c "Read from server: 16384 bytes read"
7537
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007538run_test "Large server packet TLS 1.1 BlockCipher, without EtM" \
7539 "$P_SRV response_size=16384" \
7540 "$P_CLI force_version=tls1_1 etm=0 \
7541 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007542 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007543 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007544 -c "Read from server: 16384 bytes read"
7545
7546requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7547run_test "Large server packet TLS 1.1 BlockCipher truncated MAC" \
7548 "$P_SRV response_size=16384" \
7549 "$P_CLI force_version=tls1_1 \
7550 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
7551 trunc_hmac=1" \
7552 0 \
7553 -c "Read from server: 16384 bytes read"
7554
7555requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007556run_test "Large server packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
7557 "$P_SRV response_size=16384 trunc_hmac=1" \
7558 "$P_CLI force_version=tls1_1 \
7559 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
7560 0 \
7561 -s "16384 bytes written in 1 fragments" \
7562 -c "Read from server: 16384 bytes read"
7563
7564run_test "Large server packet TLS 1.1 StreamCipher" \
7565 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7566 "$P_CLI force_version=tls1_1 \
7567 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7568 0 \
7569 -c "Read from server: 16384 bytes read"
7570
7571run_test "Large server packet TLS 1.1 StreamCipher, without EtM" \
7572 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7573 "$P_CLI force_version=tls1_1 \
7574 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7575 0 \
7576 -s "16384 bytes written in 1 fragments" \
7577 -c "Read from server: 16384 bytes read"
7578
7579requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007580run_test "Large server packet TLS 1.1 StreamCipher truncated MAC" \
7581 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7582 "$P_CLI force_version=tls1_1 \
7583 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
7584 trunc_hmac=1" \
7585 0 \
7586 -c "Read from server: 16384 bytes read"
7587
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007588run_test "Large server packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
7589 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
7590 "$P_CLI force_version=tls1_1 \
7591 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7592 0 \
7593 -s "16384 bytes written in 1 fragments" \
7594 -c "Read from server: 16384 bytes read"
7595
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007596run_test "Large server packet TLS 1.2 BlockCipher" \
7597 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007598 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007599 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7600 0 \
7601 -c "Read from server: 16384 bytes read"
7602
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007603run_test "Large server packet TLS 1.2 BlockCipher, without EtM" \
7604 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007605 "$P_CLI force_version=tls12 etm=0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007606 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
7607 0 \
7608 -s "16384 bytes written in 1 fragments" \
7609 -c "Read from server: 16384 bytes read"
7610
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007611run_test "Large server packet TLS 1.2 BlockCipher larger MAC" \
7612 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007613 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007614 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
7615 0 \
7616 -c "Read from server: 16384 bytes read"
7617
7618requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7619run_test "Large server packet TLS 1.2 BlockCipher truncated MAC" \
7620 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007621 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007622 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
7623 trunc_hmac=1" \
7624 0 \
7625 -c "Read from server: 16384 bytes read"
7626
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007627run_test "Large server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
7628 "$P_SRV response_size=16384 trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007629 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007630 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
7631 0 \
7632 -s "16384 bytes written in 1 fragments" \
7633 -c "Read from server: 16384 bytes read"
7634
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007635run_test "Large server packet TLS 1.2 StreamCipher" \
7636 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007637 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007638 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
7639 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007640 -s "16384 bytes written in 1 fragments" \
7641 -c "Read from server: 16384 bytes read"
7642
7643run_test "Large server packet TLS 1.2 StreamCipher, without EtM" \
7644 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007645 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007646 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
7647 0 \
7648 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007649 -c "Read from server: 16384 bytes read"
7650
7651requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7652run_test "Large server packet TLS 1.2 StreamCipher truncated MAC" \
7653 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007654 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007655 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
7656 trunc_hmac=1" \
7657 0 \
7658 -c "Read from server: 16384 bytes read"
7659
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007660requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
7661run_test "Large server packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
7662 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007663 "$P_CLI force_version=tls12 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04007664 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
7665 0 \
7666 -s "16384 bytes written in 1 fragments" \
7667 -c "Read from server: 16384 bytes read"
7668
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007669run_test "Large server packet TLS 1.2 AEAD" \
7670 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007671 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007672 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
7673 0 \
7674 -c "Read from server: 16384 bytes read"
7675
7676run_test "Large server packet TLS 1.2 AEAD shorter tag" \
7677 "$P_SRV response_size=16384" \
Xiaofei Baif40545d2021-12-02 08:43:35 +00007678 "$P_CLI force_version=tls12 \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02007679 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
7680 0 \
7681 -c "Read from server: 16384 bytes read"
7682
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007683# Tests for restartable ECC
7684
7685requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7686run_test "EC restart: TLS, default" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007687 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007688 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007689 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007690 debug_level=1" \
7691 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007692 -C "x509_verify_cert.*4b00" \
7693 -C "mbedtls_pk_verify.*4b00" \
7694 -C "mbedtls_ecdh_make_public.*4b00" \
7695 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007696
7697requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7698run_test "EC restart: TLS, max_ops=0" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007699 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007700 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007701 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007702 debug_level=1 ec_max_ops=0" \
7703 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007704 -C "x509_verify_cert.*4b00" \
7705 -C "mbedtls_pk_verify.*4b00" \
7706 -C "mbedtls_ecdh_make_public.*4b00" \
7707 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007708
7709requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7710run_test "EC restart: TLS, max_ops=65535" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007711 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007712 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007713 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007714 debug_level=1 ec_max_ops=65535" \
7715 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007716 -C "x509_verify_cert.*4b00" \
7717 -C "mbedtls_pk_verify.*4b00" \
7718 -C "mbedtls_ecdh_make_public.*4b00" \
7719 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007720
7721requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7722run_test "EC restart: TLS, max_ops=1000" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007723 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007724 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007725 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007726 debug_level=1 ec_max_ops=1000" \
7727 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007728 -c "x509_verify_cert.*4b00" \
7729 -c "mbedtls_pk_verify.*4b00" \
7730 -c "mbedtls_ecdh_make_public.*4b00" \
7731 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007732
7733requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007734run_test "EC restart: TLS, max_ops=1000, badsign" \
7735 "$P_SRV auth_mode=required \
7736 crt_file=data_files/server5-badsign.crt \
7737 key_file=data_files/server5.key" \
7738 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7739 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7740 debug_level=1 ec_max_ops=1000" \
7741 1 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007742 -c "x509_verify_cert.*4b00" \
7743 -C "mbedtls_pk_verify.*4b00" \
7744 -C "mbedtls_ecdh_make_public.*4b00" \
7745 -C "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007746 -c "! The certificate is not correctly signed by the trusted CA" \
7747 -c "! mbedtls_ssl_handshake returned" \
7748 -c "X509 - Certificate verification failed"
7749
7750requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7751run_test "EC restart: TLS, max_ops=1000, auth_mode=optional badsign" \
7752 "$P_SRV auth_mode=required \
7753 crt_file=data_files/server5-badsign.crt \
7754 key_file=data_files/server5.key" \
7755 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7756 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7757 debug_level=1 ec_max_ops=1000 auth_mode=optional" \
7758 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007759 -c "x509_verify_cert.*4b00" \
7760 -c "mbedtls_pk_verify.*4b00" \
7761 -c "mbedtls_ecdh_make_public.*4b00" \
7762 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007763 -c "! The certificate is not correctly signed by the trusted CA" \
7764 -C "! mbedtls_ssl_handshake returned" \
7765 -C "X509 - Certificate verification failed"
7766
7767requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7768run_test "EC restart: TLS, max_ops=1000, auth_mode=none badsign" \
7769 "$P_SRV auth_mode=required \
7770 crt_file=data_files/server5-badsign.crt \
7771 key_file=data_files/server5.key" \
7772 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7773 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7774 debug_level=1 ec_max_ops=1000 auth_mode=none" \
7775 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007776 -C "x509_verify_cert.*4b00" \
7777 -c "mbedtls_pk_verify.*4b00" \
7778 -c "mbedtls_ecdh_make_public.*4b00" \
7779 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02007780 -C "! The certificate is not correctly signed by the trusted CA" \
7781 -C "! mbedtls_ssl_handshake returned" \
7782 -C "X509 - Certificate verification failed"
7783
7784requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007785run_test "EC restart: DTLS, max_ops=1000" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007786 "$P_SRV auth_mode=required dtls=1" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007787 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02007788 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007789 dtls=1 debug_level=1 ec_max_ops=1000" \
7790 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007791 -c "x509_verify_cert.*4b00" \
7792 -c "mbedtls_pk_verify.*4b00" \
7793 -c "mbedtls_ecdh_make_public.*4b00" \
7794 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02007795
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02007796requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7797run_test "EC restart: TLS, max_ops=1000 no client auth" \
7798 "$P_SRV" \
7799 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7800 debug_level=1 ec_max_ops=1000" \
7801 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007802 -c "x509_verify_cert.*4b00" \
7803 -c "mbedtls_pk_verify.*4b00" \
7804 -c "mbedtls_ecdh_make_public.*4b00" \
7805 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02007806
7807requires_config_enabled MBEDTLS_ECP_RESTARTABLE
7808run_test "EC restart: TLS, max_ops=1000, ECDHE-PSK" \
7809 "$P_SRV psk=abc123" \
7810 "$P_CLI force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256 \
7811 psk=abc123 debug_level=1 ec_max_ops=1000" \
7812 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02007813 -C "x509_verify_cert.*4b00" \
7814 -C "mbedtls_pk_verify.*4b00" \
7815 -C "mbedtls_ecdh_make_public.*4b00" \
7816 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02007817
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007818# Tests of asynchronous private key support in SSL
7819
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007820requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007821run_test "SSL async private: sign, delay=0" \
7822 "$P_SRV \
7823 async_operations=s async_private_delay1=0 async_private_delay2=0" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007824 "$P_CLI" \
7825 0 \
7826 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007827 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007828
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007829requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007830run_test "SSL async private: sign, delay=1" \
7831 "$P_SRV \
7832 async_operations=s async_private_delay1=1 async_private_delay2=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007833 "$P_CLI" \
7834 0 \
7835 -s "Async sign callback: using key slot " \
7836 -s "Async resume (slot [0-9]): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007837 -s "Async resume (slot [0-9]): sign done, status=0"
7838
Gilles Peskine12d0cc12018-04-26 15:06:56 +02007839requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
7840run_test "SSL async private: sign, delay=2" \
7841 "$P_SRV \
7842 async_operations=s async_private_delay1=2 async_private_delay2=2" \
7843 "$P_CLI" \
7844 0 \
7845 -s "Async sign callback: using key slot " \
7846 -U "Async sign callback: using key slot " \
7847 -s "Async resume (slot [0-9]): call 1 more times." \
7848 -s "Async resume (slot [0-9]): call 0 more times." \
7849 -s "Async resume (slot [0-9]): sign done, status=0"
7850
Gilles Peskined3268832018-04-26 06:23:59 +02007851# Test that the async callback correctly signs the 36-byte hash of TLS 1.0/1.1
7852# with RSA PKCS#1v1.5 as used in TLS 1.0/1.1.
