blob: dc0b3245f841ce97cfc0804e93ead1821b1fdd3e [file] [log] [blame]
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001#!/bin/sh
2
Simon Butcher58eddef2016-05-19 23:43:11 +01003# ssl-opt.sh
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01004#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Dave Rodgman16799db2023-11-02 19:47:20 +00006# SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Bence Szépkútic7da1fe2020-05-26 01:54:15 +02007#
Simon Butcher58eddef2016-05-19 23:43:11 +01008# Purpose
9#
10# Executes tests to prove various TLS/SSL options and extensions.
11#
12# The goal is not to cover every ciphersuite/version, but instead to cover
13# specific options (max fragment length, truncated hmac, etc) or procedures
14# (session resumption from cache or ticket, renego, etc).
15#
16# The tests assume a build with default options, with exceptions expressed
17# with a dependency. The tests focus on functionality and do not consider
18# performance.
19#
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010020
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010021set -u
22
Jaeden Amero6e70eb22019-07-03 13:51:04 +010023# Limit the size of each log to 10 GiB, in case of failures with this script
24# where it may output seemingly unlimited length error logs.
25ulimit -f 20971520
26
Gilles Peskine560280b2019-09-16 15:17:38 +020027ORIGINAL_PWD=$PWD
28if ! cd "$(dirname "$0")"; then
29 exit 125
Angus Grattonc4dd0732018-04-11 16:28:39 +100030fi
31
David Horstmann184c4f02024-07-01 17:01:28 +010032DATA_FILES_PATH=../framework/data_files
33
Antonin Décimo36e89b52019-01-23 15:24:37 +010034# default values, can be overridden by the environment
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +010035: ${P_SRV:=../programs/ssl/ssl_server2}
36: ${P_CLI:=../programs/ssl/ssl_client2}
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020037: ${P_PXY:=../programs/test/udp_proxy}
Jerry Yud04fd352021-12-06 16:52:57 +080038: ${P_QUERY:=../programs/test/query_compile_time_config}
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +010039: ${OPENSSL:=openssl}
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020040: ${GNUTLS_CLI:=gnutls-cli}
41: ${GNUTLS_SERV:=gnutls-serv}
Gilles Peskined50177f2017-05-16 17:53:03 +020042: ${PERL:=perl}
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010043
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +010044# The OPENSSL variable used to be OPENSSL_CMD for historical reasons.
45# To help the migration, error out if the old variable is set,
46# but only if it has a different value than the new one.
47if [ "${OPENSSL_CMD+set}" = set ]; then
48 # the variable is set, we can now check its value
49 if [ "$OPENSSL_CMD" != "$OPENSSL" ]; then
50 echo "Please use OPENSSL instead of OPENSSL_CMD." >&2
51 exit 125
52 fi
53fi
54
Gilles Peskine560280b2019-09-16 15:17:38 +020055guess_config_name() {
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +020056 if git diff --quiet ../include/mbedtls/mbedtls_config.h 2>/dev/null; then
Gilles Peskine560280b2019-09-16 15:17:38 +020057 echo "default"
58 else
59 echo "unknown"
60 fi
61}
62: ${MBEDTLS_TEST_OUTCOME_FILE=}
63: ${MBEDTLS_TEST_CONFIGURATION:="$(guess_config_name)"}
64: ${MBEDTLS_TEST_PLATFORM:="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
David Horstmann184c4f02024-07-01 17:01:28 +010065: ${EARLY_DATA_INPUT:="$DATA_FILES_PATH/tls13_early_data.txt"}
Gilles Peskine560280b2019-09-16 15:17:38 +020066
David Horstmann184c4f02024-07-01 17:01:28 +010067O_SRV="$OPENSSL s_server -www -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key"
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +010068O_CLI="echo 'GET / HTTP/1.0' | $OPENSSL s_client"
David Horstmann184c4f02024-07-01 17:01:28 +010069G_SRV="$GNUTLS_SERV --x509certfile $DATA_FILES_PATH/server5.crt --x509keyfile $DATA_FILES_PATH/server5.key"
70G_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_CLI --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt"
Gilles Peskined50177f2017-05-16 17:53:03 +020071TCP_CLIENT="$PERL scripts/tcp_client.pl"
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010072
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020073# alternative versions of OpenSSL and GnuTLS (no default path)
74
Gilles Peskinedd782f42024-04-29 17:46:24 +020075# If $OPENSSL is at least 1.1.1, use it as OPENSSL_NEXT as well.
