Blame - tests/opt-testcases/tls13-compat.sh - mirror/mbed-tls

blob: 6982c3cca5c1701007af0fc8112eb28764d5e9b7 [file] [log] [blame]

Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1	#!/bin/sh
				2
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3	# tls13-compat.sh
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	4	#
				5	# Copyright The Mbed TLS Contributors
				6	# SPDX-License-Identifier: Apache-2.0
				7	#
				8	# Licensed under the Apache License, Version 2.0 (the "License"); you may
				9	# not use this file except in compliance with the License.
				10	# You may obtain a copy of the License at
				11	#
				12	# http://www.apache.org/licenses/LICENSE-2.0
				13	#
				14	# Unless required by applicable law or agreed to in writing, software
				15	# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
				16	# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
				17	# See the License for the specific language governing permissions and
				18	# limitations under the License.
				19	#
				20	# Purpose
				21	#
				22	# List TLS1.3 compat test cases. They are generated by
				23	# `generate_tls13_compat_tests.py -a`.
				24	#
				25	# PLEASE DO NOT EDIT THIS FILE. IF NEEDED, PLEASE MODIFY `generate_tls13_compat_tests.py`
				26	# AND REGENERATE THIS FILE.
				27	#
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	28	requires_openssl_tls1_3
				29	requires_config_enabled MBEDTLS_DEBUG_C
				30	requires_config_enabled MBEDTLS_SSL_CLI_C
				31	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				32	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	33	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
				34	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	35	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				36	0 \
				37	-c "HTTP/1.0 200 ok" \
				38	-c "ECDH curve: secp256r1" \
				39	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				40	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				41	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	42
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	43	requires_gnutls_tls1_3
				44	requires_gnutls_next_no_ticket
				45	requires_gnutls_next_disable_tls13_compat
				46	requires_config_enabled MBEDTLS_DEBUG_C
				47	requires_config_enabled MBEDTLS_SSL_CLI_C
				48	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				49	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	50	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
				51	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	52	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				53	0 \
				54	-c "HTTP/1.0 200 OK" \
				55	-c "ECDH curve: secp256r1" \
				56	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				57	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				58	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	59
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	60	requires_openssl_tls1_3
				61	requires_config_enabled MBEDTLS_DEBUG_C
				62	requires_config_enabled MBEDTLS_SSL_CLI_C
				63	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				64	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	65	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
				66	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	67	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				68	0 \
				69	-c "HTTP/1.0 200 ok" \
				70	-c "ECDH curve: secp384r1" \
				71	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				72	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				73	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	74
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	75	requires_gnutls_tls1_3
				76	requires_gnutls_next_no_ticket
				77	requires_gnutls_next_disable_tls13_compat
				78	requires_config_enabled MBEDTLS_DEBUG_C
				79	requires_config_enabled MBEDTLS_SSL_CLI_C
				80	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				81	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	82	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
				83	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	84	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				85	0 \
				86	-c "HTTP/1.0 200 OK" \
				87	-c "ECDH curve: secp384r1" \
				88	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				89	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				90	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	91
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	92	requires_openssl_tls1_3
				93	requires_config_enabled MBEDTLS_DEBUG_C
				94	requires_config_enabled MBEDTLS_SSL_CLI_C
				95	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				96	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	97	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
				98	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	99	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				100	0 \
				101	-c "HTTP/1.0 200 ok" \
				102	-c "ECDH curve: secp521r1" \
				103	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				104	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				105	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	106
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	107	requires_gnutls_tls1_3
				108	requires_gnutls_next_no_ticket
				109	requires_gnutls_next_disable_tls13_compat
				110	requires_config_enabled MBEDTLS_DEBUG_C
				111	requires_config_enabled MBEDTLS_SSL_CLI_C
				112	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				113	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	114	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
				115	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	116	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				117	0 \
				118	-c "HTTP/1.0 200 OK" \
				119	-c "ECDH curve: secp521r1" \
				120	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				121	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				122	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	123
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	124	requires_openssl_tls1_3
				125	requires_config_enabled MBEDTLS_DEBUG_C
				126	requires_config_enabled MBEDTLS_SSL_CLI_C
				127	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				128	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	129	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
				130	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	131	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				132	0 \
				133	-c "HTTP/1.0 200 ok" \
				134	-c "ECDH curve: x25519" \
				135	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				136	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				137	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	138
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	139	requires_gnutls_tls1_3
				140	requires_gnutls_next_no_ticket
				141	requires_gnutls_next_disable_tls13_compat
				142	requires_config_enabled MBEDTLS_DEBUG_C
				143	requires_config_enabled MBEDTLS_SSL_CLI_C
				144	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				145	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	146	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
				147	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	148	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				149	0 \
				150	-c "HTTP/1.0 200 OK" \
				151	-c "ECDH curve: x25519" \
				152	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				153	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				154	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	155
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	156	requires_openssl_tls1_3
				157	requires_config_enabled MBEDTLS_DEBUG_C
				158	requires_config_enabled MBEDTLS_SSL_CLI_C
				159	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				160	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	161	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
				162	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	163	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				164	0 \
				165	-c "HTTP/1.0 200 ok" \
				166	-c "ECDH curve: x448" \
				167	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				168	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				169	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	170
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	171	requires_gnutls_tls1_3
				172	requires_gnutls_next_no_ticket
				173	requires_gnutls_next_disable_tls13_compat
				174	requires_config_enabled MBEDTLS_DEBUG_C
				175	requires_config_enabled MBEDTLS_SSL_CLI_C
				176	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				177	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	178	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
				179	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	180	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				181	0 \
				182	-c "HTTP/1.0 200 OK" \
				183	-c "ECDH curve: x448" \
				184	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				185	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				186	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	187
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	188	requires_openssl_tls1_3
				189	requires_config_enabled MBEDTLS_DEBUG_C
				190	requires_config_enabled MBEDTLS_SSL_CLI_C
				191	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				192	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	193	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
				194	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	195	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				196	0 \
				197	-c "HTTP/1.0 200 ok" \
				198	-c "ECDH curve: secp256r1" \
				199	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				200	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				201	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	202
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	203	requires_gnutls_tls1_3
				204	requires_gnutls_next_no_ticket
				205	requires_gnutls_next_disable_tls13_compat
				206	requires_config_enabled MBEDTLS_DEBUG_C
				207	requires_config_enabled MBEDTLS_SSL_CLI_C
				208	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				209	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	210	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
				211	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	212	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				213	0 \
				214	-c "HTTP/1.0 200 OK" \
				215	-c "ECDH curve: secp256r1" \
				216	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				217	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				218	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	219
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	220	requires_openssl_tls1_3
				221	requires_config_enabled MBEDTLS_DEBUG_C
				222	requires_config_enabled MBEDTLS_SSL_CLI_C
				223	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				224	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	225	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
				226	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	227	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				228	0 \
				229	-c "HTTP/1.0 200 ok" \
				230	-c "ECDH curve: secp384r1" \
				231	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				232	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				233	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	234
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	235	requires_gnutls_tls1_3
				236	requires_gnutls_next_no_ticket
				237	requires_gnutls_next_disable_tls13_compat
				238	requires_config_enabled MBEDTLS_DEBUG_C
				239	requires_config_enabled MBEDTLS_SSL_CLI_C
				240	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				241	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	242	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
				243	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	244	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				245	0 \
				246	-c "HTTP/1.0 200 OK" \
				247	-c "ECDH curve: secp384r1" \
				248	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				249	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				250	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	251
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	252	requires_openssl_tls1_3
				253	requires_config_enabled MBEDTLS_DEBUG_C
				254	requires_config_enabled MBEDTLS_SSL_CLI_C
				255	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				256	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	257	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
				258	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	259	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				260	0 \
				261	-c "HTTP/1.0 200 ok" \
				262	-c "ECDH curve: secp521r1" \
				263	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				264	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				265	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	266
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	267	requires_gnutls_tls1_3
				268	requires_gnutls_next_no_ticket
				269	requires_gnutls_next_disable_tls13_compat
				270	requires_config_enabled MBEDTLS_DEBUG_C
				271	requires_config_enabled MBEDTLS_SSL_CLI_C
				272	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				273	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	274	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
				275	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	276	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				277	0 \
				278	-c "HTTP/1.0 200 OK" \
				279	-c "ECDH curve: secp521r1" \
				280	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				281	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				282	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	283
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	284	requires_openssl_tls1_3
				285	requires_config_enabled MBEDTLS_DEBUG_C
				286	requires_config_enabled MBEDTLS_SSL_CLI_C
				287	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				288	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	289	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
				290	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	291	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				292	0 \
				293	-c "HTTP/1.0 200 ok" \
				294	-c "ECDH curve: x25519" \
				295	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				296	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				297	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	298
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	299	requires_gnutls_tls1_3
				300	requires_gnutls_next_no_ticket
				301	requires_gnutls_next_disable_tls13_compat
				302	requires_config_enabled MBEDTLS_DEBUG_C
				303	requires_config_enabled MBEDTLS_SSL_CLI_C
				304	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				305	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	306	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
				307	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	308	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				309	0 \
				310	-c "HTTP/1.0 200 OK" \
				311	-c "ECDH curve: x25519" \
				312	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				313	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				314	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	315
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	316	requires_openssl_tls1_3
				317	requires_config_enabled MBEDTLS_DEBUG_C
				318	requires_config_enabled MBEDTLS_SSL_CLI_C
				319	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				320	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	321	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
				322	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	323	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				324	0 \
				325	-c "HTTP/1.0 200 ok" \
				326	-c "ECDH curve: x448" \
				327	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				328	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				329	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	330
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	331	requires_gnutls_tls1_3
				332	requires_gnutls_next_no_ticket
				333	requires_gnutls_next_disable_tls13_compat
				334	requires_config_enabled MBEDTLS_DEBUG_C
				335	requires_config_enabled MBEDTLS_SSL_CLI_C
				336	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				337	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	338	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
				339	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	340	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				341	0 \
				342	-c "HTTP/1.0 200 OK" \
				343	-c "ECDH curve: x448" \
				344	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				345	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				346	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	347
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	348	requires_openssl_tls1_3
				349	requires_config_enabled MBEDTLS_DEBUG_C
				350	requires_config_enabled MBEDTLS_SSL_CLI_C
				351	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				352	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	353	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
				354	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	355	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				356	0 \
				357	-c "HTTP/1.0 200 ok" \
				358	-c "ECDH curve: secp256r1" \
				359	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				360	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				361	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	362
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	363	requires_gnutls_tls1_3
				364	requires_gnutls_next_no_ticket
				365	requires_gnutls_next_disable_tls13_compat
				366	requires_config_enabled MBEDTLS_DEBUG_C
				367	requires_config_enabled MBEDTLS_SSL_CLI_C
				368	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				369	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	370	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
				371	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	372	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				373	0 \
				374	-c "HTTP/1.0 200 OK" \
				375	-c "ECDH curve: secp256r1" \
				376	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				377	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				378	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	379
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	380	requires_openssl_tls1_3
				381	requires_config_enabled MBEDTLS_DEBUG_C
				382	requires_config_enabled MBEDTLS_SSL_CLI_C
				383	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				384	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	385	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
				386	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	387	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				388	0 \
				389	-c "HTTP/1.0 200 ok" \
				390	-c "ECDH curve: secp384r1" \
				391	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				392	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				393	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	394
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	395	requires_gnutls_tls1_3
				396	requires_gnutls_next_no_ticket
				397	requires_gnutls_next_disable_tls13_compat
				398	requires_config_enabled MBEDTLS_DEBUG_C
				399	requires_config_enabled MBEDTLS_SSL_CLI_C
				400	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				401	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	402	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
				403	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	404	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				405	0 \
				406	-c "HTTP/1.0 200 OK" \
				407	-c "ECDH curve: secp384r1" \
				408	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				409	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				410	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	411
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	412	requires_openssl_tls1_3
				413	requires_config_enabled MBEDTLS_DEBUG_C
				414	requires_config_enabled MBEDTLS_SSL_CLI_C
				415	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				416	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	417	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
				418	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	419	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				420	0 \
				421	-c "HTTP/1.0 200 ok" \
				422	-c "ECDH curve: secp521r1" \