7853requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskined3268832018-04-26 06:23:59 +02007854run_test "SSL async private: sign, RSA, TLS 1.1" \
7855 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt \
7856 async_operations=s async_private_delay1=0 async_private_delay2=0" \
7857 "$P_CLI force_version=tls1_1" \
7858 0 \
7859 -s "Async sign callback: using key slot " \
7860 -s "Async resume (slot [0-9]): sign done, status=0"
7861
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007862requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine807d74a2018-04-30 10:30:49 +02007863run_test "SSL async private: sign, SNI" \
7864 "$P_SRV debug_level=3 \
7865 async_operations=s async_private_delay1=0 async_private_delay2=0 \
7866 crt_file=data_files/server5.crt key_file=data_files/server5.key \
7867 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
7868 "$P_CLI server_name=polarssl.example" \
7869 0 \
7870 -s "Async sign callback: using key slot " \
7871 -s "Async resume (slot [0-9]): sign done, status=0" \
7872 -s "parse ServerName extension" \
7873 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
7874 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
7875
7876requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007877run_test "SSL async private: decrypt, delay=0" \
7878 "$P_SRV \
7879 async_operations=d async_private_delay1=0 async_private_delay2=0" \
7880 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7881 0 \
7882 -s "Async decrypt callback: using key slot " \
7883 -s "Async resume (slot [0-9]): decrypt done, status=0"
7884
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007885requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007886run_test "SSL async private: decrypt, delay=1" \
7887 "$P_SRV \
7888 async_operations=d async_private_delay1=1 async_private_delay2=1" \
7889 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7890 0 \
7891 -s "Async decrypt callback: using key slot " \
7892 -s "Async resume (slot [0-9]): call 0 more times." \
7893 -s "Async resume (slot [0-9]): decrypt done, status=0"
7894
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007895requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007896run_test "SSL async private: decrypt RSA-PSK, delay=0" \
7897 "$P_SRV psk=abc123 \
7898 async_operations=d async_private_delay1=0 async_private_delay2=0" \
7899 "$P_CLI psk=abc123 \
7900 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
7901 0 \
7902 -s "Async decrypt callback: using key slot " \
7903 -s "Async resume (slot [0-9]): decrypt done, status=0"
7904
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007905requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007906run_test "SSL async private: decrypt RSA-PSK, delay=1" \
7907 "$P_SRV psk=abc123 \
7908 async_operations=d async_private_delay1=1 async_private_delay2=1" \
7909 "$P_CLI psk=abc123 \
7910 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
7911 0 \
7912 -s "Async decrypt callback: using key slot " \
7913 -s "Async resume (slot [0-9]): call 0 more times." \
7914 -s "Async resume (slot [0-9]): decrypt done, status=0"
7915
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007916requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007917run_test "SSL async private: sign callback not present" \
7918 "$P_SRV \
7919 async_operations=d async_private_delay1=1 async_private_delay2=1" \
7920 "$P_CLI; [ \$? -eq 1 ] &&
7921 $P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7922 0 \
7923 -S "Async sign callback" \
7924 -s "! mbedtls_ssl_handshake returned" \
7925 -s "The own private key or pre-shared key is not set, but needed" \
7926 -s "Async resume (slot [0-9]): decrypt done, status=0" \
7927 -s "Successful connection"
7928
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007929requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007930run_test "SSL async private: decrypt callback not present" \
7931 "$P_SRV debug_level=1 \
7932 async_operations=s async_private_delay1=1 async_private_delay2=1" \
7933 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA;
7934 [ \$? -eq 1 ] && $P_CLI" \
7935 0 \
7936 -S "Async decrypt callback" \
7937 -s "! mbedtls_ssl_handshake returned" \
7938 -s "got no RSA private key" \
7939 -s "Async resume (slot [0-9]): sign done, status=0" \
7940 -s "Successful connection"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007941
7942# key1: ECDSA, key2: RSA; use key1 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007943requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007944run_test "SSL async private: slot 0 used with key1" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007945 "$P_SRV \
7946 async_operations=s async_private_delay1=1 \
7947 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7948 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007949 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
7950 0 \
7951 -s "Async sign callback: using key slot 0," \
7952 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007953 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007954
7955# key1: ECDSA, key2: RSA; use key2 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007956requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007957run_test "SSL async private: slot 0 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007958 "$P_SRV \
7959 async_operations=s async_private_delay2=1 \
7960 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7961 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007962 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
7963 0 \
7964 -s "Async sign callback: using key slot 0," \
7965 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007966 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007967
7968# key1: ECDSA, key2: RSA; use key2 from slot 1
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007969requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinead28bf02018-04-26 00:19:16 +02007970run_test "SSL async private: slot 1 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007971 "$P_SRV \
Gilles Peskine168dae82018-04-25 23:35:42 +02007972 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007973 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7974 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007975 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
7976 0 \
7977 -s "Async sign callback: using key slot 1," \
7978 -s "Async resume (slot 1): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007979 -s "Async resume (slot 1): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007980
7981# key1: ECDSA, key2: RSA; use key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007982requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007983run_test "SSL async private: fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007984 "$P_SRV \
7985 async_operations=s async_private_delay1=1 \
7986 key_file=data_files/server5.key crt_file=data_files/server5.crt \
7987 key_file2=data_files/server2.key crt_file2=data_files/server2.crt " \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007988 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
7989 0 \
7990 -s "Async sign callback: no key matches this certificate."
7991
Gilles Peskineb74a1c72018-04-24 13:09:22 +02007992requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02007993run_test "SSL async private: sign, error in start" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01007994 "$P_SRV \
7995 async_operations=s async_private_delay1=1 async_private_delay2=1 \
7996 async_private_error=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01007997 "$P_CLI" \
7998 1 \
7999 -s "Async sign callback: injected error" \
8000 -S "Async resume" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02008001 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008002 -s "! mbedtls_ssl_handshake returned"
8003
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008004requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008005run_test "SSL async private: sign, cancel after start" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008006 "$P_SRV \
8007 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8008 async_private_error=2" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008009 "$P_CLI" \
8010 1 \
8011 -s "Async sign callback: using key slot " \
8012 -S "Async resume" \
8013 -s "Async cancel"
8014
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008015requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008016run_test "SSL async private: sign, error in resume" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008017 "$P_SRV \
8018 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8019 async_private_error=3" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008020 "$P_CLI" \
8021 1 \
8022 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008023 -s "Async resume callback: sign done but injected error" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02008024 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008025 -s "! mbedtls_ssl_handshake returned"
8026
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008027requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008028run_test "SSL async private: decrypt, error in start" \
8029 "$P_SRV \
8030 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8031 async_private_error=1" \
8032 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8033 1 \
8034 -s "Async decrypt callback: injected error" \
8035 -S "Async resume" \
8036 -S "Async cancel" \
8037 -s "! mbedtls_ssl_handshake returned"
8038
8039requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
8040run_test "SSL async private: decrypt, cancel after start" \
8041 "$P_SRV \
8042 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8043 async_private_error=2" \
8044 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8045 1 \
8046 -s "Async decrypt callback: using key slot " \
8047 -S "Async resume" \
8048 -s "Async cancel"
8049
8050requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
8051run_test "SSL async private: decrypt, error in resume" \
8052 "$P_SRV \
8053 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8054 async_private_error=3" \
8055 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8056 1 \
8057 -s "Async decrypt callback: using key slot " \
8058 -s "Async resume callback: decrypt done but injected error" \
8059 -S "Async cancel" \
8060 -s "! mbedtls_ssl_handshake returned"
8061
8062requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008063run_test "SSL async private: cancel after start then operate correctly" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008064 "$P_SRV \
8065 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8066 async_private_error=-2" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008067 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
8068 0 \
8069 -s "Async cancel" \
8070 -s "! mbedtls_ssl_handshake returned" \
8071 -s "Async resume" \
8072 -s "Successful connection"
8073
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008074requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008075run_test "SSL async private: error in resume then operate correctly" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008076 "$P_SRV \
8077 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8078 async_private_error=-3" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008079 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
8080 0 \
8081 -s "! mbedtls_ssl_handshake returned" \
8082 -s "Async resume" \
8083 -s "Successful connection"
8084
8085# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008086requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008087run_test "SSL async private: cancel after start then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008088 "$P_SRV \
8089 async_operations=s async_private_delay1=1 async_private_error=-2 \
8090 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8091 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008092 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
8093 [ \$? -eq 1 ] &&
8094 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8095 0 \
Gilles Peskinededa75a2018-04-30 10:02:45 +02008096 -s "Async sign callback: using key slot 0" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008097 -S "Async resume" \
8098 -s "Async cancel" \
8099 -s "! mbedtls_ssl_handshake returned" \
8100 -s "Async sign callback: no key matches this certificate." \
8101 -s "Successful connection"
8102
8103# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008104requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008105run_test "SSL async private: sign, error in resume then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008106 "$P_SRV \
8107 async_operations=s async_private_delay1=1 async_private_error=-3 \
8108 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8109 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008110 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
8111 [ \$? -eq 1 ] &&
8112 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8113 0 \
8114 -s "Async resume" \
8115 -s "! mbedtls_ssl_handshake returned" \
8116 -s "Async sign callback: no key matches this certificate." \
8117 -s "Successful connection"
8118
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008119requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008120requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008121run_test "SSL async private: renegotiation: client-initiated, sign" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008122 "$P_SRV \
8123 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008124 exchanges=2 renegotiation=1" \
8125 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1" \
8126 0 \
8127 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008128 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008129
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008130requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008131requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008132run_test "SSL async private: renegotiation: server-initiated, sign" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008133 "$P_SRV \
8134 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008135 exchanges=2 renegotiation=1 renegotiate=1" \
8136 "$P_CLI exchanges=2 renegotiation=1" \
8137 0 \
8138 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008139 -s "Async resume (slot [0-9]): sign done, status=0"
8140
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008141requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008142requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008143run_test "SSL async private: renegotiation: client-initiated, decrypt" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008144 "$P_SRV \
8145 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8146 exchanges=2 renegotiation=1" \
8147 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1 \
8148 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8149 0 \
8150 -s "Async decrypt callback: using key slot " \
8151 -s "Async resume (slot [0-9]): decrypt done, status=0"
8152
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008153requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008154requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008155run_test "SSL async private: renegotiation: server-initiated, decrypt" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008156 "$P_SRV \
8157 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8158 exchanges=2 renegotiation=1 renegotiate=1" \
8159 "$P_CLI exchanges=2 renegotiation=1 \
8160 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8161 0 \
8162 -s "Async decrypt callback: using key slot " \
8163 -s "Async resume (slot [0-9]): decrypt done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008164
Ron Eldor58093c82018-06-28 13:22:05 +03008165# Tests for ECC extensions (rfc 4492)
8166
Ron Eldor643df7c2018-06-28 16:17:00 +03008167requires_config_enabled MBEDTLS_AES_C
8168requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
8169requires_config_enabled MBEDTLS_SHA256_C
8170requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03008171run_test "Force a non ECC ciphersuite in the client side" \
8172 "$P_SRV debug_level=3" \
Ron Eldor643df7c2018-06-28 16:17:00 +03008173 "$P_CLI debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03008174 0 \
8175 -C "client hello, adding supported_elliptic_curves extension" \
8176 -C "client hello, adding supported_point_formats extension" \
8177 -S "found supported elliptic curves extension" \
8178 -S "found supported point formats extension"
8179
Ron Eldor643df7c2018-06-28 16:17:00 +03008180requires_config_enabled MBEDTLS_AES_C
8181requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
8182requires_config_enabled MBEDTLS_SHA256_C
8183requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03008184run_test "Force a non ECC ciphersuite in the server side" \
Ron Eldor643df7c2018-06-28 16:17:00 +03008185 "$P_SRV debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03008186 "$P_CLI debug_level=3" \
8187 0 \
8188 -C "found supported_point_formats extension" \
8189 -S "server hello, supported_point_formats extension"
8190
Ron Eldor643df7c2018-06-28 16:17:00 +03008191requires_config_enabled MBEDTLS_AES_C
8192requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
8193requires_config_enabled MBEDTLS_SHA256_C
8194requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03008195run_test "Force an ECC ciphersuite in the client side" \
8196 "$P_SRV debug_level=3" \
8197 "$P_CLI debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
8198 0 \
8199 -c "client hello, adding supported_elliptic_curves extension" \
8200 -c "client hello, adding supported_point_formats extension" \
8201 -s "found supported elliptic curves extension" \
8202 -s "found supported point formats extension"
8203
Ron Eldor643df7c2018-06-28 16:17:00 +03008204requires_config_enabled MBEDTLS_AES_C
8205requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
8206requires_config_enabled MBEDTLS_SHA256_C
8207requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03008208run_test "Force an ECC ciphersuite in the server side" \
8209 "$P_SRV debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
8210 "$P_CLI debug_level=3" \
8211 0 \
8212 -c "found supported_point_formats extension" \
8213 -s "server hello, supported_point_formats extension"
8214
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008215# Tests for DTLS HelloVerifyRequest
8216
8217run_test "DTLS cookie: enabled" \
8218 "$P_SRV dtls=1 debug_level=2" \
8219 "$P_CLI dtls=1 debug_level=2" \
8220 0 \
8221 -s "cookie verification failed" \
8222 -s "cookie verification passed" \
8223 -S "cookie verification skipped" \