76if [ -z "${OPENSSL_NEXT:-}" ]; then
77 case $($OPENSSL version) in
78 OpenSSL\ 1.1.[1-9]*) OPENSSL_NEXT=$OPENSSL;;
79 OpenSSL\ [3-9]*) OPENSSL_NEXT=$OPENSSL;;
80 esac
81fi
82
83# If $GNUTLS_CLI is at least 3.7, use it as GNUTLS_NEXT_CLI as well.
84if [ -z "${GNUTLS_NEXT_CLI:-}" ]; then
85 case $($GNUTLS_CLI --version) in
86 gnutls-cli\ 3.[1-9][0-9]*) GNUTLS_NEXT_CLI=$GNUTLS_CLI;;
87 gnutls-cli\ 3.[7-9].*) GNUTLS_NEXT_CLI=$GNUTLS_CLI;;
88 gnutls-cli\ [4-9]*) GNUTLS_NEXT_CLI=$GNUTLS_CLI;;
89 esac
90fi
91
92# If $GNUTLS_SERV is at least 3.7, use it as GNUTLS_NEXT_SERV as well.
93if [ -z "${GNUTLS_NEXT_SERV:-}" ]; then
94 case $($GNUTLS_SERV --version) in
95 gnutls-cli\ 3.[1-9][0-9]*) GNUTLS_NEXT_SERV=$GNUTLS_SERV;;
96 gnutls-cli\ 3.[7-9].*) GNUTLS_NEXT_SERV=$GNUTLS_SERV;;
97 gnutls-cli\ [4-9]*) GNUTLS_NEXT_SERV=$GNUTLS_SERV;;
98 esac
99fi
100
Jerry Yu04029792021-08-10 16:45:37 +0800101if [ -n "${OPENSSL_NEXT:-}" ]; then
David Horstmann184c4f02024-07-01 17:01:28 +0100102 O_NEXT_SRV="$OPENSSL_NEXT s_server -www -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key"
103 O_NEXT_SRV_EARLY_DATA="$OPENSSL_NEXT s_server -early_data -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key"
Jerry Yu305bfc32021-11-24 16:04:47 +0800104 O_NEXT_SRV_NO_CERT="$OPENSSL_NEXT s_server -www "
David Horstmann184c4f02024-07-01 17:01:28 +0100105 O_NEXT_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_NEXT s_client -CAfile $DATA_FILES_PATH/test-ca_cat12.crt"
XiaokangQiand5d5b602022-05-23 09:16:20 +0000106 O_NEXT_CLI_NO_CERT="echo 'GET / HTTP/1.0' | $OPENSSL_NEXT s_client"
Jerry Yu04029792021-08-10 16:45:37 +0800107else
108 O_NEXT_SRV=false
Jerry Yu305bfc32021-11-24 16:04:47 +0800109 O_NEXT_SRV_NO_CERT=false
Xiaokang Qianb0c32d82022-11-02 10:51:13 +0000110 O_NEXT_SRV_EARLY_DATA=false
XiaokangQianb1847a22022-06-08 07:49:31 +0000111 O_NEXT_CLI_NO_CERT=false
Jerry Yu04029792021-08-10 16:45:37 +0800112 O_NEXT_CLI=false
113fi
114
Hanno Becker58e9dc32018-08-17 15:53:21 +0100115if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
David Horstmann184c4f02024-07-01 17:01:28 +0100116 G_NEXT_SRV="$GNUTLS_NEXT_SERV --x509certfile $DATA_FILES_PATH/server5.crt --x509keyfile $DATA_FILES_PATH/server5.key"
Jerry Yu305bfc32021-11-24 16:04:47 +0800117 G_NEXT_SRV_NO_CERT="$GNUTLS_NEXT_SERV"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200118else
119 G_NEXT_SRV=false
Jerry Yu305bfc32021-11-24 16:04:47 +0800120 G_NEXT_SRV_NO_CERT=false
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200121fi
122
Hanno Becker58e9dc32018-08-17 15:53:21 +0100123if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
David Horstmann184c4f02024-07-01 17:01:28 +0100124 G_NEXT_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_NEXT_CLI --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt"
XiaokangQiand5d5b602022-05-23 09:16:20 +0000125 G_NEXT_CLI_NO_CERT="echo 'GET / HTTP/1.0' | $GNUTLS_NEXT_CLI"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200126else
127 G_NEXT_CLI=false
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000128 G_NEXT_CLI_NO_CERT=false
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200129fi
130
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100131TESTS=0
132FAILS=0
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200133SKIPS=0
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100134
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200135CONFIG_H='../include/mbedtls/mbedtls_config.h'
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +0200136
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100137MEMCHECK=0
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100138FILTER='.*'
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200139EXCLUDE='^$'
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100140
Paul Bakkere20310a2016-05-10 11:18:17 +0100141SHOW_TEST_NUMBER=0
Tomás González24552ff2023-08-17 15:10:03 +0100142LIST_TESTS=0
Paul Bakkerb7584a52016-05-10 10:50:43 +0100143RUN_TEST_NUMBER=''
Jerry Yu50d07bd2023-11-06 10:49:01 +0800144RUN_TEST_SUITE=''
Paul Bakkerb7584a52016-05-10 10:50:43 +0100145
Gilles Peskine39c52072024-05-17 11:55:15 +0200146MIN_TESTS=1
Paul Bakkeracaac852016-05-10 11:47:13 +0100147PRESERVE_LOGS=0
148
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200149# Pick a "unique" server port in the range 10000-19999, and a proxy
150# port which is this plus 10000. Each port number may be independently
151# overridden by a command line option.