				423	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				424	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				425	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	426
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	427	requires_gnutls_tls1_3
				428	requires_gnutls_next_no_ticket
				429	requires_gnutls_next_disable_tls13_compat
				430	requires_config_enabled MBEDTLS_DEBUG_C
				431	requires_config_enabled MBEDTLS_SSL_CLI_C
				432	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				433	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	434	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
				435	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	436	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				437	0 \
				438	-c "HTTP/1.0 200 OK" \
				439	-c "ECDH curve: secp521r1" \
				440	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				441	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				442	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	443
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	444	requires_openssl_tls1_3
				445	requires_config_enabled MBEDTLS_DEBUG_C
				446	requires_config_enabled MBEDTLS_SSL_CLI_C
				447	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				448	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	449	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
				450	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	451	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				452	0 \
				453	-c "HTTP/1.0 200 ok" \
				454	-c "ECDH curve: x25519" \
				455	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				456	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				457	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	458
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	459	requires_gnutls_tls1_3
				460	requires_gnutls_next_no_ticket
				461	requires_gnutls_next_disable_tls13_compat
				462	requires_config_enabled MBEDTLS_DEBUG_C
				463	requires_config_enabled MBEDTLS_SSL_CLI_C
				464	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				465	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	466	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
				467	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	468	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				469	0 \
				470	-c "HTTP/1.0 200 OK" \
				471	-c "ECDH curve: x25519" \
				472	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				473	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				474	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	475
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	476	requires_openssl_tls1_3
				477	requires_config_enabled MBEDTLS_DEBUG_C
				478	requires_config_enabled MBEDTLS_SSL_CLI_C
				479	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				480	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	481	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
				482	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	483	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				484	0 \
				485	-c "HTTP/1.0 200 ok" \
				486	-c "ECDH curve: x448" \
				487	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				488	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				489	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	490
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	491	requires_gnutls_tls1_3
				492	requires_gnutls_next_no_ticket
				493	requires_gnutls_next_disable_tls13_compat
				494	requires_config_enabled MBEDTLS_DEBUG_C
				495	requires_config_enabled MBEDTLS_SSL_CLI_C
				496	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				497	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	498	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
				499	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	500	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				501	0 \
				502	-c "HTTP/1.0 200 OK" \
				503	-c "ECDH curve: x448" \
				504	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				505	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				506	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	507
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	508	requires_openssl_tls1_3
				509	requires_config_enabled MBEDTLS_DEBUG_C
				510	requires_config_enabled MBEDTLS_SSL_CLI_C
				511	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				512	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				513	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	514	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	515	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				516	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				517	0 \
				518	-c "HTTP/1.0 200 ok" \
				519	-c "ECDH curve: secp256r1" \
				520	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				521	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				522	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	523
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	524	requires_gnutls_tls1_3
				525	requires_gnutls_next_no_ticket
				526	requires_gnutls_next_disable_tls13_compat
				527	requires_config_enabled MBEDTLS_DEBUG_C
				528	requires_config_enabled MBEDTLS_SSL_CLI_C
				529	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				530	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				531	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	532	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
				533	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP256R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	534	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				535	0 \
				536	-c "HTTP/1.0 200 OK" \
				537	-c "ECDH curve: secp256r1" \
				538	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				539	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				540	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	541
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	542	requires_openssl_tls1_3
				543	requires_config_enabled MBEDTLS_DEBUG_C
				544	requires_config_enabled MBEDTLS_SSL_CLI_C
				545	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				546	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				547	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	548	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	549	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				550	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				551	0 \
				552	-c "HTTP/1.0 200 ok" \
				553	-c "ECDH curve: secp384r1" \
				554	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				555	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				556	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	557
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	558	requires_gnutls_tls1_3
				559	requires_gnutls_next_no_ticket
				560	requires_gnutls_next_disable_tls13_compat
				561	requires_config_enabled MBEDTLS_DEBUG_C
				562	requires_config_enabled MBEDTLS_SSL_CLI_C
				563	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				564	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				565	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	566	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
				567	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP384R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	568	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				569	0 \
				570	-c "HTTP/1.0 200 OK" \
				571	-c "ECDH curve: secp384r1" \
				572	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				573	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				574	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	575
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	576	requires_openssl_tls1_3
				577	requires_config_enabled MBEDTLS_DEBUG_C
				578	requires_config_enabled MBEDTLS_SSL_CLI_C
				579	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				580	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				581	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	582	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	583	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				584	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				585	0 \
				586	-c "HTTP/1.0 200 ok" \
				587	-c "ECDH curve: secp521r1" \
				588	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				589	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				590	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	591
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	592	requires_gnutls_tls1_3
				593	requires_gnutls_next_no_ticket
				594	requires_gnutls_next_disable_tls13_compat
				595	requires_config_enabled MBEDTLS_DEBUG_C
				596	requires_config_enabled MBEDTLS_SSL_CLI_C
				597	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				598	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				599	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	600	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
				601	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-SECP521R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	602	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				603	0 \
				604	-c "HTTP/1.0 200 OK" \
				605	-c "ECDH curve: secp521r1" \
				606	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				607	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				608	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	609
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	610	requires_openssl_tls1_3
				611	requires_config_enabled MBEDTLS_DEBUG_C
				612	requires_config_enabled MBEDTLS_SSL_CLI_C
				613	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				614	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				615	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	616	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	617	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				618	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				619	0 \
				620	-c "HTTP/1.0 200 ok" \
				621	-c "ECDH curve: x25519" \
				622	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				623	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				624	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	625
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	626	requires_gnutls_tls1_3
				627	requires_gnutls_next_no_ticket
				628	requires_gnutls_next_disable_tls13_compat
				629	requires_config_enabled MBEDTLS_DEBUG_C
				630	requires_config_enabled MBEDTLS_SSL_CLI_C
				631	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				632	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				633	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	634	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
				635	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-X25519:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	636	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				637	0 \
				638	-c "HTTP/1.0 200 OK" \
				639	-c "ECDH curve: x25519" \
				640	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				641	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				642	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	643
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	644	requires_openssl_tls1_3
				645	requires_config_enabled MBEDTLS_DEBUG_C
				646	requires_config_enabled MBEDTLS_SSL_CLI_C
				647	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				648	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				649	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	650	run_test "TLS 1.3 m->O: TLS_AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	651	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				652	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				653	0 \
				654	-c "HTTP/1.0 200 ok" \
				655	-c "ECDH curve: x448" \
				656	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				657	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				658	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	659
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	660	requires_gnutls_tls1_3
				661	requires_gnutls_next_no_ticket
				662	requires_gnutls_next_disable_tls13_compat
				663	requires_config_enabled MBEDTLS_DEBUG_C
				664	requires_config_enabled MBEDTLS_SSL_CLI_C
				665	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				666	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				667	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	668	run_test "TLS 1.3 m->G: TLS_AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
				669	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-GCM:+GROUP-X448:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	670	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				671	0 \
				672	-c "HTTP/1.0 200 OK" \
				673	-c "ECDH curve: x448" \
				674	-c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
				675	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				676	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	677
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	678	requires_openssl_tls1_3
				679	requires_config_enabled MBEDTLS_DEBUG_C
				680	requires_config_enabled MBEDTLS_SSL_CLI_C
				681	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				682	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	683	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
				684	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	685	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				686	0 \
				687	-c "HTTP/1.0 200 ok" \
				688	-c "ECDH curve: secp256r1" \
				689	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				690	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				691	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	692
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	693	requires_gnutls_tls1_3
				694	requires_gnutls_next_no_ticket
				695	requires_gnutls_next_disable_tls13_compat
				696	requires_config_enabled MBEDTLS_DEBUG_C
				697	requires_config_enabled MBEDTLS_SSL_CLI_C
				698	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				699	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	700	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
				701	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP256R1:+SHA384:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	702	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				703	0 \
				704	-c "HTTP/1.0 200 OK" \
				705	-c "ECDH curve: secp256r1" \
				706	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				707	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				708	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	709
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	710	requires_openssl_tls1_3
				711	requires_config_enabled MBEDTLS_DEBUG_C
				712	requires_config_enabled MBEDTLS_SSL_CLI_C
				713	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				714	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	715	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
				716	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	717	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				718	0 \
				719	-c "HTTP/1.0 200 ok" \
				720	-c "ECDH curve: secp384r1" \
				721	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				722	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				723	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	724
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	725	requires_gnutls_tls1_3
				726	requires_gnutls_next_no_ticket
				727	requires_gnutls_next_disable_tls13_compat
				728	requires_config_enabled MBEDTLS_DEBUG_C
				729	requires_config_enabled MBEDTLS_SSL_CLI_C
				730	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				731	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	732	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
				733	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP384R1:+SHA384:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	734	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				735	0 \
				736	-c "HTTP/1.0 200 OK" \
				737	-c "ECDH curve: secp384r1" \
				738	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				739	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				740	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	741
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	742	requires_openssl_tls1_3
				743	requires_config_enabled MBEDTLS_DEBUG_C
				744	requires_config_enabled MBEDTLS_SSL_CLI_C
				745	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				746	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	747	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
				748	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	749	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				750	0 \
				751	-c "HTTP/1.0 200 ok" \
				752	-c "ECDH curve: secp521r1" \
				753	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				754	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				755	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	756
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	757	requires_gnutls_tls1_3
				758	requires_gnutls_next_no_ticket
				759	requires_gnutls_next_disable_tls13_compat
				760	requires_config_enabled MBEDTLS_DEBUG_C
				761	requires_config_enabled MBEDTLS_SSL_CLI_C
				762	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				763	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	764	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
				765	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP521R1:+SHA384:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	766	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				767	0 \
				768	-c "HTTP/1.0 200 OK" \
				769	-c "ECDH curve: secp521r1" \
				770	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				771	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				772	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	773
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	774	requires_openssl_tls1_3
				775	requires_config_enabled MBEDTLS_DEBUG_C
				776	requires_config_enabled MBEDTLS_SSL_CLI_C
				777	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				778	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	779	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
				780	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	781	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				782	0 \
				783	-c "HTTP/1.0 200 ok" \
				784	-c "ECDH curve: x25519" \
				785	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				786	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				787	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	788
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	789	requires_gnutls_tls1_3
				790	requires_gnutls_next_no_ticket
				791	requires_gnutls_next_disable_tls13_compat
				792	requires_config_enabled MBEDTLS_DEBUG_C
				793	requires_config_enabled MBEDTLS_SSL_CLI_C
				794	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				795	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	796	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
				797	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-X25519:+SHA384:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	798	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				799	0 \
				800	-c "HTTP/1.0 200 OK" \
				801	-c "ECDH curve: x25519" \
				802	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				803	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				804	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	805
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	806	requires_openssl_tls1_3
				807	requires_config_enabled MBEDTLS_DEBUG_C
				808	requires_config_enabled MBEDTLS_SSL_CLI_C
				809	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				810	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	811	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
				812	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	813	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				814	0 \
				815	-c "HTTP/1.0 200 ok" \
				816	-c "ECDH curve: x448" \
				817	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				818	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				819	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	820
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	821	requires_gnutls_tls1_3
				822	requires_gnutls_next_no_ticket
				823	requires_gnutls_next_disable_tls13_compat
				824	requires_config_enabled MBEDTLS_DEBUG_C
				825	requires_config_enabled MBEDTLS_SSL_CLI_C
				826	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				827	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	828	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