8224 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008225 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008226 -S "SSL - The requested feature is not available"
8227
8228run_test "DTLS cookie: disabled" \
8229 "$P_SRV dtls=1 debug_level=2 cookies=0" \
8230 "$P_CLI dtls=1 debug_level=2" \
8231 0 \
8232 -S "cookie verification failed" \
8233 -S "cookie verification passed" \
8234 -s "cookie verification skipped" \
8235 -C "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008236 -S "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008237 -S "SSL - The requested feature is not available"
8238
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008239run_test "DTLS cookie: default (failing)" \
8240 "$P_SRV dtls=1 debug_level=2 cookies=-1" \
8241 "$P_CLI dtls=1 debug_level=2 hs_timeout=100-400" \
8242 1 \
8243 -s "cookie verification failed" \
8244 -S "cookie verification passed" \
8245 -S "cookie verification skipped" \
8246 -C "received hello verify request" \
8247 -S "hello verification requested" \
8248 -s "SSL - The requested feature is not available"
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008249
8250requires_ipv6
8251run_test "DTLS cookie: enabled, IPv6" \
8252 "$P_SRV dtls=1 debug_level=2 server_addr=::1" \
8253 "$P_CLI dtls=1 debug_level=2 server_addr=::1" \
8254 0 \
8255 -s "cookie verification failed" \
8256 -s "cookie verification passed" \
8257 -S "cookie verification skipped" \
8258 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008259 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02008260 -S "SSL - The requested feature is not available"
8261
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02008262run_test "DTLS cookie: enabled, nbio" \
8263 "$P_SRV dtls=1 nbio=2 debug_level=2" \
8264 "$P_CLI dtls=1 nbio=2 debug_level=2" \
8265 0 \
8266 -s "cookie verification failed" \
8267 -s "cookie verification passed" \
8268 -S "cookie verification skipped" \
8269 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02008270 -s "hello verification requested" \
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02008271 -S "SSL - The requested feature is not available"
8272
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008273# Tests for client reconnecting from the same port with DTLS
8274
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008275not_with_valgrind # spurious resend
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008276run_test "DTLS client reconnect from same port: reference" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +02008277 "$P_SRV dtls=1 exchanges=2 read_timeout=20000 hs_timeout=10000-20000" \
8278 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008279 0 \
8280 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008281 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008282 -S "Client initiated reconnection from same port"
8283
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008284not_with_valgrind # spurious resend
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008285run_test "DTLS client reconnect from same port: reconnect" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +02008286 "$P_SRV dtls=1 exchanges=2 read_timeout=20000 hs_timeout=10000-20000" \
8287 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=10000-20000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008288 0 \
8289 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008290 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008291 -s "Client initiated reconnection from same port"
8292
Paul Bakker362689d2016-05-13 10:33:25 +01008293not_with_valgrind # server/client too slow to respond in time (next test has higher timeouts)
8294run_test "DTLS client reconnect from same port: reconnect, nbio, no valgrind" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008295 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 nbio=2" \
8296 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008297 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008298 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02008299 -s "Client initiated reconnection from same port"
8300
Paul Bakker362689d2016-05-13 10:33:25 +01008301only_with_valgrind # Only with valgrind, do previous test but with higher read_timeout and hs_timeout
8302run_test "DTLS client reconnect from same port: reconnect, nbio, valgrind" \
8303 "$P_SRV dtls=1 exchanges=2 read_timeout=2000 nbio=2 hs_timeout=1500-6000" \
8304 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=1500-3000 reconnect_hard=1" \
8305 0 \
8306 -S "The operation timed out" \
8307 -s "Client initiated reconnection from same port"
8308
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008309run_test "DTLS client reconnect from same port: no cookies" \
8310 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 cookies=0" \
Manuel Pégourié-Gonnard6ad23b92015-09-15 12:57:46 +02008311 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-8000 reconnect_hard=1" \
8312 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02008313 -s "The operation timed out" \
8314 -S "Client initiated reconnection from same port"
8315
Manuel Pégourié-Gonnardbaad2de2020-03-13 11:11:02 +01008316run_test "DTLS client reconnect from same port: attacker-injected" \
8317 -p "$P_PXY inject_clihlo=1" \
8318 "$P_SRV dtls=1 exchanges=2 debug_level=1" \
8319 "$P_CLI dtls=1 exchanges=2" \
8320 0 \
8321 -s "possible client reconnect from the same port" \
8322 -S "Client initiated reconnection from same port"
8323
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02008324# Tests for various cases of client authentication with DTLS
8325# (focused on handshake flows and message parsing)
8326
8327run_test "DTLS client auth: required" \
8328 "$P_SRV dtls=1 auth_mode=required" \
8329 "$P_CLI dtls=1" \
8330 0 \
8331 -s "Verifying peer X.509 certificate... ok"
8332
8333run_test "DTLS client auth: optional, client has no cert" \
8334 "$P_SRV dtls=1 auth_mode=optional" \
8335 "$P_CLI dtls=1 crt_file=none key_file=none" \
8336 0 \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01008337 -s "! Certificate was missing"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02008338
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01008339run_test "DTLS client auth: none, client has no cert" \
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02008340 "$P_SRV dtls=1 auth_mode=none" \
8341 "$P_CLI dtls=1 crt_file=none key_file=none debug_level=2" \
8342 0 \
8343 -c "skip write certificate$" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01008344 -s "! Certificate verification was skipped"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02008345
Manuel Pégourié-Gonnard0a885742015-08-04 12:08:35 +02008346run_test "DTLS wrong PSK: badmac alert" \
8347 "$P_SRV dtls=1 psk=abc123 force_ciphersuite=TLS-PSK-WITH-AES-128-GCM-SHA256" \
8348 "$P_CLI dtls=1 psk=abc124" \
8349 1 \
8350 -s "SSL - Verification of the message MAC failed" \
8351 -c "SSL - A fatal alert message was received from our peer"
8352
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02008353# Tests for receiving fragmented handshake messages with DTLS
8354
8355requires_gnutls
8356run_test "DTLS reassembly: no fragmentation (gnutls server)" \
8357 "$G_SRV -u --mtu 2048 -a" \
8358 "$P_CLI dtls=1 debug_level=2" \
8359 0 \
8360 -C "found fragmented DTLS handshake message" \
8361 -C "error"
8362
8363requires_gnutls
8364run_test "DTLS reassembly: some fragmentation (gnutls server)" \
8365 "$G_SRV -u --mtu 512" \
8366 "$P_CLI dtls=1 debug_level=2" \
8367 0 \
8368 -c "found fragmented DTLS handshake message" \
8369 -C "error"
8370
8371requires_gnutls
8372run_test "DTLS reassembly: more fragmentation (gnutls server)" \
8373 "$G_SRV -u --mtu 128" \
8374 "$P_CLI dtls=1 debug_level=2" \
8375 0 \
8376 -c "found fragmented DTLS handshake message" \
8377 -C "error"
8378
8379requires_gnutls
8380run_test "DTLS reassembly: more fragmentation, nbio (gnutls server)" \
8381 "$G_SRV -u --mtu 128" \
8382 "$P_CLI dtls=1 nbio=2 debug_level=2" \
8383 0 \
8384 -c "found fragmented DTLS handshake message" \
8385 -C "error"
8386
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008387requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01008388requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008389run_test "DTLS reassembly: fragmentation, renego (gnutls server)" \
8390 "$G_SRV -u --mtu 256" \
8391 "$P_CLI debug_level=3 dtls=1 renegotiation=1 renegotiate=1" \
8392 0 \
8393 -c "found fragmented DTLS handshake message" \
8394 -c "client hello, adding renegotiation extension" \
8395 -c "found renegotiation extension" \
8396 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008397 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008398 -C "error" \
8399 -s "Extra-header:"
8400
8401requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01008402requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008403run_test "DTLS reassembly: fragmentation, nbio, renego (gnutls server)" \
8404 "$G_SRV -u --mtu 256" \
8405 "$P_CLI debug_level=3 nbio=2 dtls=1 renegotiation=1 renegotiate=1" \
8406 0 \
8407 -c "found fragmented DTLS handshake message" \
8408 -c "client hello, adding renegotiation extension" \
8409 -c "found renegotiation extension" \
8410 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008411 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02008412 -C "error" \
8413 -s "Extra-header:"
8414
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02008415run_test "DTLS reassembly: no fragmentation (openssl server)" \
8416 "$O_SRV -dtls1 -mtu 2048" \
8417 "$P_CLI dtls=1 debug_level=2" \
8418 0 \
8419 -C "found fragmented DTLS handshake message" \
8420 -C "error"
8421
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008422run_test "DTLS reassembly: some fragmentation (openssl server)" \
8423 "$O_SRV -dtls1 -mtu 768" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +02008424 "$P_CLI dtls=1 debug_level=2" \
8425 0 \
8426 -c "found fragmented DTLS handshake message" \
8427 -C "error"
8428
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008429run_test "DTLS reassembly: more fragmentation (openssl server)" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +02008430 "$O_SRV -dtls1 -mtu 256" \
8431 "$P_CLI dtls=1 debug_level=2" \
8432 0 \
8433 -c "found fragmented DTLS handshake message" \
8434 -C "error"
8435
8436run_test "DTLS reassembly: fragmentation, nbio (openssl server)" \
8437 "$O_SRV -dtls1 -mtu 256" \
8438 "$P_CLI dtls=1 nbio=2 debug_level=2" \
8439 0 \
8440 -c "found fragmented DTLS handshake message" \
8441 -C "error"
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02008442
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008443# Tests for sending fragmented handshake messages with DTLS
8444#
8445# Use client auth when we need the client to send large messages,
8446# and use large cert chains on both sides too (the long chains we have all use
8447# both RSA and ECDSA, but ideally we should have long chains with either).
8448# Sizes reached (UDP payload):
8449# - 2037B for server certificate
8450# - 1542B for client certificate
8451# - 1013B for newsessionticket
8452# - all others below 512B
8453# All those tests assume MAX_CONTENT_LEN is at least 2048
8454
8455requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8456requires_config_enabled MBEDTLS_RSA_C
8457requires_config_enabled MBEDTLS_ECDSA_C
8458requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008459requires_max_content_len 4096
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008460run_test "DTLS fragmenting: none (for reference)" \
8461 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8462 crt_file=data_files/server7_int-ca.crt \
8463 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008464 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008465 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008466 "$P_CLI dtls=1 debug_level=2 \
8467 crt_file=data_files/server8_int-ca2.crt \
8468 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008469 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008470 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008471 0 \
8472 -S "found fragmented DTLS handshake message" \
8473 -C "found fragmented DTLS handshake message" \
8474 -C "error"
8475
8476requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8477requires_config_enabled MBEDTLS_RSA_C
8478requires_config_enabled MBEDTLS_ECDSA_C
8479requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008480requires_max_content_len 2048
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008481run_test "DTLS fragmenting: server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008482 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8483 crt_file=data_files/server7_int-ca.crt \
8484 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008485 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008486 max_frag_len=1024" \
8487 "$P_CLI dtls=1 debug_level=2 \
8488 crt_file=data_files/server8_int-ca2.crt \
8489 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008490 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008491 max_frag_len=2048" \
8492 0 \
8493 -S "found fragmented DTLS handshake message" \
8494 -c "found fragmented DTLS handshake message" \
8495 -C "error"
8496
Hanno Becker69ca0ad2018-08-24 12:11:35 +01008497# With the MFL extension, the server has no way of forcing
8498# the client to not exceed a certain MTU; hence, the following
8499# test can't be replicated with an MTU proxy such as the one
8500# `client-initiated, server only (max_frag_len)` below.
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008501requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8502requires_config_enabled MBEDTLS_RSA_C
8503requires_config_enabled MBEDTLS_ECDSA_C
8504requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008505requires_max_content_len 4096
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008506run_test "DTLS fragmenting: server only (more) (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008507 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8508 crt_file=data_files/server7_int-ca.crt \
8509 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008510 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008511 max_frag_len=512" \
8512 "$P_CLI dtls=1 debug_level=2 \
8513 crt_file=data_files/server8_int-ca2.crt \
8514 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008515 hs_timeout=2500-60000 \
Hanno Becker69ca0ad2018-08-24 12:11:35 +01008516 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008517 0 \
8518 -S "found fragmented DTLS handshake message" \
8519 -c "found fragmented DTLS handshake message" \
8520 -C "error"
8521
8522requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8523requires_config_enabled MBEDTLS_RSA_C
8524requires_config_enabled MBEDTLS_ECDSA_C
8525requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008526requires_max_content_len 2048
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008527run_test "DTLS fragmenting: client-initiated, server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008528 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
8529 crt_file=data_files/server7_int-ca.crt \
8530 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008531 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008532 max_frag_len=2048" \
8533 "$P_CLI dtls=1 debug_level=2 \
8534 crt_file=data_files/server8_int-ca2.crt \
8535 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008536 hs_timeout=2500-60000 \
8537 max_frag_len=1024" \
8538 0 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008539 -S "found fragmented DTLS handshake message" \
8540 -c "found fragmented DTLS handshake message" \
8541 -C "error"
8542
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008543# While not required by the standard defining the MFL extension
8544# (according to which it only applies to records, not to datagrams),
8545# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
8546# as otherwise there wouldn't be any means to communicate MTU restrictions
8547# to the peer.
8548# The next test checks that no datagrams significantly larger than the
8549# negotiated MFL are sent.
8550requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8551requires_config_enabled MBEDTLS_RSA_C
8552requires_config_enabled MBEDTLS_ECDSA_C
8553requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008554requires_max_content_len 2048
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008555run_test "DTLS fragmenting: client-initiated, server only (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04008556 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008557 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
8558 crt_file=data_files/server7_int-ca.crt \
8559 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008560 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008561 max_frag_len=2048" \
8562 "$P_CLI dtls=1 debug_level=2 \
8563 crt_file=data_files/server8_int-ca2.crt \
8564 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008565 hs_timeout=2500-60000 \
8566 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008567 0 \
8568 -S "found fragmented DTLS handshake message" \
8569 -c "found fragmented DTLS handshake message" \
8570 -C "error"
8571
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008572requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8573requires_config_enabled MBEDTLS_RSA_C
8574requires_config_enabled MBEDTLS_ECDSA_C
8575requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008576requires_max_content_len 2048
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008577run_test "DTLS fragmenting: client-initiated, both (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008578 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8579 crt_file=data_files/server7_int-ca.crt \
8580 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008581 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008582 max_frag_len=2048" \
8583 "$P_CLI dtls=1 debug_level=2 \
8584 crt_file=data_files/server8_int-ca2.crt \
8585 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008586 hs_timeout=2500-60000 \
8587 max_frag_len=1024" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02008588 0 \
8589 -s "found fragmented DTLS handshake message" \
8590 -c "found fragmented DTLS handshake message" \
8591 -C "error"
8592
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008593# While not required by the standard defining the MFL extension
8594# (according to which it only applies to records, not to datagrams),
8595# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
8596# as otherwise there wouldn't be any means to communicate MTU restrictions
8597# to the peer.
8598# The next test checks that no datagrams significantly larger than the
8599# negotiated MFL are sent.