152SRV_PORT=$(($$ % 10000 + 10000))
153PXY_PORT=$((SRV_PORT + 10000))
154
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100155print_usage() {
156 echo "Usage: $0 [options]"
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100157 printf " -h|--help\tPrint this help.\n"
158 printf " -m|--memcheck\tCheck memory leaks and errors.\n"
Gilles Peskine9fa4ed62020-08-26 22:35:46 +0200159 printf " -f|--filter\tOnly matching tests are executed (substring or BRE)\n"
160 printf " -e|--exclude\tMatching tests are excluded (substring or BRE)\n"
Paul Bakkerb7584a52016-05-10 10:50:43 +0100161 printf " -n|--number\tExecute only numbered test (comma-separated, e.g. '245,256')\n"
Paul Bakkere20310a2016-05-10 11:18:17 +0100162 printf " -s|--show-numbers\tShow test numbers in front of test names\n"
Paul Bakkeracaac852016-05-10 11:47:13 +0100163 printf " -p|--preserve-logs\tPreserve logs of successful tests as well\n"
Tomás González12787c92023-09-04 10:26:00 +0100164 printf " --list-test-cases\tList all potential test cases (No Execution)\n"
Gilles Peskine39c52072024-05-17 11:55:15 +0200165 printf " --min \tMinimum number of non-skipped tests (default 1)\n"
Gilles Peskine560280b2019-09-16 15:17:38 +0200166 printf " --outcome-file\tFile where test outcomes are written\n"
167 printf " \t(default: \$MBEDTLS_TEST_OUTCOME_FILE, none if empty)\n"
168 printf " --port \tTCP/UDP port (default: randomish 1xxxx)\n"
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200169 printf " --proxy-port\tTCP/UDP proxy port (default: randomish 2xxxx)\n"
Gilles Peskine560280b2019-09-16 15:17:38 +0200170 printf " --seed \tInteger seed value to use for this test run\n"
Jerry Yu50d07bd2023-11-06 10:49:01 +0800171 printf " --test-suite\tOnly matching test suites are executed\n"
172 printf " \t(comma-separated, e.g. 'ssl-opt,tls13-compat')\n\n"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100173}
174
175get_options() {
176 while [ $# -gt 0 ]; do
177 case "$1" in
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100178 -f|--filter)
179 shift; FILTER=$1
180 ;;
181 -e|--exclude)
182 shift; EXCLUDE=$1
183 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100184 -m|--memcheck)
185 MEMCHECK=1
186 ;;
Paul Bakkerb7584a52016-05-10 10:50:43 +0100187 -n|--number)
188 shift; RUN_TEST_NUMBER=$1
189 ;;
Paul Bakkere20310a2016-05-10 11:18:17 +0100190 -s|--show-numbers)
191 SHOW_TEST_NUMBER=1
192 ;;
Tomás González4a86da22023-09-01 17:41:16 +0100193 -l|--list-test-cases)
Tomás González24552ff2023-08-17 15:10:03 +0100194 LIST_TESTS=1
195 ;;
Paul Bakkeracaac852016-05-10 11:47:13 +0100196 -p|--preserve-logs)
197 PRESERVE_LOGS=1
198 ;;
Gilles Peskine39c52072024-05-17 11:55:15 +0200199 --min)
200 shift; MIN_TESTS=$1
201 ;;
Yanray Wang5b33f642023-02-28 11:56:59 +0800202 --outcome-file)
203 shift; MBEDTLS_TEST_OUTCOME_FILE=$1
204 ;;
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200205 --port)
206 shift; SRV_PORT=$1
207 ;;
208 --proxy-port)
209 shift; PXY_PORT=$1
210 ;;
Andres AGf04f54d2016-10-10 15:46:20 +0100211 --seed)
212 shift; SEED="$1"
213 ;;
Jerry Yu50d07bd2023-11-06 10:49:01 +0800214 --test-suite)
215 shift; RUN_TEST_SUITE="$1"
216 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100217 -h|--help)
218 print_usage
219 exit 0
220 ;;
221 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200222 echo "Unknown argument: '$1'"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100223 print_usage
224 exit 1
225 ;;
226 esac
227 shift
228 done
229}
230
Tomás González0e8a08a2023-08-23 15:29:57 +0100231get_options "$@"
232
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200233# Read boolean configuration options from mbedtls_config.h for easy and quick
Gilles Peskine64457492020-08-26 21:53:33 +0200234# testing. Skip non-boolean options (with something other than spaces
235# and a comment after "#define SYMBOL"). The variable contains a
236# space-separated list of symbols.