				829	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-X448:+SHA384:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	830	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				831	0 \
				832	-c "HTTP/1.0 200 OK" \
				833	-c "ECDH curve: x448" \
				834	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				835	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				836	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	837
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	838	requires_openssl_tls1_3
				839	requires_config_enabled MBEDTLS_DEBUG_C
				840	requires_config_enabled MBEDTLS_SSL_CLI_C
				841	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				842	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	843	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
				844	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	845	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				846	0 \
				847	-c "HTTP/1.0 200 ok" \
				848	-c "ECDH curve: secp256r1" \
				849	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				850	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				851	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	852
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	853	requires_gnutls_tls1_3
				854	requires_gnutls_next_no_ticket
				855	requires_gnutls_next_disable_tls13_compat
				856	requires_config_enabled MBEDTLS_DEBUG_C
				857	requires_config_enabled MBEDTLS_SSL_CLI_C
				858	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				859	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	860	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
				861	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP256R1:+SHA384:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	862	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				863	0 \
				864	-c "HTTP/1.0 200 OK" \
				865	-c "ECDH curve: secp256r1" \
				866	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				867	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				868	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	869
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	870	requires_openssl_tls1_3
				871	requires_config_enabled MBEDTLS_DEBUG_C
				872	requires_config_enabled MBEDTLS_SSL_CLI_C
				873	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				874	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	875	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
				876	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	877	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				878	0 \
				879	-c "HTTP/1.0 200 ok" \
				880	-c "ECDH curve: secp384r1" \
				881	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				882	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				883	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	884
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	885	requires_gnutls_tls1_3
				886	requires_gnutls_next_no_ticket
				887	requires_gnutls_next_disable_tls13_compat
				888	requires_config_enabled MBEDTLS_DEBUG_C
				889	requires_config_enabled MBEDTLS_SSL_CLI_C
				890	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				891	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	892	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
				893	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP384R1:+SHA384:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	894	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				895	0 \
				896	-c "HTTP/1.0 200 OK" \
				897	-c "ECDH curve: secp384r1" \
				898	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				899	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				900	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	901
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	902	requires_openssl_tls1_3
				903	requires_config_enabled MBEDTLS_DEBUG_C
				904	requires_config_enabled MBEDTLS_SSL_CLI_C
				905	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				906	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	907	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
				908	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	909	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				910	0 \
				911	-c "HTTP/1.0 200 ok" \
				912	-c "ECDH curve: secp521r1" \
				913	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				914	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				915	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	916
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	917	requires_gnutls_tls1_3
				918	requires_gnutls_next_no_ticket
				919	requires_gnutls_next_disable_tls13_compat
				920	requires_config_enabled MBEDTLS_DEBUG_C
				921	requires_config_enabled MBEDTLS_SSL_CLI_C
				922	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				923	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	924	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
				925	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP521R1:+SHA384:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	926	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				927	0 \
				928	-c "HTTP/1.0 200 OK" \
				929	-c "ECDH curve: secp521r1" \
				930	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				931	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				932	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	933
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	934	requires_openssl_tls1_3
				935	requires_config_enabled MBEDTLS_DEBUG_C
				936	requires_config_enabled MBEDTLS_SSL_CLI_C
				937	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				938	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	939	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
				940	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	941	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				942	0 \
				943	-c "HTTP/1.0 200 ok" \
				944	-c "ECDH curve: x25519" \
				945	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				946	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				947	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	948
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	949	requires_gnutls_tls1_3
				950	requires_gnutls_next_no_ticket
				951	requires_gnutls_next_disable_tls13_compat
				952	requires_config_enabled MBEDTLS_DEBUG_C
				953	requires_config_enabled MBEDTLS_SSL_CLI_C
				954	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				955	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	956	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
				957	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-X25519:+SHA384:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	958	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				959	0 \
				960	-c "HTTP/1.0 200 OK" \
				961	-c "ECDH curve: x25519" \
				962	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				963	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				964	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	965
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	966	requires_openssl_tls1_3
				967	requires_config_enabled MBEDTLS_DEBUG_C
				968	requires_config_enabled MBEDTLS_SSL_CLI_C
				969	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				970	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	971	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
				972	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	973	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				974	0 \
				975	-c "HTTP/1.0 200 ok" \
				976	-c "ECDH curve: x448" \
				977	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				978	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				979	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	980
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	981	requires_gnutls_tls1_3
				982	requires_gnutls_next_no_ticket
				983	requires_gnutls_next_disable_tls13_compat
				984	requires_config_enabled MBEDTLS_DEBUG_C
				985	requires_config_enabled MBEDTLS_SSL_CLI_C
				986	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				987	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	988	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
				989	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-X448:+SHA384:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	990	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				991	0 \
				992	-c "HTTP/1.0 200 OK" \
				993	-c "ECDH curve: x448" \
				994	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				995	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				996	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	997
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	998	requires_openssl_tls1_3
				999	requires_config_enabled MBEDTLS_DEBUG_C
				1000	requires_config_enabled MBEDTLS_SSL_CLI_C
				1001	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1002	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1003	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
				1004	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1005	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1006	0 \
				1007	-c "HTTP/1.0 200 ok" \
				1008	-c "ECDH curve: secp256r1" \
				1009	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1010	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1011	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1012
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1013	requires_gnutls_tls1_3
				1014	requires_gnutls_next_no_ticket
				1015	requires_gnutls_next_disable_tls13_compat
				1016	requires_config_enabled MBEDTLS_DEBUG_C
				1017	requires_config_enabled MBEDTLS_SSL_CLI_C
				1018	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1019	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1020	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
				1021	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP256R1:+SHA384:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1022	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1023	0 \
				1024	-c "HTTP/1.0 200 OK" \
				1025	-c "ECDH curve: secp256r1" \
				1026	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1027	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1028	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1029
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1030	requires_openssl_tls1_3
				1031	requires_config_enabled MBEDTLS_DEBUG_C
				1032	requires_config_enabled MBEDTLS_SSL_CLI_C
				1033	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1034	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1035	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
				1036	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1037	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1038	0 \
				1039	-c "HTTP/1.0 200 ok" \
				1040	-c "ECDH curve: secp384r1" \
				1041	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1042	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1043	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1044
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1045	requires_gnutls_tls1_3
				1046	requires_gnutls_next_no_ticket
				1047	requires_gnutls_next_disable_tls13_compat
				1048	requires_config_enabled MBEDTLS_DEBUG_C
				1049	requires_config_enabled MBEDTLS_SSL_CLI_C
				1050	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1051	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1052	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
				1053	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP384R1:+SHA384:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1054	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1055	0 \
				1056	-c "HTTP/1.0 200 OK" \
				1057	-c "ECDH curve: secp384r1" \
				1058	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1059	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1060	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1061
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1062	requires_openssl_tls1_3
				1063	requires_config_enabled MBEDTLS_DEBUG_C
				1064	requires_config_enabled MBEDTLS_SSL_CLI_C
				1065	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1066	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1067	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
				1068	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1069	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1070	0 \
				1071	-c "HTTP/1.0 200 ok" \
				1072	-c "ECDH curve: secp521r1" \
				1073	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1074	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1075	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1076
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1077	requires_gnutls_tls1_3
				1078	requires_gnutls_next_no_ticket
				1079	requires_gnutls_next_disable_tls13_compat
				1080	requires_config_enabled MBEDTLS_DEBUG_C
				1081	requires_config_enabled MBEDTLS_SSL_CLI_C
				1082	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1083	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1084	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
				1085	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP521R1:+SHA384:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1086	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1087	0 \
				1088	-c "HTTP/1.0 200 OK" \
				1089	-c "ECDH curve: secp521r1" \
				1090	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1091	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1092	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1093
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1094	requires_openssl_tls1_3
				1095	requires_config_enabled MBEDTLS_DEBUG_C
				1096	requires_config_enabled MBEDTLS_SSL_CLI_C
				1097	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1098	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1099	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
				1100	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1101	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1102	0 \
				1103	-c "HTTP/1.0 200 ok" \
				1104	-c "ECDH curve: x25519" \
				1105	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1106	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1107	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1108
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1109	requires_gnutls_tls1_3
				1110	requires_gnutls_next_no_ticket
				1111	requires_gnutls_next_disable_tls13_compat
				1112	requires_config_enabled MBEDTLS_DEBUG_C
				1113	requires_config_enabled MBEDTLS_SSL_CLI_C
				1114	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1115	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1116	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
				1117	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-X25519:+SHA384:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1118	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1119	0 \
				1120	-c "HTTP/1.0 200 OK" \
				1121	-c "ECDH curve: x25519" \
				1122	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1123	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1124	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1125
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1126	requires_openssl_tls1_3
				1127	requires_config_enabled MBEDTLS_DEBUG_C
				1128	requires_config_enabled MBEDTLS_SSL_CLI_C
				1129	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1130	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1131	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
				1132	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1133	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1134	0 \
				1135	-c "HTTP/1.0 200 ok" \
				1136	-c "ECDH curve: x448" \
				1137	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1138	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1139	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1140
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1141	requires_gnutls_tls1_3
				1142	requires_gnutls_next_no_ticket
				1143	requires_gnutls_next_disable_tls13_compat
				1144	requires_config_enabled MBEDTLS_DEBUG_C
				1145	requires_config_enabled MBEDTLS_SSL_CLI_C
				1146	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1147	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1148	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
				1149	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-X448:+SHA384:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1150	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1151	0 \
				1152	-c "HTTP/1.0 200 OK" \
				1153	-c "ECDH curve: x448" \
				1154	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1155	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1156	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1157
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1158	requires_openssl_tls1_3
				1159	requires_config_enabled MBEDTLS_DEBUG_C
				1160	requires_config_enabled MBEDTLS_SSL_CLI_C
				1161	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1162	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1163	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1164	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1165	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1166	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				1167	0 \
				1168	-c "HTTP/1.0 200 ok" \
				1169	-c "ECDH curve: secp256r1" \
				1170	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1171	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1172	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1173
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1174	requires_gnutls_tls1_3
				1175	requires_gnutls_next_no_ticket
				1176	requires_gnutls_next_disable_tls13_compat
				1177	requires_config_enabled MBEDTLS_DEBUG_C
				1178	requires_config_enabled MBEDTLS_SSL_CLI_C
				1179	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1180	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1181	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1182	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
				1183	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP256R1:+SHA384:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1184	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				1185	0 \
				1186	-c "HTTP/1.0 200 OK" \
				1187	-c "ECDH curve: secp256r1" \
				1188	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1189	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1190	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1191
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1192	requires_openssl_tls1_3
				1193	requires_config_enabled MBEDTLS_DEBUG_C
				1194	requires_config_enabled MBEDTLS_SSL_CLI_C
				1195	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1196	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1197	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1198	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1199	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1200	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				1201	0 \
				1202	-c "HTTP/1.0 200 ok" \
				1203	-c "ECDH curve: secp384r1" \
				1204	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1205	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1206	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1207
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1208	requires_gnutls_tls1_3
				1209	requires_gnutls_next_no_ticket
				1210	requires_gnutls_next_disable_tls13_compat
				1211	requires_config_enabled MBEDTLS_DEBUG_C
				1212	requires_config_enabled MBEDTLS_SSL_CLI_C
				1213	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1214	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1215	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1216	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
				1217	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP384R1:+SHA384:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1218	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				1219	0 \
				1220	-c "HTTP/1.0 200 OK" \
				1221	-c "ECDH curve: secp384r1" \
				1222	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1223	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1224	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1225
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1226	requires_openssl_tls1_3
				1227	requires_config_enabled MBEDTLS_DEBUG_C
				1228	requires_config_enabled MBEDTLS_SSL_CLI_C
				1229	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1230	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1231	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1232	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1233	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1234	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				1235	0 \