8600requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8601requires_config_enabled MBEDTLS_RSA_C
8602requires_config_enabled MBEDTLS_ECDSA_C
8603requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +01008604requires_max_content_len 2048
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008605run_test "DTLS fragmenting: client-initiated, both (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04008606 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008607 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8608 crt_file=data_files/server7_int-ca.crt \
8609 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008610 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008611 max_frag_len=2048" \
8612 "$P_CLI dtls=1 debug_level=2 \
8613 crt_file=data_files/server8_int-ca2.crt \
8614 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008615 hs_timeout=2500-60000 \
8616 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01008617 0 \
8618 -s "found fragmented DTLS handshake message" \
8619 -c "found fragmented DTLS handshake message" \
8620 -C "error"
8621
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008622requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8623requires_config_enabled MBEDTLS_RSA_C
8624requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008625requires_max_content_len 4096
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008626run_test "DTLS fragmenting: none (for reference) (MTU)" \
8627 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8628 crt_file=data_files/server7_int-ca.crt \
8629 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008630 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008631 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008632 "$P_CLI dtls=1 debug_level=2 \
8633 crt_file=data_files/server8_int-ca2.crt \
8634 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008635 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008636 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008637 0 \
8638 -S "found fragmented DTLS handshake message" \
8639 -C "found fragmented DTLS handshake message" \
8640 -C "error"
8641
8642requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8643requires_config_enabled MBEDTLS_RSA_C
8644requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008645requires_max_content_len 4096
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008646run_test "DTLS fragmenting: client (MTU)" \
8647 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8648 crt_file=data_files/server7_int-ca.crt \
8649 key_file=data_files/server7.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008650 hs_timeout=3500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01008651 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008652 "$P_CLI dtls=1 debug_level=2 \
8653 crt_file=data_files/server8_int-ca2.crt \
8654 key_file=data_files/server8.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008655 hs_timeout=3500-60000 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008656 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008657 0 \
8658 -s "found fragmented DTLS handshake message" \
8659 -C "found fragmented DTLS handshake message" \
8660 -C "error"
8661
8662requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8663requires_config_enabled MBEDTLS_RSA_C
8664requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008665requires_max_content_len 2048
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008666run_test "DTLS fragmenting: server (MTU)" \
8667 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8668 crt_file=data_files/server7_int-ca.crt \
8669 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008670 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008671 mtu=512" \
8672 "$P_CLI dtls=1 debug_level=2 \
8673 crt_file=data_files/server8_int-ca2.crt \
8674 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008675 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008676 mtu=2048" \
8677 0 \
8678 -S "found fragmented DTLS handshake message" \
8679 -c "found fragmented DTLS handshake message" \
8680 -C "error"
8681
8682requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8683requires_config_enabled MBEDTLS_RSA_C
8684requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008685requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008686run_test "DTLS fragmenting: both (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008687 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008688 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8689 crt_file=data_files/server7_int-ca.crt \
8690 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008691 hs_timeout=2500-60000 \
Andrzej Kurek95805282018-10-11 08:55:37 -04008692 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008693 "$P_CLI dtls=1 debug_level=2 \
8694 crt_file=data_files/server8_int-ca2.crt \
8695 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008696 hs_timeout=2500-60000 \
8697 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02008698 0 \
8699 -s "found fragmented DTLS handshake message" \
8700 -c "found fragmented DTLS handshake message" \
8701 -C "error"
8702
Andrzej Kurek77826052018-10-11 07:34:08 -04008703# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04008704requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8705requires_config_enabled MBEDTLS_RSA_C
8706requires_config_enabled MBEDTLS_ECDSA_C
8707requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008708requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008709requires_config_enabled MBEDTLS_AES_C
8710requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008711requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008712run_test "DTLS fragmenting: both (MTU=512)" \
Hanno Becker8d832182018-03-15 10:14:19 +00008713 -p "$P_PXY mtu=512" \
Hanno Becker72a4f032017-11-15 16:39:20 +00008714 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8715 crt_file=data_files/server7_int-ca.crt \
8716 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008717 hs_timeout=2500-60000 \
Hanno Becker72a4f032017-11-15 16:39:20 +00008718 mtu=512" \
8719 "$P_CLI dtls=1 debug_level=2 \
8720 crt_file=data_files/server8_int-ca2.crt \
8721 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008722 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8723 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008724 mtu=512" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02008725 0 \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02008726 -s "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008727 -c "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008728 -C "error"
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02008729
Andrzej Kurek7311c782018-10-11 06:49:41 -04008730# Test for automatic MTU reduction on repeated resend.
Andrzej Kurek77826052018-10-11 07:34:08 -04008731# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04008732# The ratio of max/min timeout should ideally equal 4 to accept two
8733# retransmissions, but in some cases (like both the server and client using
8734# fragmentation and auto-reduction) an extra retransmission might occur,
8735# hence the ratio of 8.
Hanno Becker37029eb2018-08-29 17:01:40 +01008736not_with_valgrind
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02008737requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8738requires_config_enabled MBEDTLS_RSA_C
8739requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008740requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008741requires_config_enabled MBEDTLS_AES_C
8742requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008743requires_max_content_len 2048
Gilles Peskine0d8b86a2019-09-20 18:03:11 +02008744run_test "DTLS fragmenting: proxy MTU: auto-reduction (not valgrind)" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02008745 -p "$P_PXY mtu=508" \
8746 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8747 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008748 key_file=data_files/server7.key \
8749 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02008750 "$P_CLI dtls=1 debug_level=2 \
8751 crt_file=data_files/server8_int-ca2.crt \
8752 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008753 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8754 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02008755 0 \
8756 -s "found fragmented DTLS handshake message" \
8757 -c "found fragmented DTLS handshake message" \
8758 -C "error"
8759
Andrzej Kurek77826052018-10-11 07:34:08 -04008760# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Hanno Becker108992e2018-08-29 17:04:18 +01008761only_with_valgrind
8762requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8763requires_config_enabled MBEDTLS_RSA_C
8764requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008765requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008766requires_config_enabled MBEDTLS_AES_C
8767requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008768requires_max_content_len 2048
Gilles Peskine0d8b86a2019-09-20 18:03:11 +02008769run_test "DTLS fragmenting: proxy MTU: auto-reduction (with valgrind)" \
Hanno Becker108992e2018-08-29 17:04:18 +01008770 -p "$P_PXY mtu=508" \
8771 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8772 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008773 key_file=data_files/server7.key \
Hanno Becker108992e2018-08-29 17:04:18 +01008774 hs_timeout=250-10000" \
8775 "$P_CLI dtls=1 debug_level=2 \
8776 crt_file=data_files/server8_int-ca2.crt \
8777 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008778 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Hanno Becker108992e2018-08-29 17:04:18 +01008779 hs_timeout=250-10000" \
8780 0 \
8781 -s "found fragmented DTLS handshake message" \
8782 -c "found fragmented DTLS handshake message" \
8783 -C "error"
8784
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008785# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
Manuel Pégourié-Gonnard3d183ce2018-08-22 09:56:22 +02008786# OTOH the client might resend if the server is to slow to reset after sending
8787# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008788not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008789requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8790requires_config_enabled MBEDTLS_RSA_C
8791requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008792requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008793run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008794 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008795 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8796 crt_file=data_files/server7_int-ca.crt \
8797 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008798 hs_timeout=10000-60000 \
8799 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008800 "$P_CLI dtls=1 debug_level=2 \
8801 crt_file=data_files/server8_int-ca2.crt \
8802 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008803 hs_timeout=10000-60000 \
8804 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008805 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008806 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008807 -s "found fragmented DTLS handshake message" \
8808 -c "found fragmented DTLS handshake message" \
8809 -C "error"
8810
Andrzej Kurek77826052018-10-11 07:34:08 -04008811# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04008812# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
8813# OTOH the client might resend if the server is to slow to reset after sending
8814# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008815not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008816requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8817requires_config_enabled MBEDTLS_RSA_C
8818requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008819requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008820requires_config_enabled MBEDTLS_AES_C
8821requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008822requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008823run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=512)" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008824 -p "$P_PXY mtu=512" \
8825 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8826 crt_file=data_files/server7_int-ca.crt \
8827 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008828 hs_timeout=10000-60000 \
8829 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008830 "$P_CLI dtls=1 debug_level=2 \
8831 crt_file=data_files/server8_int-ca2.crt \
8832 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008833 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8834 hs_timeout=10000-60000 \
8835 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008836 0 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008837 -S "autoreduction" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02008838 -s "found fragmented DTLS handshake message" \
8839 -c "found fragmented DTLS handshake message" \
8840 -C "error"
8841
Andrzej Kurek7311c782018-10-11 06:49:41 -04008842not_with_valgrind # spurious autoreduction due to timeout
8843requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8844requires_config_enabled MBEDTLS_RSA_C
8845requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008846requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008847run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008848 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008849 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8850 crt_file=data_files/server7_int-ca.crt \
8851 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008852 hs_timeout=10000-60000 \
8853 mtu=1024 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008854 "$P_CLI dtls=1 debug_level=2 \
8855 crt_file=data_files/server8_int-ca2.crt \
8856 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008857 hs_timeout=10000-60000 \
8858 mtu=1024 nbio=2" \
8859 0 \
8860 -S "autoreduction" \
8861 -s "found fragmented DTLS handshake message" \
8862 -c "found fragmented DTLS handshake message" \
8863 -C "error"
8864
Andrzej Kurek77826052018-10-11 07:34:08 -04008865# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04008866not_with_valgrind # spurious autoreduction due to timeout
8867requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8868requires_config_enabled MBEDTLS_RSA_C
8869requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008870requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008871requires_config_enabled MBEDTLS_AES_C
8872requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008873requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04008874run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=512)" \
8875 -p "$P_PXY mtu=512" \
8876 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8877 crt_file=data_files/server7_int-ca.crt \
8878 key_file=data_files/server7.key \
8879 hs_timeout=10000-60000 \
8880 mtu=512 nbio=2" \
8881 "$P_CLI dtls=1 debug_level=2 \
8882 crt_file=data_files/server8_int-ca2.crt \
8883 key_file=data_files/server8.key \
8884 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8885 hs_timeout=10000-60000 \
8886 mtu=512 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008887 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008888 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008889 -s "found fragmented DTLS handshake message" \
8890 -c "found fragmented DTLS handshake message" \
8891 -C "error"
8892
Andrzej Kurek77826052018-10-11 07:34:08 -04008893# Forcing ciphersuite for this test to fit the MTU of 1450 with full config.
Hanno Beckerb841b4f2018-08-28 10:25:51 +01008894# This ensures things still work after session_reset().
8895# It also exercises the "resumed handshake" flow.
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008896# Since we don't support reading fragmented ClientHello yet,
8897# up the MTU to 1450 (larger than ClientHello with session ticket,
8898# but still smaller than client's Certificate to ensure fragmentation).
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008899# An autoreduction on the client-side might happen if the server is
8900# slow to reset, therefore omitting '-C "autoreduction"' below.
Manuel Pégourié-Gonnard2f2d9022018-08-21 12:17:54 +02008901# reco_delay avoids races where the client reconnects before the server has
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008902# resumed listening, which would result in a spurious autoreduction.
8903not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008904requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8905requires_config_enabled MBEDTLS_RSA_C
8906requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008907requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04008908requires_config_enabled MBEDTLS_AES_C
8909requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008910requires_max_content_len 2048
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008911run_test "DTLS fragmenting: proxy MTU, resumed handshake" \
8912 -p "$P_PXY mtu=1450" \
8913 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8914 crt_file=data_files/server7_int-ca.crt \
8915 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008916 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008917 mtu=1450" \
8918 "$P_CLI dtls=1 debug_level=2 \
8919 crt_file=data_files/server8_int-ca2.crt \
8920 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008921 hs_timeout=10000-60000 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008922 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01008923 mtu=1450 reconnect=1 skip_close_notify=1 reco_delay=1" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008924 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008925 -S "autoreduction" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02008926 -s "found fragmented DTLS handshake message" \
8927 -c "found fragmented DTLS handshake message" \
8928 -C "error"
8929
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008930# An autoreduction on the client-side might happen if the server is
8931# slow to reset, therefore omitting '-C "autoreduction"' below.
8932not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008933requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8934requires_config_enabled MBEDTLS_RSA_C
8935requires_config_enabled MBEDTLS_ECDSA_C
8936requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008937requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008938requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
8939requires_config_enabled MBEDTLS_CHACHAPOLY_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008940requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008941run_test "DTLS fragmenting: proxy MTU, ChachaPoly renego" \
8942 -p "$P_PXY mtu=512" \
8943 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8944 crt_file=data_files/server7_int-ca.crt \
8945 key_file=data_files/server7.key \
8946 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008947 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008948 mtu=512" \
8949 "$P_CLI dtls=1 debug_level=2 \
8950 crt_file=data_files/server8_int-ca2.crt \
8951 key_file=data_files/server8.key \
8952 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008953 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008954 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008955 mtu=512" \
8956 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008957 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008958 -s "found fragmented DTLS handshake message" \
8959 -c "found fragmented DTLS handshake message" \
8960 -C "error"
8961
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008962# An autoreduction on the client-side might happen if the server is
8963# slow to reset, therefore omitting '-C "autoreduction"' below.