Tomás Gonzálezf162b4f2023-08-23 15:31:12 +0100237if [ "$LIST_TESTS" -eq 0 ];then
238 CONFIGS_ENABLED=" $(echo `$P_QUERY -l` )"
239else
Tomás Gonzálezbe2c66e2023-09-01 10:34:49 +0100240 P_QUERY=":"
Tomás Gonzálezf162b4f2023-08-23 15:31:12 +0100241 CONFIGS_ENABLED=""
242fi
Hanno Becker3b8b40c2018-08-28 10:25:41 +0100243# Skip next test; use this macro to skip tests which are legitimate
244# in theory and expected to be re-introduced at some point, but
245# aren't expected to succeed at the moment due to problems outside
246# our control (such as bugs in other TLS implementations).
247skip_next_test() {
248 SKIP_NEXT="YES"
249}
250
Valerio Settid1f991c2023-02-22 12:54:13 +0100251# Check if the required configuration ($1) is enabled
252is_config_enabled()
253{
254 case $CONFIGS_ENABLED in
255 *" $1"[\ =]*) return 0;;
256 *) return 1;;
257 esac
258}
259
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200260# skip next test if the flag is not enabled in mbedtls_config.h
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100261requires_config_enabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200262 case $CONFIGS_ENABLED in
Jerry Yu2e8b0012021-12-10 20:29:02 +0800263 *" $1"[\ =]*) :;;
Gilles Peskine64457492020-08-26 21:53:33 +0200264 *) SKIP_NEXT="YES";;
265 esac
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100266}
267
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200268# skip next test if the flag is enabled in mbedtls_config.h
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200269requires_config_disabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200270 case $CONFIGS_ENABLED in
Jerry Yu2e8b0012021-12-10 20:29:02 +0800271 *" $1"[\ =]*) SKIP_NEXT="YES";;
Gilles Peskine64457492020-08-26 21:53:33 +0200272 esac
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200273}
274
Jerry Yu2fcb0562022-07-27 17:30:49 +0800275requires_all_configs_enabled() {
Gilles Peskine94041692024-09-06 14:43:17 +0200276 for x in "$@"; do
277 if ! is_config_enabled "$x"; then
278 SKIP_NEXT="YES"
279 return
280 fi
281 done
Jerry Yu2fcb0562022-07-27 17:30:49 +0800282}
283
284requires_all_configs_disabled() {
Gilles Peskine94041692024-09-06 14:43:17 +0200285 for x in "$@"; do
286 if is_config_enabled "$x"; then
287 SKIP_NEXT="YES"
288 return
289 fi
290 done
Jerry Yu2fcb0562022-07-27 17:30:49 +0800291}
292
293requires_any_configs_enabled() {
Gilles Peskine94041692024-09-06 14:43:17 +0200294 for x in "$@"; do
295 if is_config_enabled "$x"; then
296 return
297 fi
298 done
299 SKIP_NEXT="YES"
Jerry Yu2fcb0562022-07-27 17:30:49 +0800300}
301
302requires_any_configs_disabled() {
Gilles Peskine94041692024-09-06 14:43:17 +0200303 for x in "$@"; do
304 if ! is_config_enabled "$x"; then
305 return
306 fi
307 done
308 SKIP_NEXT="YES"
Jerry Yu2fcb0562022-07-27 17:30:49 +0800309}
310
Ronald Cron454eb912022-10-21 08:56:04 +0200311TLS1_2_KEY_EXCHANGES_WITH_CERT="MBEDTLS_KEY_EXCHANGE_RSA_ENABLED \
Ronald Cronbc5adf42022-10-04 11:06:14 +0200312 MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED \
313 MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
314 MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED \
315 MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \
316 MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED \
317 MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED"
318
Valerio Settid1f991c2023-02-22 12:54:13 +0100319TLS1_2_KEY_EXCHANGES_WITH_ECDSA_CERT="MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED \
320 MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED"
321
Valerio Setti6ba247c2023-03-14 17:13:43 +0100322TLS1_2_KEY_EXCHANGES_WITH_CERT_WO_ECDH="MBEDTLS_KEY_EXCHANGE_RSA_ENABLED \
323 MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED \
324 MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
325 MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED \
326 MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED"
327
Gilles Peskine9d3b2072024-09-06 15:38:47 +0200328requires_certificate_authentication () {
Gilles Peskinee3eab322024-09-10 12:24:23 +0200329 if is_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron928cbd32022-10-04 16:14:26 +0200330 then
Gilles Peskinee3eab322024-09-10 12:24:23 +0200331 # TLS 1.3 is negotiated by default, so check whether it supports
332 # certificate-based authentication.