				1236	-c "HTTP/1.0 200 ok" \
				1237	-c "ECDH curve: secp521r1" \
				1238	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1239	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1240	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1241
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1242	requires_gnutls_tls1_3
				1243	requires_gnutls_next_no_ticket
				1244	requires_gnutls_next_disable_tls13_compat
				1245	requires_config_enabled MBEDTLS_DEBUG_C
				1246	requires_config_enabled MBEDTLS_SSL_CLI_C
				1247	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1248	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1249	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1250	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
				1251	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-SECP521R1:+SHA384:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1252	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				1253	0 \
				1254	-c "HTTP/1.0 200 OK" \
				1255	-c "ECDH curve: secp521r1" \
				1256	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1257	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1258	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1259
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1260	requires_openssl_tls1_3
				1261	requires_config_enabled MBEDTLS_DEBUG_C
				1262	requires_config_enabled MBEDTLS_SSL_CLI_C
				1263	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1264	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1265	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1266	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1267	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1268	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				1269	0 \
				1270	-c "HTTP/1.0 200 ok" \
				1271	-c "ECDH curve: x25519" \
				1272	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1273	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1274	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1275
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1276	requires_gnutls_tls1_3
				1277	requires_gnutls_next_no_ticket
				1278	requires_gnutls_next_disable_tls13_compat
				1279	requires_config_enabled MBEDTLS_DEBUG_C
				1280	requires_config_enabled MBEDTLS_SSL_CLI_C
				1281	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1282	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1283	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1284	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
				1285	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-X25519:+SHA384:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1286	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				1287	0 \
				1288	-c "HTTP/1.0 200 OK" \
				1289	-c "ECDH curve: x25519" \
				1290	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1291	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1292	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1293
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1294	requires_openssl_tls1_3
				1295	requires_config_enabled MBEDTLS_DEBUG_C
				1296	requires_config_enabled MBEDTLS_SSL_CLI_C
				1297	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1298	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1299	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1300	run_test "TLS 1.3 m->O: TLS_AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1301	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1302	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				1303	0 \
				1304	-c "HTTP/1.0 200 ok" \
				1305	-c "ECDH curve: x448" \
				1306	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1307	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1308	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1309
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1310	requires_gnutls_tls1_3
				1311	requires_gnutls_next_no_ticket
				1312	requires_gnutls_next_disable_tls13_compat
				1313	requires_config_enabled MBEDTLS_DEBUG_C
				1314	requires_config_enabled MBEDTLS_SSL_CLI_C
				1315	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1316	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1317	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1318	run_test "TLS 1.3 m->G: TLS_AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
				1319	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-256-GCM:+GROUP-X448:+SHA384:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1320	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				1321	0 \
				1322	-c "HTTP/1.0 200 OK" \
				1323	-c "ECDH curve: x448" \
				1324	-c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
				1325	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1326	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1327
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1328	requires_openssl_tls1_3
				1329	requires_config_enabled MBEDTLS_DEBUG_C
				1330	requires_config_enabled MBEDTLS_SSL_CLI_C
				1331	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1332	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1333	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
				1334	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1335	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1336	0 \
				1337	-c "HTTP/1.0 200 ok" \
				1338	-c "ECDH curve: secp256r1" \
				1339	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1340	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1341	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1342
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1343	requires_gnutls_tls1_3
				1344	requires_gnutls_next_no_ticket
				1345	requires_gnutls_next_disable_tls13_compat
				1346	requires_config_enabled MBEDTLS_DEBUG_C
				1347	requires_config_enabled MBEDTLS_SSL_CLI_C
				1348	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1349	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1350	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
				1351	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1352	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1353	0 \
				1354	-c "HTTP/1.0 200 OK" \
				1355	-c "ECDH curve: secp256r1" \
				1356	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1357	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1358	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1359
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1360	requires_openssl_tls1_3
				1361	requires_config_enabled MBEDTLS_DEBUG_C
				1362	requires_config_enabled MBEDTLS_SSL_CLI_C
				1363	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1364	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1365	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
				1366	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1367	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1368	0 \
				1369	-c "HTTP/1.0 200 ok" \
				1370	-c "ECDH curve: secp384r1" \
				1371	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1372	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1373	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1374
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1375	requires_gnutls_tls1_3
				1376	requires_gnutls_next_no_ticket
				1377	requires_gnutls_next_disable_tls13_compat
				1378	requires_config_enabled MBEDTLS_DEBUG_C
				1379	requires_config_enabled MBEDTLS_SSL_CLI_C
				1380	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1381	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1382	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
				1383	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1384	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1385	0 \
				1386	-c "HTTP/1.0 200 OK" \
				1387	-c "ECDH curve: secp384r1" \
				1388	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1389	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1390	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1391
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1392	requires_openssl_tls1_3
				1393	requires_config_enabled MBEDTLS_DEBUG_C
				1394	requires_config_enabled MBEDTLS_SSL_CLI_C
				1395	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1396	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1397	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
				1398	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1399	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1400	0 \
				1401	-c "HTTP/1.0 200 ok" \
				1402	-c "ECDH curve: secp521r1" \
				1403	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1404	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1405	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1406
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1407	requires_gnutls_tls1_3
				1408	requires_gnutls_next_no_ticket
				1409	requires_gnutls_next_disable_tls13_compat
				1410	requires_config_enabled MBEDTLS_DEBUG_C
				1411	requires_config_enabled MBEDTLS_SSL_CLI_C
				1412	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1413	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1414	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
				1415	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1416	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1417	0 \
				1418	-c "HTTP/1.0 200 OK" \
				1419	-c "ECDH curve: secp521r1" \
				1420	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1421	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1422	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1423
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1424	requires_openssl_tls1_3
				1425	requires_config_enabled MBEDTLS_DEBUG_C
				1426	requires_config_enabled MBEDTLS_SSL_CLI_C
				1427	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1428	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1429	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
				1430	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1431	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1432	0 \
				1433	-c "HTTP/1.0 200 ok" \
				1434	-c "ECDH curve: x25519" \
				1435	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1436	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1437	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1438
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1439	requires_gnutls_tls1_3
				1440	requires_gnutls_next_no_ticket
				1441	requires_gnutls_next_disable_tls13_compat
				1442	requires_config_enabled MBEDTLS_DEBUG_C
				1443	requires_config_enabled MBEDTLS_SSL_CLI_C
				1444	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1445	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1446	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
				1447	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1448	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1449	0 \
				1450	-c "HTTP/1.0 200 OK" \
				1451	-c "ECDH curve: x25519" \
				1452	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1453	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1454	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1455
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1456	requires_openssl_tls1_3
				1457	requires_config_enabled MBEDTLS_DEBUG_C
				1458	requires_config_enabled MBEDTLS_SSL_CLI_C
				1459	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1460	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1461	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
				1462	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1463	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1464	0 \
				1465	-c "HTTP/1.0 200 ok" \
				1466	-c "ECDH curve: x448" \
				1467	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1468	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1469	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1470
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1471	requires_gnutls_tls1_3
				1472	requires_gnutls_next_no_ticket
				1473	requires_gnutls_next_disable_tls13_compat
				1474	requires_config_enabled MBEDTLS_DEBUG_C
				1475	requires_config_enabled MBEDTLS_SSL_CLI_C
				1476	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1477	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1478	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
				1479	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1480	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1481	0 \
				1482	-c "HTTP/1.0 200 OK" \
				1483	-c "ECDH curve: x448" \
				1484	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1485	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1486	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1487
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1488	requires_openssl_tls1_3
				1489	requires_config_enabled MBEDTLS_DEBUG_C
				1490	requires_config_enabled MBEDTLS_SSL_CLI_C
				1491	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1492	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1493	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
				1494	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1495	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1496	0 \
				1497	-c "HTTP/1.0 200 ok" \
				1498	-c "ECDH curve: secp256r1" \
				1499	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1500	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1501	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1502
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1503	requires_gnutls_tls1_3
				1504	requires_gnutls_next_no_ticket
				1505	requires_gnutls_next_disable_tls13_compat
				1506	requires_config_enabled MBEDTLS_DEBUG_C
				1507	requires_config_enabled MBEDTLS_SSL_CLI_C
				1508	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1509	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1510	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
				1511	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1512	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1513	0 \
				1514	-c "HTTP/1.0 200 OK" \
				1515	-c "ECDH curve: secp256r1" \
				1516	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1517	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1518	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1519
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1520	requires_openssl_tls1_3
				1521	requires_config_enabled MBEDTLS_DEBUG_C
				1522	requires_config_enabled MBEDTLS_SSL_CLI_C
				1523	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1524	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1525	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
				1526	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1527	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1528	0 \
				1529	-c "HTTP/1.0 200 ok" \
				1530	-c "ECDH curve: secp384r1" \
				1531	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1532	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1533	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1534
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1535	requires_gnutls_tls1_3
				1536	requires_gnutls_next_no_ticket
				1537	requires_gnutls_next_disable_tls13_compat
				1538	requires_config_enabled MBEDTLS_DEBUG_C
				1539	requires_config_enabled MBEDTLS_SSL_CLI_C
				1540	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1541	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1542	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
				1543	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1544	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1545	0 \
				1546	-c "HTTP/1.0 200 OK" \
				1547	-c "ECDH curve: secp384r1" \
				1548	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1549	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1550	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1551
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1552	requires_openssl_tls1_3
				1553	requires_config_enabled MBEDTLS_DEBUG_C
				1554	requires_config_enabled MBEDTLS_SSL_CLI_C
				1555	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1556	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1557	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
				1558	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1559	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1560	0 \
				1561	-c "HTTP/1.0 200 ok" \
				1562	-c "ECDH curve: secp521r1" \
				1563	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1564	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1565	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1566
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1567	requires_gnutls_tls1_3
				1568	requires_gnutls_next_no_ticket
				1569	requires_gnutls_next_disable_tls13_compat
				1570	requires_config_enabled MBEDTLS_DEBUG_C
				1571	requires_config_enabled MBEDTLS_SSL_CLI_C
				1572	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1573	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1574	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
				1575	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1576	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1577	0 \
				1578	-c "HTTP/1.0 200 OK" \
				1579	-c "ECDH curve: secp521r1" \
				1580	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1581	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1582	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1583
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1584	requires_openssl_tls1_3
				1585	requires_config_enabled MBEDTLS_DEBUG_C
				1586	requires_config_enabled MBEDTLS_SSL_CLI_C
				1587	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1588	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1589	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
				1590	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1591	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1592	0 \
				1593	-c "HTTP/1.0 200 ok" \
				1594	-c "ECDH curve: x25519" \
				1595	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1596	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1597	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1598
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1599	requires_gnutls_tls1_3
				1600	requires_gnutls_next_no_ticket
				1601	requires_gnutls_next_disable_tls13_compat
				1602	requires_config_enabled MBEDTLS_DEBUG_C
				1603	requires_config_enabled MBEDTLS_SSL_CLI_C
				1604	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1605	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1606	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
				1607	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1608	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1609	0 \
				1610	-c "HTTP/1.0 200 OK" \
				1611	-c "ECDH curve: x25519" \
				1612	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1613	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1614	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1615
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1616	requires_openssl_tls1_3
				1617	requires_config_enabled MBEDTLS_DEBUG_C
				1618	requires_config_enabled MBEDTLS_SSL_CLI_C
				1619	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1620	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1621	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
				1622	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1623	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1624	0 \
				1625	-c "HTTP/1.0 200 ok" \
				1626	-c "ECDH curve: x448" \
				1627	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1628	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1629	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1630
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1631	requires_gnutls_tls1_3
				1632	requires_gnutls_next_no_ticket
				1633	requires_gnutls_next_disable_tls13_compat
				1634	requires_config_enabled MBEDTLS_DEBUG_C
				1635	requires_config_enabled MBEDTLS_SSL_CLI_C
				1636	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1637	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1638	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
				1639	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1640	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				1641	0 \
				1642	-c "HTTP/1.0 200 OK" \
				1643	-c "ECDH curve: x448" \
				1644	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1645	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				1646	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1647
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1648	requires_openssl_tls1_3
				1649	requires_config_enabled MBEDTLS_DEBUG_C
				1650	requires_config_enabled MBEDTLS_SSL_CLI_C