8964not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008965requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8966requires_config_enabled MBEDTLS_RSA_C
8967requires_config_enabled MBEDTLS_ECDSA_C
8968requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02008969requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008970requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
8971requires_config_enabled MBEDTLS_AES_C
8972requires_config_enabled MBEDTLS_GCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01008973requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008974run_test "DTLS fragmenting: proxy MTU, AES-GCM renego" \
8975 -p "$P_PXY mtu=512" \
8976 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
8977 crt_file=data_files/server7_int-ca.crt \
8978 key_file=data_files/server7.key \
8979 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008980 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008981 mtu=512" \
8982 "$P_CLI dtls=1 debug_level=2 \
8983 crt_file=data_files/server8_int-ca2.crt \
8984 key_file=data_files/server8.key \
8985 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04008986 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04008987 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008988 mtu=512" \
8989 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008990 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008991 -s "found fragmented DTLS handshake message" \
8992 -c "found fragmented DTLS handshake message" \
8993 -C "error"
8994
Andrzej Kurek35f2f302018-10-09 08:52:14 -04008995# An autoreduction on the client-side might happen if the server is
8996# slow to reset, therefore omitting '-C "autoreduction"' below.
8997not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02008998requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8999requires_config_enabled MBEDTLS_RSA_C
9000requires_config_enabled MBEDTLS_ECDSA_C
9001requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009002requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009003requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9004requires_config_enabled MBEDTLS_AES_C
9005requires_config_enabled MBEDTLS_CCM_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01009006requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009007run_test "DTLS fragmenting: proxy MTU, AES-CCM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009008 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009009 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9010 crt_file=data_files/server7_int-ca.crt \
9011 key_file=data_files/server7.key \
9012 exchanges=2 renegotiation=1 \
9013 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009014 hs_timeout=10000-60000 \
9015 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009016 "$P_CLI dtls=1 debug_level=2 \
9017 crt_file=data_files/server8_int-ca2.crt \
9018 key_file=data_files/server8.key \
9019 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009020 hs_timeout=10000-60000 \
9021 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009022 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009023 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009024 -s "found fragmented DTLS handshake message" \
9025 -c "found fragmented DTLS handshake message" \
9026 -C "error"
9027
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009028# An autoreduction on the client-side might happen if the server is
9029# slow to reset, therefore omitting '-C "autoreduction"' below.
9030not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009031requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9032requires_config_enabled MBEDTLS_RSA_C
9033requires_config_enabled MBEDTLS_ECDSA_C
9034requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009035requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009036requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9037requires_config_enabled MBEDTLS_AES_C
9038requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
9039requires_config_enabled MBEDTLS_SSL_ENCRYPT_THEN_MAC
Yuto Takanoa49124e2021-07-08 15:56:33 +01009040requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009041run_test "DTLS fragmenting: proxy MTU, AES-CBC EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009042 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009043 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9044 crt_file=data_files/server7_int-ca.crt \
9045 key_file=data_files/server7.key \
9046 exchanges=2 renegotiation=1 \
9047 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009048 hs_timeout=10000-60000 \
9049 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009050 "$P_CLI dtls=1 debug_level=2 \
9051 crt_file=data_files/server8_int-ca2.crt \
9052 key_file=data_files/server8.key \
9053 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009054 hs_timeout=10000-60000 \
9055 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009056 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009057 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009058 -s "found fragmented DTLS handshake message" \
9059 -c "found fragmented DTLS handshake message" \
9060 -C "error"
9061
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009062# An autoreduction on the client-side might happen if the server is
9063# slow to reset, therefore omitting '-C "autoreduction"' below.
9064not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009065requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9066requires_config_enabled MBEDTLS_RSA_C
9067requires_config_enabled MBEDTLS_ECDSA_C
9068requires_config_enabled MBEDTLS_SHA256_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009069requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009070requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9071requires_config_enabled MBEDTLS_AES_C
9072requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
Yuto Takanoa49124e2021-07-08 15:56:33 +01009073requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009074run_test "DTLS fragmenting: proxy MTU, AES-CBC non-EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009075 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009076 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9077 crt_file=data_files/server7_int-ca.crt \
9078 key_file=data_files/server7.key \
9079 exchanges=2 renegotiation=1 \
9080 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 etm=0 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009081 hs_timeout=10000-60000 \
9082 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009083 "$P_CLI dtls=1 debug_level=2 \
9084 crt_file=data_files/server8_int-ca2.crt \
9085 key_file=data_files/server8.key \
9086 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009087 hs_timeout=10000-60000 \
9088 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009089 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009090 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009091 -s "found fragmented DTLS handshake message" \
9092 -c "found fragmented DTLS handshake message" \
9093 -C "error"
9094
Andrzej Kurek77826052018-10-11 07:34:08 -04009095# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009096requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9097requires_config_enabled MBEDTLS_RSA_C
9098requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009099requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04009100requires_config_enabled MBEDTLS_AES_C
9101requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009102client_needs_more_time 2
Yuto Takanoa49124e2021-07-08 15:56:33 +01009103requires_max_content_len 2048
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009104run_test "DTLS fragmenting: proxy MTU + 3d" \
9105 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009106 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 auth_mode=required \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009107 crt_file=data_files/server7_int-ca.crt \
9108 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009109 hs_timeout=250-10000 mtu=512" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009110 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009111 crt_file=data_files/server8_int-ca2.crt \
9112 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009113 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009114 hs_timeout=250-10000 mtu=512" \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009115 0 \
9116 -s "found fragmented DTLS handshake message" \
9117 -c "found fragmented DTLS handshake message" \
9118 -C "error"
9119
Andrzej Kurek77826052018-10-11 07:34:08 -04009120# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009121requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9122requires_config_enabled MBEDTLS_RSA_C
9123requires_config_enabled MBEDTLS_ECDSA_C
Gilles Peskinee7738c32021-07-13 20:34:55 +02009124requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek7311c782018-10-11 06:49:41 -04009125requires_config_enabled MBEDTLS_AES_C
9126requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009127client_needs_more_time 2
Yuto Takanoa49124e2021-07-08 15:56:33 +01009128requires_max_content_len 2048
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009129run_test "DTLS fragmenting: proxy MTU + 3d, nbio" \
9130 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
9131 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9132 crt_file=data_files/server7_int-ca.crt \
9133 key_file=data_files/server7.key \
9134 hs_timeout=250-10000 mtu=512 nbio=2" \
9135 "$P_CLI dtls=1 debug_level=2 \
9136 crt_file=data_files/server8_int-ca2.crt \
9137 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009138 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009139 hs_timeout=250-10000 mtu=512 nbio=2" \
9140 0 \
9141 -s "found fragmented DTLS handshake message" \
9142 -c "found fragmented DTLS handshake message" \
9143 -C "error"
9144
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009145# interop tests for DTLS fragmentating with reliable connection
9146#
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009147# here and below we just want to test that the we fragment in a way that
9148# pleases other implementations, so we don't need the peer to fragment
9149requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9150requires_config_enabled MBEDTLS_RSA_C
9151requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02009152requires_gnutls
Yuto Takanoa49124e2021-07-08 15:56:33 +01009153requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009154run_test "DTLS fragmenting: gnutls server, DTLS 1.2" \
9155 "$G_SRV -u" \
9156 "$P_CLI dtls=1 debug_level=2 \
9157 crt_file=data_files/server8_int-ca2.crt \
9158 key_file=data_files/server8.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009159 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009160 0 \
9161 -c "fragmenting handshake message" \
9162 -C "error"
9163
9164requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9165requires_config_enabled MBEDTLS_RSA_C
9166requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02009167requires_gnutls
Yuto Takano75ab9282021-07-26 08:27:47 +01009168requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009169run_test "DTLS fragmenting: gnutls server, DTLS 1.0" \
9170 "$G_SRV -u" \
9171 "$P_CLI dtls=1 debug_level=2 \
9172 crt_file=data_files/server8_int-ca2.crt \
9173 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009174 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009175 0 \
9176 -c "fragmenting handshake message" \
9177 -C "error"
9178
Hanno Beckerb9a00862018-08-28 10:20:22 +01009179# We use --insecure for the GnuTLS client because it expects
9180# the hostname / IP it connects to to be the name used in the
9181# certificate obtained from the server. Here, however, it
9182# connects to 127.0.0.1 while our test certificates use 'localhost'
9183# as the server name in the certificate. This will make the
Shaun Case0e7791f2021-12-20 21:14:10 -08009184# certificate validation fail, but passing --insecure makes
Hanno Beckerb9a00862018-08-28 10:20:22 +01009185# GnuTLS continue the connection nonetheless.
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009186requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9187requires_config_enabled MBEDTLS_RSA_C
9188requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02009189requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -04009190requires_not_i686
Yuto Takanoa49124e2021-07-08 15:56:33 +01009191requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009192run_test "DTLS fragmenting: gnutls client, DTLS 1.2" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009193 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009194 crt_file=data_files/server7_int-ca.crt \
9195 key_file=data_files/server7.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009196 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009197 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009198 0 \
9199 -s "fragmenting handshake message"
9200
Hanno Beckerb9a00862018-08-28 10:20:22 +01009201# See previous test for the reason to use --insecure
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009202requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9203requires_config_enabled MBEDTLS_RSA_C
9204requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02009205requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -04009206requires_not_i686
Yuto Takano75ab9282021-07-26 08:27:47 +01009207requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009208run_test "DTLS fragmenting: gnutls client, DTLS 1.0" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009209 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009210 crt_file=data_files/server7_int-ca.crt \
9211 key_file=data_files/server7.key \
9212 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009213 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009214 0 \
9215 -s "fragmenting handshake message"
9216
9217requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9218requires_config_enabled MBEDTLS_RSA_C
9219requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01009220requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009221run_test "DTLS fragmenting: openssl server, DTLS 1.2" \
9222 "$O_SRV -dtls1_2 -verify 10" \
9223 "$P_CLI dtls=1 debug_level=2 \
9224 crt_file=data_files/server8_int-ca2.crt \
9225 key_file=data_files/server8.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009226 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009227 0 \
9228 -c "fragmenting handshake message" \
9229 -C "error"
9230
9231requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9232requires_config_enabled MBEDTLS_RSA_C
9233requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takano75ab9282021-07-26 08:27:47 +01009234requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009235run_test "DTLS fragmenting: openssl server, DTLS 1.0" \
9236 "$O_SRV -dtls1 -verify 10" \
9237 "$P_CLI dtls=1 debug_level=2 \
9238 crt_file=data_files/server8_int-ca2.crt \
9239 key_file=data_files/server8.key \
9240 mtu=512 force_version=dtls1" \
9241 0 \
9242 -c "fragmenting handshake message" \
9243 -C "error"
9244
9245requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9246requires_config_enabled MBEDTLS_RSA_C
9247requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takanoa49124e2021-07-08 15:56:33 +01009248requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009249run_test "DTLS fragmenting: openssl client, DTLS 1.2" \
9250 "$P_SRV dtls=1 debug_level=2 \
9251 crt_file=data_files/server7_int-ca.crt \
9252 key_file=data_files/server7.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009253 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009254 "$O_CLI -dtls1_2" \
9255 0 \
9256 -s "fragmenting handshake message"
9257
9258requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9259requires_config_enabled MBEDTLS_RSA_C
9260requires_config_enabled MBEDTLS_ECDSA_C
Yuto Takano75ab9282021-07-26 08:27:47 +01009261requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02009262run_test "DTLS fragmenting: openssl client, DTLS 1.0" \
9263 "$P_SRV dtls=1 debug_level=2 \
9264 crt_file=data_files/server7_int-ca.crt \
9265 key_file=data_files/server7.key \
9266 mtu=512 force_version=dtls1" \
9267 "$O_CLI -dtls1" \
9268 0 \
9269 -s "fragmenting handshake message"
9270
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009271# interop tests for DTLS fragmentating with unreliable connection
9272#
9273# again we just want to test that the we fragment in a way that
9274# pleases other implementations, so we don't need the peer to fragment
9275requires_gnutls_next
9276requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9277requires_config_enabled MBEDTLS_RSA_C
9278requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009279client_needs_more_time 4
Yuto Takanoa49124e2021-07-08 15:56:33 +01009280requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009281run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.2" \
9282 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9283 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009284 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009285 crt_file=data_files/server8_int-ca2.crt \
9286 key_file=data_files/server8.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009287 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009288 0 \
9289 -c "fragmenting handshake message" \
9290 -C "error"
9291
9292requires_gnutls_next
9293requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9294requires_config_enabled MBEDTLS_RSA_C
9295requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009296client_needs_more_time 4
Yuto Takano75ab9282021-07-26 08:27:47 +01009297requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009298run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.0" \
9299 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9300 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009301 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009302 crt_file=data_files/server8_int-ca2.crt \
9303 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009304 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009305 0 \
9306 -c "fragmenting handshake message" \
9307 -C "error"
9308
k-stachowiak17a38d32019-02-18 15:29:56 +01009309requires_gnutls_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009310requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9311requires_config_enabled MBEDTLS_RSA_C
9312requires_config_enabled MBEDTLS_ECDSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009313client_needs_more_time 4
Yuto Takanoa49124e2021-07-08 15:56:33 +01009314requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009315run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.2" \
9316 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9317 "$P_SRV dtls=1 debug_level=2 \
9318 crt_file=data_files/server7_int-ca.crt \
9319 key_file=data_files/server7.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009320 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
k-stachowiak17a38d32019-02-18 15:29:56 +01009321 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009322 0 \
9323 -s "fragmenting handshake message"
9324
k-stachowiak17a38d32019-02-18 15:29:56 +01009325requires_gnutls_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009326requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9327requires_config_enabled MBEDTLS_RSA_C
9328requires_config_enabled MBEDTLS_ECDSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009329client_needs_more_time 4
Yuto Takano75ab9282021-07-26 08:27:47 +01009330requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009331run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.0" \
9332 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9333 "$P_SRV dtls=1 debug_level=2 \
9334 crt_file=data_files/server7_int-ca.crt \
9335 key_file=data_files/server7.key \
9336 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
k-stachowiak17a38d32019-02-18 15:29:56 +01009337 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009338 0 \
9339 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009340
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009341## Interop test with OpenSSL might trigger a bug in recent versions (including
9342## all versions installed on the CI machines), reported here:
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009343## Bug report: https://github.com/openssl/openssl/issues/6902
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009344## They should be re-enabled once a fixed version of OpenSSL is available
9345## (this should happen in some 1.1.1_ release according to the ticket).