333 requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
334 else # Only TLS 1.2 is enabled.
Valerio Settie7f896d2023-03-13 13:55:28 +0100335 requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron928cbd32022-10-04 16:14:26 +0200336 fi
Ronald Cronbc5adf42022-10-04 11:06:14 +0200337}
338
Hanno Becker7c48dd12018-08-28 16:09:22 +0100339get_config_value_or_default() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100340 # This function uses the query_config command line option to query the
341 # required Mbed TLS compile time configuration from the ssl_server2
342 # program. The command will always return a success value if the
343 # configuration is defined and the value will be printed to stdout.
344 #
345 # Note that if the configuration is not defined or is defined to nothing,
346 # the output of this function will be an empty string.
Tomás González06956a12023-08-23 15:46:20 +0100347 if [ "$LIST_TESTS" -eq 0 ];then
348 ${P_SRV} "query_config=${1}"
349 else
350 echo "1"
351 fi
352
Hanno Becker7c48dd12018-08-28 16:09:22 +0100353}
354
355requires_config_value_at_least() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100356 VAL="$( get_config_value_or_default "$1" )"
357 if [ -z "$VAL" ]; then
358 # Should never happen
359 echo "Mbed TLS configuration $1 is not defined"
360 exit 1
361 elif [ "$VAL" -lt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100362 SKIP_NEXT="YES"
363 fi
364}
365
366requires_config_value_at_most() {
Hanno Becker7c48dd12018-08-28 16:09:22 +0100367 VAL=$( get_config_value_or_default "$1" )
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100368 if [ -z "$VAL" ]; then
369 # Should never happen
370 echo "Mbed TLS configuration $1 is not defined"
371 exit 1
372 elif [ "$VAL" -gt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100373 SKIP_NEXT="YES"
374 fi
375}
376
Yuto Takano6f657432021-07-02 13:10:41 +0100377requires_config_value_equals() {
378 VAL=$( get_config_value_or_default "$1" )
379 if [ -z "$VAL" ]; then
380 # Should never happen
381 echo "Mbed TLS configuration $1 is not defined"
382 exit 1
383 elif [ "$VAL" -ne "$2" ]; then
384 SKIP_NEXT="YES"
385 fi
386}
387
Gilles Peskinec9126732022-04-08 19:33:07 +0200388# Require Mbed TLS to support the given protocol version.
389#
390# Inputs:
391# * $1: protocol version in mbedtls syntax (argument to force_version=)
392requires_protocol_version() {
393 # Support for DTLS is detected separately in detect_dtls().
394 case "$1" in
395 tls12|dtls12) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2;;
396 tls13|dtls13) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3;;
397 *) echo "Unknown required protocol version: $1"; exit 1;;
398 esac
399}
400
Gilles Peskine64457492020-08-26 21:53:33 +0200401# Space-separated list of ciphersuites supported by this build of
402# Mbed TLS.
Ronald Cron5b73de82023-11-28 15:49:25 +0100403P_CIPHERSUITES=""
404if [ "$LIST_TESTS" -eq 0 ]; then
405 P_CIPHERSUITES=" $($P_CLI help_ciphersuites 2>/dev/null |
406 grep 'TLS-\|TLS1-3' |
407 tr -s ' \n' ' ')"
408
409 if [ -z "${P_CIPHERSUITES# }" ]; then
410 echo >&2 "$0: fatal error: no cipher suites found!"