				1651	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1652	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1653	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
				1654	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1655	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1656	0 \
				1657	-c "HTTP/1.0 200 ok" \
				1658	-c "ECDH curve: secp256r1" \
				1659	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1660	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1661	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1662
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1663	requires_gnutls_tls1_3
				1664	requires_gnutls_next_no_ticket
				1665	requires_gnutls_next_disable_tls13_compat
				1666	requires_config_enabled MBEDTLS_DEBUG_C
				1667	requires_config_enabled MBEDTLS_SSL_CLI_C
				1668	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1669	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1670	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
				1671	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1672	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1673	0 \
				1674	-c "HTTP/1.0 200 OK" \
				1675	-c "ECDH curve: secp256r1" \
				1676	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1677	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1678	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1679
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1680	requires_openssl_tls1_3
				1681	requires_config_enabled MBEDTLS_DEBUG_C
				1682	requires_config_enabled MBEDTLS_SSL_CLI_C
				1683	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1684	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1685	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
				1686	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1687	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1688	0 \
				1689	-c "HTTP/1.0 200 ok" \
				1690	-c "ECDH curve: secp384r1" \
				1691	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1692	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1693	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1694
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1695	requires_gnutls_tls1_3
				1696	requires_gnutls_next_no_ticket
				1697	requires_gnutls_next_disable_tls13_compat
				1698	requires_config_enabled MBEDTLS_DEBUG_C
				1699	requires_config_enabled MBEDTLS_SSL_CLI_C
				1700	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1701	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1702	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
				1703	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1704	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1705	0 \
				1706	-c "HTTP/1.0 200 OK" \
				1707	-c "ECDH curve: secp384r1" \
				1708	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1709	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1710	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1711
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1712	requires_openssl_tls1_3
				1713	requires_config_enabled MBEDTLS_DEBUG_C
				1714	requires_config_enabled MBEDTLS_SSL_CLI_C
				1715	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1716	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1717	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
				1718	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1719	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1720	0 \
				1721	-c "HTTP/1.0 200 ok" \
				1722	-c "ECDH curve: secp521r1" \
				1723	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1724	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1725	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1726
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1727	requires_gnutls_tls1_3
				1728	requires_gnutls_next_no_ticket
				1729	requires_gnutls_next_disable_tls13_compat
				1730	requires_config_enabled MBEDTLS_DEBUG_C
				1731	requires_config_enabled MBEDTLS_SSL_CLI_C
				1732	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1733	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1734	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
				1735	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1736	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1737	0 \
				1738	-c "HTTP/1.0 200 OK" \
				1739	-c "ECDH curve: secp521r1" \
				1740	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1741	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1742	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1743
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1744	requires_openssl_tls1_3
				1745	requires_config_enabled MBEDTLS_DEBUG_C
				1746	requires_config_enabled MBEDTLS_SSL_CLI_C
				1747	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1748	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1749	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
				1750	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1751	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1752	0 \
				1753	-c "HTTP/1.0 200 ok" \
				1754	-c "ECDH curve: x25519" \
				1755	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1756	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1757	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1758
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1759	requires_gnutls_tls1_3
				1760	requires_gnutls_next_no_ticket
				1761	requires_gnutls_next_disable_tls13_compat
				1762	requires_config_enabled MBEDTLS_DEBUG_C
				1763	requires_config_enabled MBEDTLS_SSL_CLI_C
				1764	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1765	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1766	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
				1767	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1768	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1769	0 \
				1770	-c "HTTP/1.0 200 OK" \
				1771	-c "ECDH curve: x25519" \
				1772	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1773	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1774	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1775
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1776	requires_openssl_tls1_3
				1777	requires_config_enabled MBEDTLS_DEBUG_C
				1778	requires_config_enabled MBEDTLS_SSL_CLI_C
				1779	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1780	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1781	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
				1782	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1783	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1784	0 \
				1785	-c "HTTP/1.0 200 ok" \
				1786	-c "ECDH curve: x448" \
				1787	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1788	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1789	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1790
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1791	requires_gnutls_tls1_3
				1792	requires_gnutls_next_no_ticket
				1793	requires_gnutls_next_disable_tls13_compat
				1794	requires_config_enabled MBEDTLS_DEBUG_C
				1795	requires_config_enabled MBEDTLS_SSL_CLI_C
				1796	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1797	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1798	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
				1799	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1800	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				1801	0 \
				1802	-c "HTTP/1.0 200 OK" \
				1803	-c "ECDH curve: x448" \
				1804	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1805	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				1806	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1807
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1808	requires_openssl_tls1_3
				1809	requires_config_enabled MBEDTLS_DEBUG_C
				1810	requires_config_enabled MBEDTLS_SSL_CLI_C
				1811	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1812	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1813	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1814	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1815	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1816	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				1817	0 \
				1818	-c "HTTP/1.0 200 ok" \
				1819	-c "ECDH curve: secp256r1" \
				1820	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1821	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1822	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1823
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1824	requires_gnutls_tls1_3
				1825	requires_gnutls_next_no_ticket
				1826	requires_gnutls_next_disable_tls13_compat
				1827	requires_config_enabled MBEDTLS_DEBUG_C
				1828	requires_config_enabled MBEDTLS_SSL_CLI_C
				1829	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1830	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1831	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1832	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
				1833	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP256R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1834	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				1835	0 \
				1836	-c "HTTP/1.0 200 OK" \
				1837	-c "ECDH curve: secp256r1" \
				1838	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1839	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1840	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1841
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1842	requires_openssl_tls1_3
				1843	requires_config_enabled MBEDTLS_DEBUG_C
				1844	requires_config_enabled MBEDTLS_SSL_CLI_C
				1845	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1846	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1847	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1848	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1849	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1850	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				1851	0 \
				1852	-c "HTTP/1.0 200 ok" \
				1853	-c "ECDH curve: secp384r1" \
				1854	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1855	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1856	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1857
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1858	requires_gnutls_tls1_3
				1859	requires_gnutls_next_no_ticket
				1860	requires_gnutls_next_disable_tls13_compat
				1861	requires_config_enabled MBEDTLS_DEBUG_C
				1862	requires_config_enabled MBEDTLS_SSL_CLI_C
				1863	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1864	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1865	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1866	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
				1867	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP384R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1868	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				1869	0 \
				1870	-c "HTTP/1.0 200 OK" \
				1871	-c "ECDH curve: secp384r1" \
				1872	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1873	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1874	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1875
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1876	requires_openssl_tls1_3
				1877	requires_config_enabled MBEDTLS_DEBUG_C
				1878	requires_config_enabled MBEDTLS_SSL_CLI_C
				1879	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1880	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1881	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1882	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1883	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1884	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				1885	0 \
				1886	-c "HTTP/1.0 200 ok" \
				1887	-c "ECDH curve: secp521r1" \
				1888	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1889	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1890	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1891
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1892	requires_gnutls_tls1_3
				1893	requires_gnutls_next_no_ticket
				1894	requires_gnutls_next_disable_tls13_compat
				1895	requires_config_enabled MBEDTLS_DEBUG_C
				1896	requires_config_enabled MBEDTLS_SSL_CLI_C
				1897	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1898	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1899	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1900	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
				1901	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-SECP521R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1902	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				1903	0 \
				1904	-c "HTTP/1.0 200 OK" \
				1905	-c "ECDH curve: secp521r1" \
				1906	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1907	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1908	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1909
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1910	requires_openssl_tls1_3
				1911	requires_config_enabled MBEDTLS_DEBUG_C
				1912	requires_config_enabled MBEDTLS_SSL_CLI_C
				1913	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1914	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1915	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1916	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1917	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1918	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				1919	0 \
				1920	-c "HTTP/1.0 200 ok" \
				1921	-c "ECDH curve: x25519" \
				1922	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1923	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1924	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1925
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1926	requires_gnutls_tls1_3
				1927	requires_gnutls_next_no_ticket
				1928	requires_gnutls_next_disable_tls13_compat
				1929	requires_config_enabled MBEDTLS_DEBUG_C
				1930	requires_config_enabled MBEDTLS_SSL_CLI_C
				1931	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1932	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1933	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1934	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
				1935	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-X25519:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1936	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				1937	0 \
				1938	-c "HTTP/1.0 200 OK" \
				1939	-c "ECDH curve: x25519" \
				1940	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1941	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1942	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1943
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1944	requires_openssl_tls1_3
				1945	requires_config_enabled MBEDTLS_DEBUG_C
				1946	requires_config_enabled MBEDTLS_SSL_CLI_C
				1947	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1948	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1949	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1950	run_test "TLS 1.3 m->O: TLS_CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1951	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				1952	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				1953	0 \
				1954	-c "HTTP/1.0 200 ok" \
				1955	-c "ECDH curve: x448" \
				1956	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1957	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1958	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1959
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1960	requires_gnutls_tls1_3
				1961	requires_gnutls_next_no_ticket
				1962	requires_gnutls_next_disable_tls13_compat
				1963	requires_config_enabled MBEDTLS_DEBUG_C
				1964	requires_config_enabled MBEDTLS_SSL_CLI_C
				1965	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1966	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				1967	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1968	run_test "TLS 1.3 m->G: TLS_CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
				1969	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+CHACHA20-POLY1305:+GROUP-X448:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1970	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				1971	0 \
				1972	-c "HTTP/1.0 200 OK" \
				1973	-c "ECDH curve: x448" \
				1974	-c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
				1975	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				1976	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1977
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1978	requires_openssl_tls1_3
				1979	requires_config_enabled MBEDTLS_DEBUG_C
				1980	requires_config_enabled MBEDTLS_SSL_CLI_C
				1981	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1982	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1983	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
				1984	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	1985	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				1986	0 \
				1987	-c "HTTP/1.0 200 ok" \
				1988	-c "ECDH curve: secp256r1" \
				1989	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				1990	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				1991	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	1992
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	1993	requires_gnutls_tls1_3
				1994	requires_gnutls_next_no_ticket
				1995	requires_gnutls_next_disable_tls13_compat
				1996	requires_config_enabled MBEDTLS_DEBUG_C
				1997	requires_config_enabled MBEDTLS_SSL_CLI_C
				1998	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				1999	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2000	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
				2001	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2002	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2003	0 \
				2004	-c "HTTP/1.0 200 OK" \
				2005	-c "ECDH curve: secp256r1" \
				2006	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2007	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2008	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2009
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2010	requires_openssl_tls1_3
				2011	requires_config_enabled MBEDTLS_DEBUG_C
				2012	requires_config_enabled MBEDTLS_SSL_CLI_C
				2013	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2014	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2015	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
				2016	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2017	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2018	0 \
				2019	-c "HTTP/1.0 200 ok" \
				2020	-c "ECDH curve: secp384r1" \
				2021	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2022	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2023	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2024
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2025	requires_gnutls_tls1_3
				2026	requires_gnutls_next_no_ticket
				2027	requires_gnutls_next_disable_tls13_compat
				2028	requires_config_enabled MBEDTLS_DEBUG_C
				2029	requires_config_enabled MBEDTLS_SSL_CLI_C
				2030	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2031	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2032	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
				2033	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2034	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2035	0 \
				2036	-c "HTTP/1.0 200 OK" \
				2037	-c "ECDH curve: secp384r1" \
				2038	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2039	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2040	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2041
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2042	requires_openssl_tls1_3
				2043	requires_config_enabled MBEDTLS_DEBUG_C
				2044	requires_config_enabled MBEDTLS_SSL_CLI_C
				2045	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2046	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2047	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
				2048	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2049	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2050	0 \
				2051	-c "HTTP/1.0 200 ok" \
				2052	-c "ECDH curve: secp521r1" \
				2053	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2054	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2055	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2056
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2057	requires_gnutls_tls1_3
				2058	requires_gnutls_next_no_ticket
				2059	requires_gnutls_next_disable_tls13_compat
				2060	requires_config_enabled MBEDTLS_DEBUG_C
				2061	requires_config_enabled MBEDTLS_SSL_CLI_C