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009346skip_next_test
9347requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9348requires_config_enabled MBEDTLS_RSA_C
9349requires_config_enabled MBEDTLS_ECDSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009350client_needs_more_time 4
Yuto Takanoa49124e2021-07-08 15:56:33 +01009351requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009352run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.2" \
9353 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9354 "$O_SRV -dtls1_2 -verify 10" \
9355 "$P_CLI dtls=1 debug_level=2 \
9356 crt_file=data_files/server8_int-ca2.crt \
9357 key_file=data_files/server8.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009358 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01009359 0 \
9360 -c "fragmenting handshake message" \
9361 -C "error"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009362
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009363skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009364requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9365requires_config_enabled MBEDTLS_RSA_C
9366requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009367client_needs_more_time 4
Yuto Takano75ab9282021-07-26 08:27:47 +01009368requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009369run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.0" \
9370 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009371 "$O_SRV -dtls1 -verify 10" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009372 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009373 crt_file=data_files/server8_int-ca2.crt \
9374 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009375 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009376 0 \
9377 -c "fragmenting handshake message" \
9378 -C "error"
9379
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009380skip_next_test
9381requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9382requires_config_enabled MBEDTLS_RSA_C
9383requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009384client_needs_more_time 4
Yuto Takanoa49124e2021-07-08 15:56:33 +01009385requires_max_content_len 2048
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009386run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.2" \
9387 -p "$P_PXY drop=8 delay=8 duplicate=8" \
9388 "$P_SRV dtls=1 debug_level=2 \
9389 crt_file=data_files/server7_int-ca.crt \
9390 key_file=data_files/server7.key \
Xiaofei Baif40545d2021-12-02 08:43:35 +00009391 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009392 "$O_CLI -dtls1_2" \
9393 0 \
9394 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009395
9396# -nbio is added to prevent s_client from blocking in case of duplicated
9397# messages at the end of the handshake
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009398skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009399requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9400requires_config_enabled MBEDTLS_RSA_C
9401requires_config_enabled MBEDTLS_ECDSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009402client_needs_more_time 4
Yuto Takano75ab9282021-07-26 08:27:47 +01009403requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009404run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.0" \
9405 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009406 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009407 crt_file=data_files/server7_int-ca.crt \
9408 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009409 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02009410 "$O_CLI -nbio -dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02009411 0 \
9412 -s "fragmenting handshake message"
9413
Ron Eldorb4655392018-07-05 18:25:39 +03009414# Tests for DTLS-SRTP (RFC 5764)
9415requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9416run_test "DTLS-SRTP all profiles supported" \
9417 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9418 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9419 0 \
9420 -s "found use_srtp extension" \
9421 -s "found srtp profile" \
9422 -s "selected srtp profile" \
9423 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009424 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009425 -c "client hello, adding use_srtp extension" \
9426 -c "found use_srtp extension" \
9427 -c "found srtp profile" \
9428 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009429 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009430 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009431 -C "error"
9432
Johan Pascal9bc50b02020-09-24 12:01:13 +02009433
Ron Eldorb4655392018-07-05 18:25:39 +03009434requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9435run_test "DTLS-SRTP server supports all profiles. Client supports one profile." \
9436 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal43f94902020-09-22 12:25:52 +02009437 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=5 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +03009438 0 \
9439 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009440 -s "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
9441 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldorb4655392018-07-05 18:25:39 +03009442 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009443 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009444 -c "client hello, adding use_srtp extension" \
9445 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009446 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldorb4655392018-07-05 18:25:39 +03009447 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009448 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009449 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009450 -C "error"
9451
9452requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009453run_test "DTLS-SRTP server supports one profile. Client supports all profiles." \
Johan Pascal43f94902020-09-22 12:25:52 +02009454 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +03009455 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9456 0 \
9457 -s "found use_srtp extension" \
9458 -s "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009459 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009460 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009461 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009462 -c "client hello, adding use_srtp extension" \
9463 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009464 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009465 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009466 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009467 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009468 -C "error"
9469
9470requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9471run_test "DTLS-SRTP server and Client support only one matching profile." \
9472 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9473 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9474 0 \
9475 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009476 -s "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
9477 -s "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009478 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009479 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009480 -c "client hello, adding use_srtp extension" \
9481 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009482 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009483 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009484 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009485 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009486 -C "error"
9487
9488requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9489run_test "DTLS-SRTP server and Client support only one different profile." \
9490 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
Johan Pascal43f94902020-09-22 12:25:52 +02009491 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +03009492 0 \
9493 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009494 -s "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +03009495 -S "selected srtp profile" \
9496 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009497 -S "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009498 -c "client hello, adding use_srtp extension" \
9499 -C "found use_srtp extension" \
9500 -C "found srtp profile" \
9501 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009502 -C "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009503 -C "error"
9504
9505requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9506run_test "DTLS-SRTP server doesn't support use_srtp extension." \
9507 "$P_SRV dtls=1 debug_level=3" \
9508 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9509 0 \
9510 -s "found use_srtp extension" \
9511 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009512 -S "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009513 -c "client hello, adding use_srtp extension" \
9514 -C "found use_srtp extension" \
9515 -C "found srtp profile" \
9516 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009517 -C "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009518 -C "error"
9519
9520requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9521run_test "DTLS-SRTP all profiles supported. mki used" \
9522 "$P_SRV dtls=1 use_srtp=1 support_mki=1 debug_level=3" \
9523 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
9524 0 \
9525 -s "found use_srtp extension" \
9526 -s "found srtp profile" \
9527 -s "selected srtp profile" \
9528 -s "server hello, adding use_srtp extension" \
9529 -s "dumping 'using mki' (8 bytes)" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009530 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +03009531 -c "client hello, adding use_srtp extension" \
9532 -c "found use_srtp extension" \
9533 -c "found srtp profile" \
9534 -c "selected srtp profile" \
9535 -c "dumping 'sending mki' (8 bytes)" \
9536 -c "dumping 'received mki' (8 bytes)" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009537 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009538 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Johan Pascal20c7db32020-10-26 22:45:58 +01009539 -g "find_in_both '^ *DTLS-SRTP mki value: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009540 -C "error"
9541
9542requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9543run_test "DTLS-SRTP all profiles supported. server doesn't support mki." \
9544 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9545 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
9546 0 \
9547 -s "found use_srtp extension" \
9548 -s "found srtp profile" \
9549 -s "selected srtp profile" \
9550 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009551 -s "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +01009552 -s "DTLS-SRTP no mki value negotiated"\
Ron Eldorb4655392018-07-05 18:25:39 +03009553 -S "dumping 'using mki' (8 bytes)" \
9554 -c "client hello, adding use_srtp extension" \
9555 -c "found use_srtp extension" \
9556 -c "found srtp profile" \
9557 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009558 -c "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +01009559 -c "DTLS-SRTP no mki value negotiated"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009560 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +03009561 -c "dumping 'sending mki' (8 bytes)" \
9562 -C "dumping 'received mki' (8 bytes)" \
9563 -C "error"
9564
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009565requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9566run_test "DTLS-SRTP all profiles supported. openssl client." \
9567 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009568 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009569 0 \
9570 -s "found use_srtp extension" \
9571 -s "found srtp profile" \
9572 -s "selected srtp profile" \
9573 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009574 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009575 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009576 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_80"
9577
9578requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9579run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. openssl client." \
9580 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009581 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_32:SRTP_AES128_CM_SHA1_80 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009582 0 \
9583 -s "found use_srtp extension" \
9584 -s "found srtp profile" \
9585 -s "selected srtp profile" \
9586 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009587 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009588 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009589 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
9590
9591requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9592run_test "DTLS-SRTP server supports all profiles. Client supports one profile. openssl client." \
9593 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009594 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009595 0 \
9596 -s "found use_srtp extension" \
9597 -s "found srtp profile" \
9598 -s "selected srtp profile" \
9599 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009600 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009601 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009602 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
9603
9604requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9605run_test "DTLS-SRTP server supports one profile. Client supports all profiles. openssl client." \
9606 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009607 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009608 0 \
9609 -s "found use_srtp extension" \
9610 -s "found srtp profile" \
9611 -s "selected srtp profile" \
9612 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009613 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009614 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009615 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
9616
9617requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9618run_test "DTLS-SRTP server and Client support only one matching profile. openssl client." \
9619 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009620 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009621 0 \
9622 -s "found use_srtp extension" \
9623 -s "found srtp profile" \
9624 -s "selected srtp profile" \
9625 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009626 -s "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +02009627 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009628 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
9629
9630requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9631run_test "DTLS-SRTP server and Client support only one different profile. openssl client." \
9632 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009633 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009634 0 \
9635 -s "found use_srtp extension" \
9636 -s "found srtp profile" \
9637 -S "selected srtp profile" \
9638 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009639 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009640 -C "SRTP Extension negotiated, profile"
9641
9642requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9643run_test "DTLS-SRTP server doesn't support use_srtp extension. openssl client" \
9644 "$P_SRV dtls=1 debug_level=3" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009645 "$O_CLI -dtls1 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009646 0 \
9647 -s "found use_srtp extension" \
9648 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009649 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009650 -C "SRTP Extension negotiated, profile"
9651
9652requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9653run_test "DTLS-SRTP all profiles supported. openssl server" \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009654 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009655 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9656 0 \
9657 -c "client hello, adding use_srtp extension" \
9658 -c "found use_srtp extension" \
9659 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009660 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009661 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009662 -C "error"
9663
9664requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9665run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009666 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32:SRTP_AES128_CM_SHA1_80 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009667 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9668 0 \
9669 -c "client hello, adding use_srtp extension" \
9670 -c "found use_srtp extension" \
9671 -c "found srtp profile" \
9672 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009673 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009674 -C "error"
9675
9676requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9677run_test "DTLS-SRTP server supports all profiles. Client supports one profile. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009678 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009679 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9680 0 \
9681 -c "client hello, adding use_srtp extension" \
9682 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009683 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009684 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009685 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009686 -C "error"
9687
9688requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9689run_test "DTLS-SRTP server supports one profile. Client supports all profiles. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009690 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009691 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9692 0 \
9693 -c "client hello, adding use_srtp extension" \
9694 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009695 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009696 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009697 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009698 -C "error"
9699
9700requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9701run_test "DTLS-SRTP server and Client support only one matching profile. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009702 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009703 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9704 0 \
9705 -c "client hello, adding use_srtp extension" \
9706 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009707 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009708 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009709 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009710 -C "error"
9711
9712requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9713run_test "DTLS-SRTP server and Client support only one different profile. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009714 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Johan Pascal43f94902020-09-22 12:25:52 +02009715 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009716 0 \
9717 -c "client hello, adding use_srtp extension" \
9718 -C "found use_srtp extension" \
9719 -C "found srtp profile" \
9720 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009721 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009722 -C "error"
9723
9724requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9725run_test "DTLS-SRTP server doesn't support use_srtp extension. openssl server" \
9726 "$O_SRV -dtls1" \
9727 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9728 0 \
9729 -c "client hello, adding use_srtp extension" \
9730 -C "found use_srtp extension" \
9731 -C "found srtp profile" \
9732 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009733 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009734 -C "error"
9735
9736requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
9737run_test "DTLS-SRTP all profiles supported. server doesn't support mki. openssl server." \
Johan Pascal39cfd3b2020-09-23 18:49:13 +02009738 "$O_SRV -dtls1 -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009739 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
9740 0 \
9741 -c "client hello, adding use_srtp extension" \
9742 -c "found use_srtp extension" \