411 exit 125
412 fi
413fi
414
Hanno Becker9d76d562018-11-16 17:27:29 +0000415requires_ciphersuite_enabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200416 case $P_CIPHERSUITES in
417 *" $1 "*) :;;
418 *) SKIP_NEXT="YES";;
419 esac
Hanno Becker9d76d562018-11-16 17:27:29 +0000420}
421
Valerio Setti73d05312023-11-09 16:53:59 +0100422requires_cipher_enabled() {
423 KEY_TYPE=$1
424 MODE=${2:-}
Gilles Peskinefb31ebd2024-10-24 20:14:16 +0200425 case "$KEY_TYPE" in
426 CHACHA20)
427 requires_config_enabled PSA_WANT_ALG_CHACHA20_POLY1305
428 requires_config_enabled PSA_WANT_KEY_TYPE_CHACHA20
429 ;;
430 *)
431 requires_config_enabled PSA_WANT_ALG_${MODE}
432 requires_config_enabled PSA_WANT_KEY_TYPE_${KEY_TYPE}
433 ;;
434 esac
Valerio Setti73d05312023-11-09 16:53:59 +0100435}
436
Valerio Setti1af76d12023-02-23 15:55:10 +0100437# Automatically detect required features based on command line parameters.
438# Parameters are:
439# - $1 = command line (call to a TLS client or server program)
440# - $2 = client/server
441# - $3 = TLS version (TLS12 or TLS13)
Valerio Setti6ba247c2023-03-14 17:13:43 +0100442# - $4 = Use an external tool without ECDH support
443# - $5 = run test options
Gilles Peskineb898b3d2022-04-08 19:26:26 +0200444detect_required_features() {
Valerio Setti6ba247c2023-03-14 17:13:43 +0100445 CMD_LINE=$1
446 ROLE=$2
447 TLS_VERSION=$3
448 EXT_WO_ECDH=$4
449 TEST_OPTIONS=${5:-}
450
451 case "$CMD_LINE" in
Gilles Peskinec9126732022-04-08 19:33:07 +0200452 *\ force_version=*)
Valerio Setti6ba247c2023-03-14 17:13:43 +0100453 tmp="${CMD_LINE##*\ force_version=}"
Gilles Peskinec9126732022-04-08 19:33:07 +0200454 tmp="${tmp%%[!-0-9A-Z_a-z]*}"
455 requires_protocol_version "$tmp";;
Gilles Peskine0d721652020-06-26 23:35:53 +0200456 esac
Gilles Peskine0d721652020-06-26 23:35:53 +0200457
Valerio Setti6ba247c2023-03-14 17:13:43 +0100458 case "$CMD_LINE" in
Gilles Peskineb898b3d2022-04-08 19:26:26 +0200459 *\ force_ciphersuite=*)
Valerio Setti6ba247c2023-03-14 17:13:43 +0100460 tmp="${CMD_LINE##*\ force_ciphersuite=}"
Gilles Peskineb898b3d2022-04-08 19:26:26 +0200461 tmp="${tmp%%[!-0-9A-Z_a-z]*}"
462 requires_ciphersuite_enabled "$tmp";;
Gilles Peskine0d721652020-06-26 23:35:53 +0200463 esac
Gilles Peskine0d721652020-06-26 23:35:53 +0200464
Valerio Setti6ba247c2023-03-14 17:13:43 +0100465 case " $CMD_LINE " in
Gilles Peskine740b7342022-04-08 19:29:27 +0200466 *[-_\ =]tickets=[^0]*)
467 requires_config_enabled MBEDTLS_SSL_TICKET_C;;
468 esac
Valerio Setti6ba247c2023-03-14 17:13:43 +0100469 case " $CMD_LINE " in
Gilles Peskine740b7342022-04-08 19:29:27 +0200470 *[-_\ =]alpn=*)
471 requires_config_enabled MBEDTLS_SSL_ALPN;;
472 esac
473
Gilles Peskineae3dc172024-09-06 15:34:59 +0200474 case " $CMD_LINE " in
475 *\ auth_mode=*|*[-_\ =]crt[_=]*)
Gilles Peskine6e85e352024-09-10 12:06:33 +0200476 # The test case involves certificates (crt), or a relevant
477 # aspect of it is the (certificate-based) authentication mode.