				2062	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2063	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2064	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
				2065	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2066	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2067	0 \
				2068	-c "HTTP/1.0 200 OK" \
				2069	-c "ECDH curve: secp521r1" \
				2070	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2071	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2072	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2073
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2074	requires_openssl_tls1_3
				2075	requires_config_enabled MBEDTLS_DEBUG_C
				2076	requires_config_enabled MBEDTLS_SSL_CLI_C
				2077	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2078	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2079	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
				2080	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2081	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2082	0 \
				2083	-c "HTTP/1.0 200 ok" \
				2084	-c "ECDH curve: x25519" \
				2085	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2086	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2087	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2088
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2089	requires_gnutls_tls1_3
				2090	requires_gnutls_next_no_ticket
				2091	requires_gnutls_next_disable_tls13_compat
				2092	requires_config_enabled MBEDTLS_DEBUG_C
				2093	requires_config_enabled MBEDTLS_SSL_CLI_C
				2094	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2095	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2096	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
				2097	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2098	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2099	0 \
				2100	-c "HTTP/1.0 200 OK" \
				2101	-c "ECDH curve: x25519" \
				2102	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2103	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2104	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2105
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2106	requires_openssl_tls1_3
				2107	requires_config_enabled MBEDTLS_DEBUG_C
				2108	requires_config_enabled MBEDTLS_SSL_CLI_C
				2109	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2110	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2111	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
				2112	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2113	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2114	0 \
				2115	-c "HTTP/1.0 200 ok" \
				2116	-c "ECDH curve: x448" \
				2117	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2118	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2119	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2120
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2121	requires_gnutls_tls1_3
				2122	requires_gnutls_next_no_ticket
				2123	requires_gnutls_next_disable_tls13_compat
				2124	requires_config_enabled MBEDTLS_DEBUG_C
				2125	requires_config_enabled MBEDTLS_SSL_CLI_C
				2126	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2127	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2128	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
				2129	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2130	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2131	0 \
				2132	-c "HTTP/1.0 200 OK" \
				2133	-c "ECDH curve: x448" \
				2134	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2135	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2136	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2137
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2138	requires_openssl_tls1_3
				2139	requires_config_enabled MBEDTLS_DEBUG_C
				2140	requires_config_enabled MBEDTLS_SSL_CLI_C
				2141	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2142	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2143	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
				2144	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2145	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2146	0 \
				2147	-c "HTTP/1.0 200 ok" \
				2148	-c "ECDH curve: secp256r1" \
				2149	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2150	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2151	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2152
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2153	requires_gnutls_tls1_3
				2154	requires_gnutls_next_no_ticket
				2155	requires_gnutls_next_disable_tls13_compat
				2156	requires_config_enabled MBEDTLS_DEBUG_C
				2157	requires_config_enabled MBEDTLS_SSL_CLI_C
				2158	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2159	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2160	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
				2161	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2162	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2163	0 \
				2164	-c "HTTP/1.0 200 OK" \
				2165	-c "ECDH curve: secp256r1" \
				2166	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2167	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2168	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2169
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2170	requires_openssl_tls1_3
				2171	requires_config_enabled MBEDTLS_DEBUG_C
				2172	requires_config_enabled MBEDTLS_SSL_CLI_C
				2173	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2174	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2175	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
				2176	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2177	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2178	0 \
				2179	-c "HTTP/1.0 200 ok" \
				2180	-c "ECDH curve: secp384r1" \
				2181	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2182	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2183	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2184
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2185	requires_gnutls_tls1_3
				2186	requires_gnutls_next_no_ticket
				2187	requires_gnutls_next_disable_tls13_compat
				2188	requires_config_enabled MBEDTLS_DEBUG_C
				2189	requires_config_enabled MBEDTLS_SSL_CLI_C
				2190	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2191	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2192	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
				2193	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2194	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2195	0 \
				2196	-c "HTTP/1.0 200 OK" \
				2197	-c "ECDH curve: secp384r1" \
				2198	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2199	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2200	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2201
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2202	requires_openssl_tls1_3
				2203	requires_config_enabled MBEDTLS_DEBUG_C
				2204	requires_config_enabled MBEDTLS_SSL_CLI_C
				2205	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2206	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2207	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
				2208	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2209	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2210	0 \
				2211	-c "HTTP/1.0 200 ok" \
				2212	-c "ECDH curve: secp521r1" \
				2213	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2214	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2215	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2216
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2217	requires_gnutls_tls1_3
				2218	requires_gnutls_next_no_ticket
				2219	requires_gnutls_next_disable_tls13_compat
				2220	requires_config_enabled MBEDTLS_DEBUG_C
				2221	requires_config_enabled MBEDTLS_SSL_CLI_C
				2222	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2223	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2224	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
				2225	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2226	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2227	0 \
				2228	-c "HTTP/1.0 200 OK" \
				2229	-c "ECDH curve: secp521r1" \
				2230	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2231	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2232	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2233
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2234	requires_openssl_tls1_3
				2235	requires_config_enabled MBEDTLS_DEBUG_C
				2236	requires_config_enabled MBEDTLS_SSL_CLI_C
				2237	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2238	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2239	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
				2240	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2241	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2242	0 \
				2243	-c "HTTP/1.0 200 ok" \
				2244	-c "ECDH curve: x25519" \
				2245	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2246	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2247	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2248
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2249	requires_gnutls_tls1_3
				2250	requires_gnutls_next_no_ticket
				2251	requires_gnutls_next_disable_tls13_compat
				2252	requires_config_enabled MBEDTLS_DEBUG_C
				2253	requires_config_enabled MBEDTLS_SSL_CLI_C
				2254	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2255	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2256	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
				2257	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2258	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2259	0 \
				2260	-c "HTTP/1.0 200 OK" \
				2261	-c "ECDH curve: x25519" \
				2262	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2263	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2264	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2265
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2266	requires_openssl_tls1_3
				2267	requires_config_enabled MBEDTLS_DEBUG_C
				2268	requires_config_enabled MBEDTLS_SSL_CLI_C
				2269	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2270	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2271	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
				2272	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2273	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2274	0 \
				2275	-c "HTTP/1.0 200 ok" \
				2276	-c "ECDH curve: x448" \
				2277	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2278	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2279	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2280
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2281	requires_gnutls_tls1_3
				2282	requires_gnutls_next_no_ticket
				2283	requires_gnutls_next_disable_tls13_compat
				2284	requires_config_enabled MBEDTLS_DEBUG_C
				2285	requires_config_enabled MBEDTLS_SSL_CLI_C
				2286	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2287	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2288	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
				2289	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2290	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2291	0 \
				2292	-c "HTTP/1.0 200 OK" \
				2293	-c "ECDH curve: x448" \
				2294	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2295	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2296	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2297
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2298	requires_openssl_tls1_3
				2299	requires_config_enabled MBEDTLS_DEBUG_C
				2300	requires_config_enabled MBEDTLS_SSL_CLI_C
				2301	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2302	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2303	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
				2304	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2305	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2306	0 \
				2307	-c "HTTP/1.0 200 ok" \
				2308	-c "ECDH curve: secp256r1" \
				2309	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2310	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2311	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2312
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2313	requires_gnutls_tls1_3
				2314	requires_gnutls_next_no_ticket
				2315	requires_gnutls_next_disable_tls13_compat
				2316	requires_config_enabled MBEDTLS_DEBUG_C
				2317	requires_config_enabled MBEDTLS_SSL_CLI_C
				2318	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2319	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2320	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
				2321	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2322	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2323	0 \
				2324	-c "HTTP/1.0 200 OK" \
				2325	-c "ECDH curve: secp256r1" \
				2326	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2327	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2328	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2329
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2330	requires_openssl_tls1_3
				2331	requires_config_enabled MBEDTLS_DEBUG_C
				2332	requires_config_enabled MBEDTLS_SSL_CLI_C
				2333	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2334	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2335	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
				2336	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2337	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2338	0 \
				2339	-c "HTTP/1.0 200 ok" \
				2340	-c "ECDH curve: secp384r1" \
				2341	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2342	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2343	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2344
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2345	requires_gnutls_tls1_3
				2346	requires_gnutls_next_no_ticket
				2347	requires_gnutls_next_disable_tls13_compat
				2348	requires_config_enabled MBEDTLS_DEBUG_C
				2349	requires_config_enabled MBEDTLS_SSL_CLI_C
				2350	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2351	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2352	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
				2353	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2354	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2355	0 \
				2356	-c "HTTP/1.0 200 OK" \
				2357	-c "ECDH curve: secp384r1" \
				2358	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2359	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2360	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2361
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2362	requires_openssl_tls1_3
				2363	requires_config_enabled MBEDTLS_DEBUG_C
				2364	requires_config_enabled MBEDTLS_SSL_CLI_C
				2365	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2366	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2367	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
				2368	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2369	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2370	0 \
				2371	-c "HTTP/1.0 200 ok" \
				2372	-c "ECDH curve: secp521r1" \
				2373	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2374	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2375	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2376
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2377	requires_gnutls_tls1_3
				2378	requires_gnutls_next_no_ticket
				2379	requires_gnutls_next_disable_tls13_compat
				2380	requires_config_enabled MBEDTLS_DEBUG_C
				2381	requires_config_enabled MBEDTLS_SSL_CLI_C
				2382	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2383	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2384	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
				2385	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2386	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2387	0 \
				2388	-c "HTTP/1.0 200 OK" \
				2389	-c "ECDH curve: secp521r1" \
				2390	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2391	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2392	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2393
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2394	requires_openssl_tls1_3
				2395	requires_config_enabled MBEDTLS_DEBUG_C
				2396	requires_config_enabled MBEDTLS_SSL_CLI_C
				2397	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2398	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2399	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
				2400	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2401	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2402	0 \
				2403	-c "HTTP/1.0 200 ok" \
				2404	-c "ECDH curve: x25519" \
				2405	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2406	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2407	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2408
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2409	requires_gnutls_tls1_3
				2410	requires_gnutls_next_no_ticket
				2411	requires_gnutls_next_disable_tls13_compat
				2412	requires_config_enabled MBEDTLS_DEBUG_C
				2413	requires_config_enabled MBEDTLS_SSL_CLI_C
				2414	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2415	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2416	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
				2417	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2418	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2419	0 \
				2420	-c "HTTP/1.0 200 OK" \
				2421	-c "ECDH curve: x25519" \
				2422	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2423	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2424	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2425
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2426	requires_openssl_tls1_3
				2427	requires_config_enabled MBEDTLS_DEBUG_C
				2428	requires_config_enabled MBEDTLS_SSL_CLI_C
				2429	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2430	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2431	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
				2432	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2433	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2434	0 \
				2435	-c "HTTP/1.0 200 ok" \
				2436	-c "ECDH curve: x448" \
				2437	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2438	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2439	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2440
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2441	requires_gnutls_tls1_3
				2442	requires_gnutls_next_no_ticket
				2443	requires_gnutls_next_disable_tls13_compat
				2444	requires_config_enabled MBEDTLS_DEBUG_C
				2445	requires_config_enabled MBEDTLS_SSL_CLI_C
				2446	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2447	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2448	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
				2449	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2450	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2451	0 \
				2452	-c "HTTP/1.0 200 OK" \
				2453	-c "ECDH curve: x448" \
				2454	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2455	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2456	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2457
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2458	requires_openssl_tls1_3
				2459	requires_config_enabled MBEDTLS_DEBUG_C
				2460	requires_config_enabled MBEDTLS_SSL_CLI_C
				2461	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2462	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2463	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2464	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2465	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				2466	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				2467	0 \
				2468	-c "HTTP/1.0 200 ok" \
				2469	-c "ECDH curve: secp256r1" \
				2470	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2471	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2472	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2473
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2474	requires_gnutls_tls1_3
				2475	requires_gnutls_next_no_ticket
				2476	requires_gnutls_next_disable_tls13_compat
				2477	requires_config_enabled MBEDTLS_DEBUG_C
				2478	requires_config_enabled MBEDTLS_SSL_CLI_C
				2479	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2480	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2481	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2482	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
				2483	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP256R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2484	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				2485	0 \