9743 -c "found srtp profile" \
9744 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009745 -c "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +01009746 -c "DTLS-SRTP no mki value negotiated"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009747 -c "dumping 'sending mki' (8 bytes)" \
9748 -C "dumping 'received mki' (8 bytes)" \
9749 -C "error"
9750
9751requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009752requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009753run_test "DTLS-SRTP all profiles supported. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009754 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9755 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009756 0 \
9757 -s "found use_srtp extension" \
9758 -s "found srtp profile" \
9759 -s "selected srtp profile" \
9760 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009761 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009762 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_80"
9763
9764requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009765requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009766run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009767 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9768 "$G_CLI -u --srtp-profiles=SRTP_NULL_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009769 0 \
9770 -s "found use_srtp extension" \
9771 -s "found srtp profile" \
9772 -s "selected srtp profile" \
9773 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009774 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009775 -c "SRTP profile: SRTP_NULL_HMAC_SHA1_80"
9776
9777requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009778requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009779run_test "DTLS-SRTP server supports all profiles. Client supports one profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009780 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
9781 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009782 0 \
9783 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009784 -s "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
9785 -s "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009786 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009787 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009788 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_32"
9789
9790requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009791requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009792run_test "DTLS-SRTP server supports one profile. Client supports all profiles. gnutls client." \
Johan Pascal43f94902020-09-22 12:25:52 +02009793 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor5d991c92019-01-15 18:54:03 +02009794 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009795 0 \
9796 -s "found use_srtp extension" \
9797 -s "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009798 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009799 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009800 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009801 -c "SRTP profile: SRTP_NULL_SHA1_32"
9802
9803requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009804requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009805run_test "DTLS-SRTP server and Client support only one matching profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009806 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9807 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009808 0 \
9809 -s "found use_srtp extension" \
9810 -s "found srtp profile" \
9811 -s "selected srtp profile" \
9812 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009813 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009814 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_32"
9815
9816requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009817requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009818run_test "DTLS-SRTP server and Client support only one different profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +02009819 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=1 debug_level=3" \
9820 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009821 0 \
9822 -s "found use_srtp extension" \
9823 -s "found srtp profile" \
9824 -S "selected srtp profile" \
9825 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009826 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009827 -C "SRTP profile:"
9828
9829requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009830requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009831run_test "DTLS-SRTP server doesn't support use_srtp extension. gnutls client" \
Ron Eldor5d991c92019-01-15 18:54:03 +02009832 "$P_SRV dtls=1 debug_level=3" \
9833 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009834 0 \
9835 -s "found use_srtp extension" \
9836 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009837 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009838 -C "SRTP profile:"
9839
9840requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009841requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009842run_test "DTLS-SRTP all profiles supported. gnutls server" \
9843 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
9844 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9845 0 \
9846 -c "client hello, adding use_srtp extension" \
9847 -c "found use_srtp extension" \
9848 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009849 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009850 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009851 -C "error"
9852
9853requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009854requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009855run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. gnutls server." \
9856 "$G_SRV -u --srtp-profiles=SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
9857 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9858 0 \
9859 -c "client hello, adding use_srtp extension" \
9860 -c "found use_srtp extension" \
9861 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +02009862 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009863 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009864 -C "error"
9865
9866requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009867requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009868run_test "DTLS-SRTP server supports all profiles. Client supports one profile. gnutls server." \
9869 "$G_SRV -u --srtp-profiles=SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
9870 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9871 0 \
9872 -c "client hello, adding use_srtp extension" \
9873 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009874 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009875 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009876 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009877 -C "error"
9878
9879requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009880requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009881run_test "DTLS-SRTP server supports one profile. Client supports all profiles. gnutls server." \
9882 "$G_SRV -u --srtp-profiles=SRTP_NULL_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009883 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009884 0 \
9885 -c "client hello, adding use_srtp extension" \
9886 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009887 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009888 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009889 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009890 -C "error"
9891
9892requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009893requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009894run_test "DTLS-SRTP server and Client support only one matching profile. gnutls server." \
9895 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32" \
9896 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
9897 0 \
9898 -c "client hello, adding use_srtp extension" \
9899 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +02009900 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009901 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009902 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009903 -C "error"
9904
9905requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009906requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009907run_test "DTLS-SRTP server and Client support only one different profile. gnutls server." \
9908 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32" \
Johan Pascal43f94902020-09-22 12:25:52 +02009909 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009910 0 \
9911 -c "client hello, adding use_srtp extension" \
9912 -C "found use_srtp extension" \
9913 -C "found srtp profile" \
9914 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009915 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009916 -C "error"
9917
9918requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009919requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009920run_test "DTLS-SRTP server doesn't support use_srtp extension. gnutls server" \
9921 "$G_SRV -u" \
9922 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
9923 0 \
9924 -c "client hello, adding use_srtp extension" \
9925 -C "found use_srtp extension" \
9926 -C "found srtp profile" \
9927 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009928 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009929 -C "error"
9930
9931requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +02009932requires_gnutls
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009933run_test "DTLS-SRTP all profiles supported. mki used. gnutls server." \
9934 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
9935 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
9936 0 \
9937 -c "client hello, adding use_srtp extension" \
9938 -c "found use_srtp extension" \
9939 -c "found srtp profile" \
9940 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +02009941 -c "DTLS-SRTP key material is"\
Johan Pascal20c7db32020-10-26 22:45:58 +01009942 -c "DTLS-SRTP mki value:"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +03009943 -c "dumping 'sending mki' (8 bytes)" \
9944 -c "dumping 'received mki' (8 bytes)" \
9945 -C "error"
9946
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02009947# Tests for specific things with "unreliable" UDP connection
9948
9949not_with_valgrind # spurious resend due to timeout
9950run_test "DTLS proxy: reference" \
9951 -p "$P_PXY" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +02009952 "$P_SRV dtls=1 debug_level=2 hs_timeout=10000-20000" \
9953 "$P_CLI dtls=1 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02009954 0 \
9955 -C "replayed record" \
9956 -S "replayed record" \
Hanno Beckerb2a86c32019-07-19 15:43:09 +01009957 -C "Buffer record from epoch" \
9958 -S "Buffer record from epoch" \
9959 -C "ssl_buffer_message" \
9960 -S "ssl_buffer_message" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02009961 -C "discarding invalid record" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02009962 -S "discarding invalid record" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02009963 -S "resend" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02009964 -s "Extra-header:" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02009965 -c "HTTP/1.0 200 OK"
9966
9967not_with_valgrind # spurious resend due to timeout
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02009968run_test "DTLS proxy: duplicate every packet" \
9969 -p "$P_PXY duplicate=1" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +02009970 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 hs_timeout=10000-20000" \
9971 "$P_CLI dtls=1 dgram_packing=0 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02009972 0 \
9973 -c "replayed record" \
9974 -s "replayed record" \
9975 -c "record from another epoch" \
9976 -s "record from another epoch" \
9977 -S "resend" \
9978 -s "Extra-header:" \
9979 -c "HTTP/1.0 200 OK"
9980
9981run_test "DTLS proxy: duplicate every packet, server anti-replay off" \
9982 -p "$P_PXY duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009983 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 anti_replay=0" \
9984 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02009985 0 \
9986 -c "replayed record" \
9987 -S "replayed record" \
9988 -c "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02009989 -s "record from another epoch" \
9990 -c "resend" \
9991 -s "resend" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02009992 -s "Extra-header:" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02009993 -c "HTTP/1.0 200 OK"
9994
9995run_test "DTLS proxy: multiple records in same datagram" \
9996 -p "$P_PXY pack=50" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009997 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
9998 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02009999 0 \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010000 -c "next record in same datagram" \
10001 -s "next record in same datagram"
10002
10003run_test "DTLS proxy: multiple records in same datagram, duplicate every packet" \
10004 -p "$P_PXY pack=50 duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010005 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
10006 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010007 0 \
10008 -c "next record in same datagram" \
10009 -s "next record in same datagram"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010010
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010011run_test "DTLS proxy: inject invalid AD record, default badmac_limit" \
10012 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010013 "$P_SRV dtls=1 dgram_packing=0 debug_level=1" \
10014 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020010015 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010016 -c "discarding invalid record (mac)" \
10017 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010018 -s "Extra-header:" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010019 -c "HTTP/1.0 200 OK" \
10020 -S "too many records with bad MAC" \
10021 -S "Verification of the message MAC failed"
10022
10023run_test "DTLS proxy: inject invalid AD record, badmac_limit 1" \
10024 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010025 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=1" \
10026 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010027 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010028 -C "discarding invalid record (mac)" \
10029 -S "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010030 -S "Extra-header:" \
10031 -C "HTTP/1.0 200 OK" \
10032 -s "too many records with bad MAC" \
10033 -s "Verification of the message MAC failed"
10034
10035run_test "DTLS proxy: inject invalid AD record, badmac_limit 2" \
10036 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010037 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2" \
10038 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010039 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010040 -c "discarding invalid record (mac)" \
10041 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010042 -s "Extra-header:" \
10043 -c "HTTP/1.0 200 OK" \
10044 -S "too many records with bad MAC" \
10045 -S "Verification of the message MAC failed"
10046
10047run_test "DTLS proxy: inject invalid AD record, badmac_limit 2, exchanges 2"\
10048 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010049 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2 exchanges=2" \
10050 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100 exchanges=2" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010051 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010052 -c "discarding invalid record (mac)" \
10053 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010054 -s "Extra-header:" \
10055 -c "HTTP/1.0 200 OK" \
10056 -s "too many records with bad MAC" \
10057 -s "Verification of the message MAC failed"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010058
10059run_test "DTLS proxy: delay ChangeCipherSpec" \
10060 -p "$P_PXY delay_ccs=1" \
Hanno Beckerc4305232018-08-14 13:41:21 +010010061 "$P_SRV dtls=1 debug_level=1 dgram_packing=0" \
10062 "$P_CLI dtls=1 debug_level=1 dgram_packing=0" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010063 0 \
10064 -c "record from another epoch" \
10065 -s "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010066 -s "Extra-header:" \
10067 -c "HTTP/1.0 200 OK"
10068
Hanno Beckeraa5d0c42018-08-16 13:15:19 +010010069# Tests for reordering support with DTLS
10070
Gilles Peskine22cc6492022-03-14 18:21:24 +010010071requires_certificate_authentication
Hanno Becker56cdfd12018-08-17 13:42:15 +010010072run_test "DTLS reordering: Buffer out-of-order handshake message on client" \
10073 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010074 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10075 hs_timeout=2500-60000" \
10076 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10077 hs_timeout=2500-60000" \
Hanno Beckere3842212018-08-16 15:28:59 +010010078 0 \
10079 -c "Buffering HS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010080 -c "Next handshake message has been buffered - load"\
10081 -S "Buffering HS message" \
10082 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010083 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010084 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010085 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010086 -S "Remember CCS message"
Hanno Beckere3842212018-08-16 15:28:59 +010010087
Gilles Peskine22cc6492022-03-14 18:21:24 +010010088requires_certificate_authentication
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010089run_test "DTLS reordering: Buffer out-of-order handshake message fragment on client" \
10090 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010091 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10092 hs_timeout=2500-60000" \
10093 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10094 hs_timeout=2500-60000" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010095 0 \
10096 -c "Buffering HS message" \
10097 -c "found fragmented DTLS handshake message"\
10098 -c "Next handshake message 1 not or only partially bufffered" \
10099 -c "Next handshake message has been buffered - load"\
10100 -S "Buffering HS message" \
10101 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010102 -C "Injecting buffered CCS message" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010103 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010104 -S "Injecting buffered CCS message" \
Hanno Beckeraa5d0c42018-08-16 13:15:19 +010010105 -S "Remember CCS message"
10106
Hanno Beckera1adcca2018-08-24 14:41:07 +010010107# The client buffers the ServerKeyExchange before receiving the fragmented
10108# Certificate message; at the time of writing, together these are aroudn 1200b
10109# in size, so that the bound below ensures that the certificate can be reassembled
10110# while keeping the ServerKeyExchange.
Gilles Peskine22cc6492022-03-14 18:21:24 +010010111requires_certificate_authentication
Hanno Beckera1adcca2018-08-24 14:41:07 +010010112requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1300
10113run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next" \
Hanno Beckere3567052018-08-21 16:50:43 +010010114 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010115 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10116 hs_timeout=2500-60000" \
10117 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10118 hs_timeout=2500-60000" \
Hanno Beckere3567052018-08-21 16:50:43 +010010119 0 \
10120 -c "Buffering HS message" \
10121 -c "Next handshake message has been buffered - load"\
Hanno Beckera1adcca2018-08-24 14:41:07 +010010122 -C "attempt to make space by freeing buffered messages" \
10123 -S "Buffering HS message" \
10124 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010125 -C "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010126 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010127 -S "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010128 -S "Remember CCS message"
10129
10130# The size constraints ensure that the delayed certificate message can't
10131# be reassembled while keeping the ServerKeyExchange message, but it can
10132# when dropping it first.