Gilles Peskineae3dc172024-09-06 15:34:59 +0200478 requires_certificate_authentication;;
479 esac
480
Gilles Peskine7985d452024-09-04 16:06:10 +0200481 case " $CMD_LINE " in
Gilles Peskineae710c82024-09-04 16:07:56 +0200482 *"programs/ssl/dtls_client "*|\
Gilles Peskine7985d452024-09-04 16:06:10 +0200483 *"programs/ssl/ssl_client1 "*)
484 requires_config_enabled MBEDTLS_CTR_DRBG_C
485 requires_config_enabled MBEDTLS_ENTROPY_C
486 requires_config_enabled MBEDTLS_PEM_PARSE_C
487 requires_config_enabled MBEDTLS_SSL_CLI_C
488 requires_certificate_authentication
489 ;;
Gilles Peskine6b4d6932024-09-04 16:51:50 +0200490 *"programs/ssl/dtls_server "*|\
Gilles Peskinec83e56c2024-09-04 17:47:14 +0200491 *"programs/ssl/ssl_fork_server "*|\
Gilles Peskine3abca952024-09-04 16:31:06 +0200492 *"programs/ssl/ssl_pthread_server "*|\
Gilles Peskinea21e8932024-09-04 16:30:32 +0200493 *"programs/ssl/ssl_server "*)
494 requires_config_enabled MBEDTLS_CTR_DRBG_C
495 requires_config_enabled MBEDTLS_ENTROPY_C
496 requires_config_enabled MBEDTLS_PEM_PARSE_C
497 requires_config_enabled MBEDTLS_SSL_SRV_C
498 requires_certificate_authentication
Gilles Peskinef9ad8302024-09-13 23:08:48 +0200499 # The actual minimum depends on the configuration since it's
500 # mostly about the certificate size.
501 # In config-suite-b.h, for the test certificates (server5.crt),
502 # 1024 is not enough.
503 requires_config_value_at_least MBEDTLS_SSL_OUT_CONTENT_LEN 2000
Gilles Peskinea21e8932024-09-04 16:30:32 +0200504 ;;
Gilles Peskine7985d452024-09-04 16:06:10 +0200505 esac
506
Gilles Peskine3abca952024-09-04 16:31:06 +0200507 case " $CMD_LINE " in
508 *"programs/ssl/ssl_pthread_server "*)
509 requires_config_enabled MBEDTLS_THREADING_PTHREAD;;
510 esac
511
Valerio Setti6ba247c2023-03-14 17:13:43 +0100512 case "$CMD_LINE" in
Gilles Peskine4f098642024-09-06 15:35:58 +0200513 *[-_\ =]psk*|*[-_\ =]PSK*) :;; # No certificate requirement with PSK
Gilles Peskinee8553172024-04-26 21:28:49 +0200514 */server5*|\
515 */server7*|\
516 */dir-maxpath*)
Gilles Peskineae3dc172024-09-06 15:34:59 +0200517 requires_certificate_authentication
Valerio Setti6ba247c2023-03-14 17:13:43 +0100518 if [ "$TLS_VERSION" = "TLS13" ]; then
Valerio Setti1af76d12023-02-23 15:55:10 +0100519 # In case of TLS13 the support for ECDSA is enough
520 requires_pk_alg "ECDSA"
521 else
522 # For TLS12 requirements are different between server and client
Valerio Setti6ba247c2023-03-14 17:13:43 +0100523 if [ "$ROLE" = "server" ]; then
Valerio Setti194e2bd2023-03-02 17:18:10 +0100524 # If the server uses "server5*" certificates, then an ECDSA based
Valerio Setti6ba247c2023-03-14 17:13:43 +0100525 # key exchange is required. However gnutls also does not
526 # support ECDH, so this limit the choice to ECDHE-ECDSA
527 if [ "$EXT_WO_ECDH" = "yes" ]; then
528 requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
529 else
530 requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_ECDSA_CERT
531 fi
532 elif [ "$ROLE" = "client" ]; then
533 # On the client side it is enough to have any certificate
534 # based authentication together with support for ECDSA.
535 # Of course the GnuTLS limitation mentioned above applies
536 # also here.
537 if [ "$EXT_WO_ECDH" = "yes" ]; then
538 requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT_WO_ECDH
539 else
540 requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
541 fi
Valerio Setti1af76d12023-02-23 15:55:10 +0100542 requires_pk_alg "ECDSA"
543 fi
544 fi
545 ;;
546 esac
547
Valerio Setti4f577f32023-07-31 18:58:25 +0200548 case "$CMD_LINE" in
Gilles Peskine4f098642024-09-06 15:35:58 +0200549 *[-_\ =]psk*|*[-_\ =]PSK*) :;; # No certificate requirement with PSK
Gilles Peskined00b93b2024-04-29 16:03:02 +0200550 */server1*|\
Gilles Peskinee8553172024-04-26 21:28:49 +0200551 */server2*|\
552 */server7*)
Gilles Peskineae3dc172024-09-06 15:34:59 +0200553 requires_certificate_authentication
Gilles Peskined00b93b2024-04-29 16:03:02 +0200554 # Certificates with an RSA key. The algorithm requirement is
555 # some subset of {PKCS#1v1.5 encryption, PKCS#1v1.5 signature,
556 # PSS signature}. We can't easily tell which subset works, and
557 # we aren't currently running ssl-opt.sh in configurations
558 # where partial RSA support is a problem, so generically, we
559 # just require RSA and it works out for our tests so far.