				2486	-c "HTTP/1.0 200 OK" \
				2487	-c "ECDH curve: secp256r1" \
				2488	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2489	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2490	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2491
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2492	requires_openssl_tls1_3
				2493	requires_config_enabled MBEDTLS_DEBUG_C
				2494	requires_config_enabled MBEDTLS_SSL_CLI_C
				2495	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2496	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2497	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2498	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2499	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				2500	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				2501	0 \
				2502	-c "HTTP/1.0 200 ok" \
				2503	-c "ECDH curve: secp384r1" \
				2504	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2505	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2506	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2507
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2508	requires_gnutls_tls1_3
				2509	requires_gnutls_next_no_ticket
				2510	requires_gnutls_next_disable_tls13_compat
				2511	requires_config_enabled MBEDTLS_DEBUG_C
				2512	requires_config_enabled MBEDTLS_SSL_CLI_C
				2513	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2514	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2515	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2516	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
				2517	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP384R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2518	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				2519	0 \
				2520	-c "HTTP/1.0 200 OK" \
				2521	-c "ECDH curve: secp384r1" \
				2522	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2523	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2524	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2525
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2526	requires_openssl_tls1_3
				2527	requires_config_enabled MBEDTLS_DEBUG_C
				2528	requires_config_enabled MBEDTLS_SSL_CLI_C
				2529	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2530	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2531	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2532	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2533	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				2534	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				2535	0 \
				2536	-c "HTTP/1.0 200 ok" \
				2537	-c "ECDH curve: secp521r1" \
				2538	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2539	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2540	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2541
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2542	requires_gnutls_tls1_3
				2543	requires_gnutls_next_no_ticket
				2544	requires_gnutls_next_disable_tls13_compat
				2545	requires_config_enabled MBEDTLS_DEBUG_C
				2546	requires_config_enabled MBEDTLS_SSL_CLI_C
				2547	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2548	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2549	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2550	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
				2551	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-SECP521R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2552	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				2553	0 \
				2554	-c "HTTP/1.0 200 OK" \
				2555	-c "ECDH curve: secp521r1" \
				2556	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2557	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2558	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2559
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2560	requires_openssl_tls1_3
				2561	requires_config_enabled MBEDTLS_DEBUG_C
				2562	requires_config_enabled MBEDTLS_SSL_CLI_C
				2563	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2564	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2565	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2566	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2567	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				2568	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				2569	0 \
				2570	-c "HTTP/1.0 200 ok" \
				2571	-c "ECDH curve: x25519" \
				2572	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2573	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2574	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2575
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2576	requires_gnutls_tls1_3
				2577	requires_gnutls_next_no_ticket
				2578	requires_gnutls_next_disable_tls13_compat
				2579	requires_config_enabled MBEDTLS_DEBUG_C
				2580	requires_config_enabled MBEDTLS_SSL_CLI_C
				2581	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2582	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2583	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2584	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
				2585	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-X25519:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2586	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				2587	0 \
				2588	-c "HTTP/1.0 200 OK" \
				2589	-c "ECDH curve: x25519" \
				2590	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2591	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2592	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2593
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2594	requires_openssl_tls1_3
				2595	requires_config_enabled MBEDTLS_DEBUG_C
				2596	requires_config_enabled MBEDTLS_SSL_CLI_C
				2597	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2598	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2599	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2600	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2601	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				2602	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				2603	0 \
				2604	-c "HTTP/1.0 200 ok" \
				2605	-c "ECDH curve: x448" \
				2606	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2607	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2608	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2609
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2610	requires_gnutls_tls1_3
				2611	requires_gnutls_next_no_ticket
				2612	requires_gnutls_next_disable_tls13_compat
				2613	requires_config_enabled MBEDTLS_DEBUG_C
				2614	requires_config_enabled MBEDTLS_SSL_CLI_C
				2615	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2616	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				2617	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2618	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
				2619	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM:+GROUP-X448:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2620	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				2621	0 \
				2622	-c "HTTP/1.0 200 OK" \
				2623	-c "ECDH curve: x448" \
				2624	-c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
				2625	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				2626	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2627
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2628	requires_openssl_tls1_3
				2629	requires_config_enabled MBEDTLS_DEBUG_C
				2630	requires_config_enabled MBEDTLS_SSL_CLI_C
				2631	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2632	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2633	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
				2634	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2635	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2636	0 \
				2637	-c "HTTP/1.0 200 ok" \
				2638	-c "ECDH curve: secp256r1" \
				2639	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2640	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2641	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2642
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2643	requires_gnutls_tls1_3
				2644	requires_gnutls_next_no_ticket
				2645	requires_gnutls_next_disable_tls13_compat
				2646	requires_config_enabled MBEDTLS_DEBUG_C
				2647	requires_config_enabled MBEDTLS_SSL_CLI_C
				2648	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2649	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2650	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
				2651	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2652	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2653	0 \
				2654	-c "HTTP/1.0 200 OK" \
				2655	-c "ECDH curve: secp256r1" \
				2656	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2657	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2658	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2659
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2660	requires_openssl_tls1_3
				2661	requires_config_enabled MBEDTLS_DEBUG_C
				2662	requires_config_enabled MBEDTLS_SSL_CLI_C
				2663	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2664	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2665	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
				2666	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2667	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2668	0 \
				2669	-c "HTTP/1.0 200 ok" \
				2670	-c "ECDH curve: secp384r1" \
				2671	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2672	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2673	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2674
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2675	requires_gnutls_tls1_3
				2676	requires_gnutls_next_no_ticket
				2677	requires_gnutls_next_disable_tls13_compat
				2678	requires_config_enabled MBEDTLS_DEBUG_C
				2679	requires_config_enabled MBEDTLS_SSL_CLI_C
				2680	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2681	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2682	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
				2683	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2684	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp384r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2685	0 \
				2686	-c "HTTP/1.0 200 OK" \
				2687	-c "ECDH curve: secp384r1" \
				2688	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2689	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2690	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2691
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2692	requires_openssl_tls1_3
				2693	requires_config_enabled MBEDTLS_DEBUG_C
				2694	requires_config_enabled MBEDTLS_SSL_CLI_C
				2695	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2696	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2697	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
				2698	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2699	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2700	0 \
				2701	-c "HTTP/1.0 200 ok" \
				2702	-c "ECDH curve: secp521r1" \
				2703	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2704	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2705	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2706
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2707	requires_gnutls_tls1_3
				2708	requires_gnutls_next_no_ticket
				2709	requires_gnutls_next_disable_tls13_compat
				2710	requires_config_enabled MBEDTLS_DEBUG_C
				2711	requires_config_enabled MBEDTLS_SSL_CLI_C
				2712	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2713	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2714	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
				2715	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2716	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp521r1,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2717	0 \
				2718	-c "HTTP/1.0 200 OK" \
				2719	-c "ECDH curve: secp521r1" \
				2720	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2721	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2722	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2723
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2724	requires_openssl_tls1_3
				2725	requires_config_enabled MBEDTLS_DEBUG_C
				2726	requires_config_enabled MBEDTLS_SSL_CLI_C
				2727	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2728	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2729	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
				2730	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2731	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2732	0 \
				2733	-c "HTTP/1.0 200 ok" \
				2734	-c "ECDH curve: x25519" \
				2735	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2736	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2737	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2738
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2739	requires_gnutls_tls1_3
				2740	requires_gnutls_next_no_ticket
				2741	requires_gnutls_next_disable_tls13_compat
				2742	requires_config_enabled MBEDTLS_DEBUG_C
				2743	requires_config_enabled MBEDTLS_SSL_CLI_C
				2744	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2745	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2746	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
				2747	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2748	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x25519,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2749	0 \
				2750	-c "HTTP/1.0 200 OK" \
				2751	-c "ECDH curve: x25519" \
				2752	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2753	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2754	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2755
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2756	requires_openssl_tls1_3
				2757	requires_config_enabled MBEDTLS_DEBUG_C
				2758	requires_config_enabled MBEDTLS_SSL_CLI_C
				2759	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2760	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2761	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
				2762	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2763	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2764	0 \
				2765	-c "HTTP/1.0 200 ok" \
				2766	-c "ECDH curve: x448" \
				2767	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2768	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2769	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2770
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2771	requires_gnutls_tls1_3
				2772	requires_gnutls_next_no_ticket
				2773	requires_gnutls_next_disable_tls13_compat
				2774	requires_config_enabled MBEDTLS_DEBUG_C
				2775	requires_config_enabled MBEDTLS_SSL_CLI_C
				2776	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2777	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2778	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
				2779	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2780	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x448,secp256r1 sig_algs=ecdsa_secp256r1_sha256" \
				2781	0 \
				2782	-c "HTTP/1.0 200 OK" \
				2783	-c "ECDH curve: x448" \
				2784	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2785	-c "Certificate Verify: Signature algorithm ( 0403 )" \
				2786	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2787
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2788	requires_openssl_tls1_3
				2789	requires_config_enabled MBEDTLS_DEBUG_C
				2790	requires_config_enabled MBEDTLS_SSL_CLI_C
				2791	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2792	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2793	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
				2794	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2795	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2796	0 \
				2797	-c "HTTP/1.0 200 ok" \
				2798	-c "ECDH curve: secp256r1" \
				2799	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2800	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2801	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2802
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2803	requires_gnutls_tls1_3
				2804	requires_gnutls_next_no_ticket
				2805	requires_gnutls_next_disable_tls13_compat
				2806	requires_config_enabled MBEDTLS_DEBUG_C
				2807	requires_config_enabled MBEDTLS_SSL_CLI_C
				2808	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2809	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2810	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
				2811	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2812	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp256r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2813	0 \
				2814	-c "HTTP/1.0 200 OK" \
				2815	-c "ECDH curve: secp256r1" \
				2816	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2817	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2818	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2819
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2820	requires_openssl_tls1_3
				2821	requires_config_enabled MBEDTLS_DEBUG_C
				2822	requires_config_enabled MBEDTLS_SSL_CLI_C
				2823	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2824	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2825	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
				2826	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2827	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2828	0 \
				2829	-c "HTTP/1.0 200 ok" \
				2830	-c "ECDH curve: secp384r1" \
				2831	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2832	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2833	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2834
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2835	requires_gnutls_tls1_3
				2836	requires_gnutls_next_no_ticket
				2837	requires_gnutls_next_disable_tls13_compat
				2838	requires_config_enabled MBEDTLS_DEBUG_C
				2839	requires_config_enabled MBEDTLS_SSL_CLI_C
				2840	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2841	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2842	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
				2843	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2844	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2845	0 \
				2846	-c "HTTP/1.0 200 OK" \
				2847	-c "ECDH curve: secp384r1" \
				2848	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2849	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2850	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2851
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2852	requires_openssl_tls1_3
				2853	requires_config_enabled MBEDTLS_DEBUG_C
				2854	requires_config_enabled MBEDTLS_SSL_CLI_C
				2855	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2856	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2857	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
				2858	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2859	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2860	0 \
				2861	-c "HTTP/1.0 200 ok" \
				2862	-c "ECDH curve: secp521r1" \
				2863	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2864	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2865	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2866
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2867	requires_gnutls_tls1_3
				2868	requires_gnutls_next_no_ticket
				2869	requires_gnutls_next_disable_tls13_compat
				2870	requires_config_enabled MBEDTLS_DEBUG_C
				2871	requires_config_enabled MBEDTLS_SSL_CLI_C
				2872	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2873	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2874	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
				2875	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2876	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp521r1,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2877	0 \
				2878	-c "HTTP/1.0 200 OK" \
				2879	-c "ECDH curve: secp521r1" \
				2880	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2881	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2882	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2883
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2884	requires_openssl_tls1_3
				2885	requires_config_enabled MBEDTLS_DEBUG_C
				2886	requires_config_enabled MBEDTLS_SSL_CLI_C
				2887	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2888	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2889	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
				2890	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2891	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2892	0 \
				2893	-c "HTTP/1.0 200 ok" \
				2894	-c "ECDH curve: x25519" \