Gilles Peskine22cc6492022-03-14 18:21:24 +010010133requires_certificate_authentication
Hanno Beckera1adcca2018-08-24 14:41:07 +010010134requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 900
10135requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1299
10136run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg" \
10137 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010138 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10139 hs_timeout=2500-60000" \
10140 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10141 hs_timeout=2500-60000" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010142 0 \
10143 -c "Buffering HS message" \
10144 -c "attempt to make space by freeing buffered future messages" \
10145 -c "Enough space available after freeing buffered HS messages" \
Hanno Beckere3567052018-08-21 16:50:43 +010010146 -S "Buffering HS message" \
10147 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010148 -C "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +010010149 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010150 -S "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +010010151 -S "Remember CCS message"
10152
Gilles Peskine22cc6492022-03-14 18:21:24 +010010153requires_certificate_authentication
Hanno Becker56cdfd12018-08-17 13:42:15 +010010154run_test "DTLS reordering: Buffer out-of-order handshake message on server" \
10155 -p "$P_PXY delay_cli=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010156 "$P_SRV dgram_packing=0 auth_mode=required cookies=0 dtls=1 debug_level=2 \
10157 hs_timeout=2500-60000" \
10158 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10159 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010160 0 \
10161 -C "Buffering HS message" \
10162 -C "Next handshake message has been buffered - load"\
10163 -s "Buffering HS message" \
10164 -s "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010165 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010166 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010167 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010168 -S "Remember CCS message"
10169
Gilles Peskine22cc6492022-03-14 18:21:24 +010010170requires_certificate_authentication
Hanno Becker56cdfd12018-08-17 13:42:15 +010010171run_test "DTLS reordering: Buffer out-of-order CCS message on client"\
10172 -p "$P_PXY delay_srv=NewSessionTicket" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010173 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10174 hs_timeout=2500-60000" \
10175 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10176 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010177 0 \
10178 -C "Buffering HS message" \
10179 -C "Next handshake message has been buffered - load"\
10180 -S "Buffering HS message" \
10181 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010182 -c "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010183 -c "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010184 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010185 -S "Remember CCS message"
10186
Gilles Peskine22cc6492022-03-14 18:21:24 +010010187requires_certificate_authentication
Hanno Becker56cdfd12018-08-17 13:42:15 +010010188run_test "DTLS reordering: Buffer out-of-order CCS message on server"\
10189 -p "$P_PXY delay_cli=ClientKeyExchange" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010190 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10191 hs_timeout=2500-60000" \
10192 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10193 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010194 0 \
10195 -C "Buffering HS message" \
10196 -C "Next handshake message has been buffered - load"\
10197 -S "Buffering HS message" \
10198 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010199 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010200 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010201 -s "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010202 -s "Remember CCS message"
10203
Hanno Beckera1adcca2018-08-24 14:41:07 +010010204run_test "DTLS reordering: Buffer encrypted Finished message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010205 -p "$P_PXY delay_ccs=1" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010206 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10207 hs_timeout=2500-60000" \
10208 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10209 hs_timeout=2500-60000" \
Hanno Beckerb34149c2018-08-16 15:29:06 +010010210 0 \
10211 -s "Buffer record from epoch 1" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010212 -s "Found buffered record from current epoch - load" \
10213 -c "Buffer record from epoch 1" \
10214 -c "Found buffered record from current epoch - load"
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010215
Hanno Beckera1adcca2018-08-24 14:41:07 +010010216# In this test, both the fragmented NewSessionTicket and the ChangeCipherSpec
10217# from the server are delayed, so that the encrypted Finished message
10218# is received and buffered. When the fragmented NewSessionTicket comes
10219# in afterwards, the encrypted Finished message must be freed in order
10220# to make space for the NewSessionTicket to be reassembled.
10221# This works only in very particular circumstances:
10222# - MBEDTLS_SSL_DTLS_MAX_BUFFERING must be large enough to allow buffering
10223# of the NewSessionTicket, but small enough to also allow buffering of
10224# the encrypted Finished message.
10225# - The MTU setting on the server must be so small that the NewSessionTicket
10226# needs to be fragmented.
10227# - All messages sent by the server must be small enough to be either sent
10228# without fragmentation or be reassembled within the bounds of
10229# MBEDTLS_SSL_DTLS_MAX_BUFFERING. Achieve this by testing with a PSK-based
10230# handshake, omitting CRTs.
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +020010231requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 190
10232requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 230
Hanno Beckera1adcca2018-08-24 14:41:07 +010010233run_test "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket" \
10234 -p "$P_PXY delay_srv=NewSessionTicket delay_srv=NewSessionTicket delay_ccs=1" \
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +020010235 "$P_SRV mtu=140 response_size=90 dgram_packing=0 psk=abc123 psk_identity=foo cookies=0 dtls=1 debug_level=2" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010236 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 psk=abc123 psk_identity=foo" \
10237 0 \
10238 -s "Buffer record from epoch 1" \
10239 -s "Found buffered record from current epoch - load" \
10240 -c "Buffer record from epoch 1" \
10241 -C "Found buffered record from current epoch - load" \
10242 -c "Enough space available after freeing future epoch record"
10243
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +020010244# Tests for "randomly unreliable connection": try a variety of flows and peers
10245
10246client_needs_more_time 2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010247run_test "DTLS proxy: 3d (drop, delay, duplicate), \"short\" PSK handshake" \
10248 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010249 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010250 psk=abc123" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010251 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010252 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10253 0 \
10254 -s "Extra-header:" \
10255 -c "HTTP/1.0 200 OK"
10256
Janos Follath74537a62016-09-02 13:45:28 +010010257client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010258run_test "DTLS proxy: 3d, \"short\" RSA handshake" \
10259 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010260 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
10261 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010262 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
10263 0 \
10264 -s "Extra-header:" \
10265 -c "HTTP/1.0 200 OK"
10266
Janos Follath74537a62016-09-02 13:45:28 +010010267client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010268run_test "DTLS proxy: 3d, \"short\" (no ticket, no cli_auth) FS handshake" \
10269 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010270 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
10271 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010272 0 \
10273 -s "Extra-header:" \
10274 -c "HTTP/1.0 200 OK"
10275
Janos Follath74537a62016-09-02 13:45:28 +010010276client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010277run_test "DTLS proxy: 3d, FS, client auth" \
10278 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010279 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=required" \
10280 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010281 0 \
10282 -s "Extra-header:" \
10283 -c "HTTP/1.0 200 OK"
10284
Janos Follath74537a62016-09-02 13:45:28 +010010285client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010286run_test "DTLS proxy: 3d, FS, ticket" \
10287 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010288 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=none" \
10289 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010290 0 \
10291 -s "Extra-header:" \
10292 -c "HTTP/1.0 200 OK"
10293
Janos Follath74537a62016-09-02 13:45:28 +010010294client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020010295run_test "DTLS proxy: 3d, max handshake (FS, ticket + client auth)" \
10296 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010297 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=required" \
10298 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010299 0 \
10300 -s "Extra-header:" \
10301 -c "HTTP/1.0 200 OK"
10302
Janos Follath74537a62016-09-02 13:45:28 +010010303client_needs_more_time 2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010304run_test "DTLS proxy: 3d, max handshake, nbio" \
10305 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010306 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010307 auth_mode=required" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010308 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010309 0 \
10310 -s "Extra-header:" \
10311 -c "HTTP/1.0 200 OK"
10312
Janos Follath74537a62016-09-02 13:45:28 +010010313client_needs_more_time 4
Gilles Peskine111fde42022-02-25 19:51:52 +010010314requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020010315run_test "DTLS proxy: 3d, min handshake, resumption" \
10316 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010317 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020010318 psk=abc123 debug_level=3" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010319 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +010010320 debug_level=3 reconnect=1 skip_close_notify=1 read_timeout=1000 max_resend=10 \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020010321 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10322 0 \
10323 -s "a session has been resumed" \
10324 -c "a session has been resumed" \
10325 -s "Extra-header:" \
10326 -c "HTTP/1.0 200 OK"
10327
Janos Follath74537a62016-09-02 13:45:28 +010010328client_needs_more_time 4
Gilles Peskine111fde42022-02-25 19:51:52 +010010329requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020010330run_test "DTLS proxy: 3d, min handshake, resumption, nbio" \
10331 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010332 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020010333 psk=abc123 debug_level=3 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010334 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +010010335 debug_level=3 reconnect=1 skip_close_notify=1 read_timeout=1000 max_resend=10 \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020010336 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 nbio=2" \
10337 0 \
10338 -s "a session has been resumed" \
10339 -c "a session has been resumed" \
10340 -s "Extra-header:" \
10341 -c "HTTP/1.0 200 OK"
10342
Janos Follath74537a62016-09-02 13:45:28 +010010343client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010010344requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010345run_test "DTLS proxy: 3d, min handshake, client-initiated renego" \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +020010346 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010347 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010348 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010349 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010350 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +020010351 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10352 0 \
10353 -c "=> renegotiate" \
10354 -s "=> renegotiate" \
10355 -s "Extra-header:" \
10356 -c "HTTP/1.0 200 OK"
10357
Janos Follath74537a62016-09-02 13:45:28 +010010358client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010010359requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010360run_test "DTLS proxy: 3d, min handshake, client-initiated renego, nbio" \
10361 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010362 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010363 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010364 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020010365 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010366 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10367 0 \
10368 -c "=> renegotiate" \
10369 -s "=> renegotiate" \
10370 -s "Extra-header:" \
10371 -c "HTTP/1.0 200 OK"
10372
Janos Follath74537a62016-09-02 13:45:28 +010010373client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010010374requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010375run_test "DTLS proxy: 3d, min handshake, server-initiated renego" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010376 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010377 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010378 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010379 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010380 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010381 renegotiation=1 exchanges=4 debug_level=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010382 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10383 0 \
10384 -c "=> renegotiate" \
10385 -s "=> renegotiate" \
10386 -s "Extra-header:" \
10387 -c "HTTP/1.0 200 OK"
10388
Janos Follath74537a62016-09-02 13:45:28 +010010389client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010010390requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010391run_test "DTLS proxy: 3d, min handshake, server-initiated renego, nbio" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010392 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010393 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010394 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010395 debug_level=2 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010396 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020010397 renegotiation=1 exchanges=4 debug_level=2 nbio=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020010398 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
10399 0 \
10400 -c "=> renegotiate" \
10401 -s "=> renegotiate" \
10402 -s "Extra-header:" \
10403 -c "HTTP/1.0 200 OK"
10404
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +020010405## Interop tests with OpenSSL might trigger a bug in recent versions (including
10406## all versions installed on the CI machines), reported here:
10407## Bug report: https://github.com/openssl/openssl/issues/6902
10408## They should be re-enabled once a fixed version of OpenSSL is available
10409## (this should happen in some 1.1.1_ release according to the ticket).
10410skip_next_test
Janos Follath74537a62016-09-02 13:45:28 +010010411client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010412not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010413run_test "DTLS proxy: 3d, openssl server" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020010414 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
10415 "$O_SRV -dtls1 -mtu 2048" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010416 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020010417 0 \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020010418 -c "HTTP/1.0 200 OK"
10419
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +020010420skip_next_test # see above
Janos Follath74537a62016-09-02 13:45:28 +010010421client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010422not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010423run_test "DTLS proxy: 3d, openssl server, fragmentation" \
10424 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
10425 "$O_SRV -dtls1 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010426 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010427 0 \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010428 -c "HTTP/1.0 200 OK"
10429
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +020010430skip_next_test # see above
Janos Follath74537a62016-09-02 13:45:28 +010010431client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010432not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010433run_test "DTLS proxy: 3d, openssl server, fragmentation, nbio" \
10434 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
10435 "$O_SRV -dtls1 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010436 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2 tickets=0" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010437 0 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010438 -c "HTTP/1.0 200 OK"
10439
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +000010440requires_gnutls
Janos Follath74537a62016-09-02 13:45:28 +010010441client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010442not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010443run_test "DTLS proxy: 3d, gnutls server" \
10444 -p "$P_PXY drop=5 delay=5 duplicate=5" \
10445 "$G_SRV -u --mtu 2048 -a" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010446 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010447 0 \
10448 -s "Extra-header:" \
10449 -c "Extra-header:"
10450
k-stachowiak17a38d32019-02-18 15:29:56 +010010451requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +010010452client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010453not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010454run_test "DTLS proxy: 3d, gnutls server, fragmentation" \
10455 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +010010456 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010457 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020010458 0 \
10459 -s "Extra-header:" \
10460 -c "Extra-header:"
10461
k-stachowiak17a38d32019-02-18 15:29:56 +010010462requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +010010463client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020010464not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010465run_test "DTLS proxy: 3d, gnutls server, fragmentation, nbio" \
10466 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +010010467 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010468 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020010469 0 \
10470 -s "Extra-header:" \
10471 -c "Extra-header:"
10472
Ron Eldorf75e2522019-05-14 20:38:49 +030010473requires_config_enabled MBEDTLS_SSL_EXPORT_KEYS
10474run_test "export keys functionality" \
10475 "$P_SRV eap_tls=1 debug_level=3" \
10476 "$P_CLI eap_tls=1 debug_level=3" \
10477 0 \
10478 -s "exported maclen is " \
10479 -s "exported keylen is " \
10480 -s "exported ivlen is " \
10481 -c "exported maclen is " \
10482 -c "exported keylen is " \
Ron Eldor65d8c262019-06-04 13:05:36 +030010483 -c "exported ivlen is " \
10484 -c "EAP-TLS key material is:"\
10485 -s "EAP-TLS key material is:"\
10486 -c "EAP-TLS IV is:" \
10487 -s "EAP-TLS IV is:"
Ron Eldorf75e2522019-05-14 20:38:49 +030010488
Piotr Nowicki0937ed22019-11-26 16:32:40 +010010489# Test heap memory usage after handshake
10490requires_config_enabled MBEDTLS_MEMORY_DEBUG
10491requires_config_enabled MBEDTLS_MEMORY_BUFFER_ALLOC_C
10492requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanoa49124e2021-07-08 15:56:33 +010010493requires_max_content_len 16384
Piotr Nowicki0937ed22019-11-26 16:32:40 +010010494run_tests_memory_after_hanshake
10495
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +010010496# Final report
10497
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010010498echo "------------------------------------------------------------------------"
10499
10500if [ $FAILS = 0 ]; then
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +010010501 printf "PASSED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010010502else
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +010010503 printf "FAILED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010010504fi
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +020010505PASSES=$(( $TESTS - $FAILS ))
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +020010506echo " ($PASSES / $TESTS tests ($SKIPS skipped))"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010010507
10508exit $FAILS