				2895	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2896	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2897	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2898
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2899	requires_gnutls_tls1_3
				2900	requires_gnutls_next_no_ticket
				2901	requires_gnutls_next_disable_tls13_compat
				2902	requires_config_enabled MBEDTLS_DEBUG_C
				2903	requires_config_enabled MBEDTLS_SSL_CLI_C
				2904	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2905	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2906	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
				2907	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2908	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x25519,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2909	0 \
				2910	-c "HTTP/1.0 200 OK" \
				2911	-c "ECDH curve: x25519" \
				2912	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2913	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2914	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2915
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2916	requires_openssl_tls1_3
				2917	requires_config_enabled MBEDTLS_DEBUG_C
				2918	requires_config_enabled MBEDTLS_SSL_CLI_C
				2919	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2920	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2921	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
				2922	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2923	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2924	0 \
				2925	-c "HTTP/1.0 200 ok" \
				2926	-c "ECDH curve: x448" \
				2927	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2928	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2929	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2930
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2931	requires_gnutls_tls1_3
				2932	requires_gnutls_next_no_ticket
				2933	requires_gnutls_next_disable_tls13_compat
				2934	requires_config_enabled MBEDTLS_DEBUG_C
				2935	requires_config_enabled MBEDTLS_SSL_CLI_C
				2936	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2937	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2938	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
				2939	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP384R1-SHA384:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2940	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x448,secp384r1 sig_algs=ecdsa_secp384r1_sha384" \
				2941	0 \
				2942	-c "HTTP/1.0 200 OK" \
				2943	-c "ECDH curve: x448" \
				2944	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2945	-c "Certificate Verify: Signature algorithm ( 0503 )" \
				2946	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2947
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2948	requires_openssl_tls1_3
				2949	requires_config_enabled MBEDTLS_DEBUG_C
				2950	requires_config_enabled MBEDTLS_SSL_CLI_C
				2951	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2952	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2953	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
				2954	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2955	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2956	0 \
				2957	-c "HTTP/1.0 200 ok" \
				2958	-c "ECDH curve: secp256r1" \
				2959	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2960	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2961	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2962
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2963	requires_gnutls_tls1_3
				2964	requires_gnutls_next_no_ticket
				2965	requires_gnutls_next_disable_tls13_compat
				2966	requires_config_enabled MBEDTLS_DEBUG_C
				2967	requires_config_enabled MBEDTLS_SSL_CLI_C
				2968	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2969	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2970	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
				2971	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP256R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2972	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp256r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2973	0 \
				2974	-c "HTTP/1.0 200 OK" \
				2975	-c "ECDH curve: secp256r1" \
				2976	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2977	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2978	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2979
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2980	requires_openssl_tls1_3
				2981	requires_config_enabled MBEDTLS_DEBUG_C
				2982	requires_config_enabled MBEDTLS_SSL_CLI_C
				2983	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				2984	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2985	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
				2986	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	2987	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				2988	0 \
				2989	-c "HTTP/1.0 200 ok" \
				2990	-c "ECDH curve: secp384r1" \
				2991	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				2992	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				2993	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	2994
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	2995	requires_gnutls_tls1_3
				2996	requires_gnutls_next_no_ticket
				2997	requires_gnutls_next_disable_tls13_compat
				2998	requires_config_enabled MBEDTLS_DEBUG_C
				2999	requires_config_enabled MBEDTLS_SSL_CLI_C
				3000	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3001	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3002	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
				3003	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP384R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3004	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp384r1,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				3005	0 \
				3006	-c "HTTP/1.0 200 OK" \
				3007	-c "ECDH curve: secp384r1" \
				3008	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3009	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				3010	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3011
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3012	requires_openssl_tls1_3
				3013	requires_config_enabled MBEDTLS_DEBUG_C
				3014	requires_config_enabled MBEDTLS_SSL_CLI_C
				3015	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3016	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3017	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
				3018	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3019	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				3020	0 \
				3021	-c "HTTP/1.0 200 ok" \
				3022	-c "ECDH curve: secp521r1" \
				3023	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3024	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				3025	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3026
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3027	requires_gnutls_tls1_3
				3028	requires_gnutls_next_no_ticket
				3029	requires_gnutls_next_disable_tls13_compat
				3030	requires_config_enabled MBEDTLS_DEBUG_C
				3031	requires_config_enabled MBEDTLS_SSL_CLI_C
				3032	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3033	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3034	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
				3035	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP521R1:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3036	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				3037	0 \
				3038	-c "HTTP/1.0 200 OK" \
				3039	-c "ECDH curve: secp521r1" \
				3040	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3041	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				3042	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3043
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3044	requires_openssl_tls1_3
				3045	requires_config_enabled MBEDTLS_DEBUG_C
				3046	requires_config_enabled MBEDTLS_SSL_CLI_C
				3047	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3048	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3049	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
				3050	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3051	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				3052	0 \
				3053	-c "HTTP/1.0 200 ok" \
				3054	-c "ECDH curve: x25519" \
				3055	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3056	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				3057	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3058
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3059	requires_gnutls_tls1_3
				3060	requires_gnutls_next_no_ticket
				3061	requires_gnutls_next_disable_tls13_compat
				3062	requires_config_enabled MBEDTLS_DEBUG_C
				3063	requires_config_enabled MBEDTLS_SSL_CLI_C
				3064	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3065	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3066	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
				3067	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-X25519:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3068	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x25519,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				3069	0 \
				3070	-c "HTTP/1.0 200 OK" \
				3071	-c "ECDH curve: x25519" \
				3072	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3073	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				3074	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3075
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3076	requires_openssl_tls1_3
				3077	requires_config_enabled MBEDTLS_DEBUG_C
				3078	requires_config_enabled MBEDTLS_SSL_CLI_C
				3079	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3080	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3081	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
				3082	"$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3083	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				3084	0 \
				3085	-c "HTTP/1.0 200 ok" \
				3086	-c "ECDH curve: x448" \
				3087	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3088	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				3089	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3090
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3091	requires_gnutls_tls1_3
				3092	requires_gnutls_next_no_ticket
				3093	requires_gnutls_next_disable_tls13_compat
				3094	requires_config_enabled MBEDTLS_DEBUG_C
				3095	requires_config_enabled MBEDTLS_SSL_CLI_C
				3096	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3097	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3098	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
				3099	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-X448:+SHA256:+SIGN-ECDSA-SECP521R1-SHA512:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3100	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca2.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x448,secp521r1 sig_algs=ecdsa_secp521r1_sha512" \
				3101	0 \
				3102	-c "HTTP/1.0 200 OK" \
				3103	-c "ECDH curve: x448" \
				3104	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3105	-c "Certificate Verify: Signature algorithm ( 0603 )" \
				3106	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3107
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3108	requires_openssl_tls1_3
				3109	requires_config_enabled MBEDTLS_DEBUG_C
				3110	requires_config_enabled MBEDTLS_SSL_CLI_C
				3111	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3112	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3113	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3114	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3115	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				3116	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				3117	0 \
				3118	-c "HTTP/1.0 200 ok" \
				3119	-c "ECDH curve: secp256r1" \
				3120	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3121	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3122	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3123
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3124	requires_gnutls_tls1_3
				3125	requires_gnutls_next_no_ticket
				3126	requires_gnutls_next_disable_tls13_compat
				3127	requires_config_enabled MBEDTLS_DEBUG_C
				3128	requires_config_enabled MBEDTLS_SSL_CLI_C
				3129	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3130	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3131	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3132	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
				3133	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP256R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3134	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp256r1 sig_algs=rsa_pss_rsae_sha256" \
				3135	0 \
				3136	-c "HTTP/1.0 200 OK" \
				3137	-c "ECDH curve: secp256r1" \
				3138	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3139	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3140	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3141
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3142	requires_openssl_tls1_3
				3143	requires_config_enabled MBEDTLS_DEBUG_C
				3144	requires_config_enabled MBEDTLS_SSL_CLI_C
				3145	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3146	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3147	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3148	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3149	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				3150	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				3151	0 \
				3152	-c "HTTP/1.0 200 ok" \
				3153	-c "ECDH curve: secp384r1" \
				3154	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3155	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3156	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3157
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3158	requires_gnutls_tls1_3
				3159	requires_gnutls_next_no_ticket
				3160	requires_gnutls_next_disable_tls13_compat
				3161	requires_config_enabled MBEDTLS_DEBUG_C
				3162	requires_config_enabled MBEDTLS_SSL_CLI_C
				3163	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3164	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3165	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3166	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
				3167	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP384R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3168	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp384r1 sig_algs=rsa_pss_rsae_sha256" \
				3169	0 \
				3170	-c "HTTP/1.0 200 OK" \
				3171	-c "ECDH curve: secp384r1" \
				3172	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3173	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3174	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3175
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3176	requires_openssl_tls1_3
				3177	requires_config_enabled MBEDTLS_DEBUG_C
				3178	requires_config_enabled MBEDTLS_SSL_CLI_C
				3179	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3180	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3181	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3182	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3183	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				3184	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				3185	0 \
				3186	-c "HTTP/1.0 200 ok" \
				3187	-c "ECDH curve: secp521r1" \
				3188	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3189	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3190	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3191
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3192	requires_gnutls_tls1_3
				3193	requires_gnutls_next_no_ticket
				3194	requires_gnutls_next_disable_tls13_compat
				3195	requires_config_enabled MBEDTLS_DEBUG_C
				3196	requires_config_enabled MBEDTLS_SSL_CLI_C
				3197	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3198	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3199	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3200	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
				3201	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-SECP521R1:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3202	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=secp521r1 sig_algs=rsa_pss_rsae_sha256" \
				3203	0 \
				3204	-c "HTTP/1.0 200 OK" \
				3205	-c "ECDH curve: secp521r1" \
				3206	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3207	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3208	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3209
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3210	requires_openssl_tls1_3
				3211	requires_config_enabled MBEDTLS_DEBUG_C
				3212	requires_config_enabled MBEDTLS_SSL_CLI_C
				3213	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3214	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3215	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3216	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3217	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				3218	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				3219	0 \
				3220	-c "HTTP/1.0 200 ok" \
				3221	-c "ECDH curve: x25519" \
				3222	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3223	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3224	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3225
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3226	requires_gnutls_tls1_3
				3227	requires_gnutls_next_no_ticket
				3228	requires_gnutls_next_disable_tls13_compat
				3229	requires_config_enabled MBEDTLS_DEBUG_C
				3230	requires_config_enabled MBEDTLS_SSL_CLI_C
				3231	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3232	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3233	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3234	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
				3235	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-X25519:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3236	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x25519 sig_algs=rsa_pss_rsae_sha256" \
				3237	0 \
				3238	-c "HTTP/1.0 200 OK" \
				3239	-c "ECDH curve: x25519" \
				3240	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3241	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3242	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3243
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3244	requires_openssl_tls1_3
				3245	requires_config_enabled MBEDTLS_DEBUG_C
				3246	requires_config_enabled MBEDTLS_SSL_CLI_C
				3247	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3248	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3249	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3250	run_test "TLS 1.3 m->O: TLS_AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3251	"$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -accept $SRV_PORT -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
				3252	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				3253	0 \
				3254	-c "HTTP/1.0 200 ok" \
				3255	-c "ECDH curve: x448" \
				3256	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3257	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3258	-c "Verifying peer X.509 certificate... ok"
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3259
Jerry Yu	31018ad	2021-11-26 20:36:17 +0800	[diff] [blame]	3260	requires_gnutls_tls1_3
				3261	requires_gnutls_next_no_ticket
				3262	requires_gnutls_next_disable_tls13_compat
				3263	requires_config_enabled MBEDTLS_DEBUG_C
				3264	requires_config_enabled MBEDTLS_SSL_CLI_C
				3265	requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3_EXPERIMENTAL
				3266	requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
				3267	requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Jerry Yu	dda036d	2021-11-30 11:19:41 +0800	[diff] [blame^]	3268	run_test "TLS 1.3 m->G: TLS_AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
				3269	"$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AEAD:+AES-128-CCM-8:+GROUP-X448:+SHA256:+SIGN-RSA-PSS-RSAE-SHA256:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Jerry Yu	cdcb683	2021-11-29 16:50:13 +0800	[diff] [blame]	3270	"$P_CLI server_addr=127.0.0.1 server_port=$SRV_PORT debug_level=4 force_version=tls1_3 ca_file=data_files/test-ca_cat12.crt force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 curves=x448 sig_algs=rsa_pss_rsae_sha256" \
				3271	0 \
				3272	-c "HTTP/1.0 200 OK" \
				3273	-c "ECDH curve: x448" \
				3274	-c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
				3275	-c "Certificate Verify: Signature algorithm ( 0804 )" \
				3276	-c "Verifying peer X.509 certificate... ok"