Valerio Setti4f577f32023-07-31 18:58:25 +0200560 requires_config_enabled "MBEDTLS_RSA_C"
561 esac
562
Gilles Peskineb898b3d2022-04-08 19:26:26 +0200563 unset tmp
Gilles Peskine0d721652020-06-26 23:35:53 +0200564}
565
Gilles Peskine6e86e542022-02-25 19:52:52 +0100566adapt_cmd_for_psk () {
567 case "$2" in
Gilles Peskine77c13e62024-04-29 16:09:52 +0200568 *openssl*s_server*) s='-psk 73776f726466697368 -nocert';;
569 *openssl*) s='-psk 73776f726466697368';;
Gilles Peskine6f9952a2024-09-06 15:27:57 +0200570 *gnutls-cli*) s='--pskusername=Client_identity --pskkey=73776f726466697368';;
571 *gnutls-serv*) s='--pskpasswd=../framework/data_files/simplepass.psk';;
Gilles Peskine77c13e62024-04-29 16:09:52 +0200572 *) s='psk=73776f726466697368';;
Gilles Peskine6e86e542022-02-25 19:52:52 +0100573 esac
574 eval $1='"$2 $s"'
575 unset s
576}
577
578# maybe_adapt_for_psk [RUN_TEST_OPTION...]
579# If running in a PSK-only build, maybe adapt the test to use a pre-shared key.
580#
581# If not running in a PSK-only build, do nothing.
582# If the test looks like it doesn't use a pre-shared key but can run with a
583# pre-shared key, pass a pre-shared key. If the test looks like it can't run
584# with a pre-shared key, skip it. If the test looks like it's already using
585# a pre-shared key, do nothing.
586#
Gilles Peskine59601d72022-04-05 22:00:17 +0200587# This code does not consider builds with ECDHE-PSK or RSA-PSK.
Gilles Peskine6e86e542022-02-25 19:52:52 +0100588#
589# Inputs:
590# * $CLI_CMD, $SRV_CMD, $PXY_CMD: client/server/proxy commands.
591# * $PSK_ONLY: YES if running in a PSK-only build (no asymmetric key exchanges).
592# * "$@": options passed to run_test.
593#
594# Outputs:
595# * $CLI_CMD, $SRV_CMD: may be modified to add PSK-relevant arguments.
596# * $SKIP_NEXT: set to YES if the test can't run with PSK.
597maybe_adapt_for_psk() {
598 if [ "$PSK_ONLY" != "YES" ]; then
599 return
600 fi
601 if [ "$SKIP_NEXT" = "YES" ]; then
602 return
603 fi
604 case "$CLI_CMD $SRV_CMD" in
605 *[-_\ =]psk*|*[-_\ =]PSK*)
606 return;;
607 *force_ciphersuite*)
608 # The test case forces a non-PSK cipher suite. In some cases, a
609 # PSK cipher suite could be substituted, but we're not ready for
610 # that yet.
611 SKIP_NEXT="YES"
612 return;;
613 *\ auth_mode=*|*[-_\ =]crt[_=]*)
614 # The test case involves certificates. PSK won't do.
615 SKIP_NEXT="YES"
616 return;;
617 esac
618 adapt_cmd_for_psk CLI_CMD "$CLI_CMD"
619 adapt_cmd_for_psk SRV_CMD "$SRV_CMD"
620}
621
Gilles Peskinedb264062024-09-06 19:08:41 +0200622# PSK_PRESENT="YES" if at least one protocol versions supports at least
623# one PSK key exchange mode.
Gilles Peskine24b43032024-09-06 15:38:20 +0200624PSK_PRESENT="NO"
Gilles Peskinedb264062024-09-06 19:08:41 +0200625# PSK_ONLY="YES" if all the available key exchange modes are PSK-based
626# (pure-PSK or PSK-ephemeral, possibly both).
Gilles Peskine24b43032024-09-06 15:38:20 +0200627PSK_ONLY=""
628for c in $CONFIGS_ENABLED; do
629 case $c in
630 MBEDTLS_KEY_EXCHANGE_PSK_ENABLED) PSK_PRESENT="YES";;
Gilles Peskine2dd43952024-09-09 11:24:17 +0200631 MBEDTLS_KEY_EXCHANGE_*_PSK_ENABLED) PSK_PRESENT="YES";;
Gilles Peskine24b43032024-09-06 15:38:20 +0200632 MBEDTLS_KEY_EXCHANGE_*_ENABLED) PSK_ONLY="NO";;
633 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED) PSK_PRESENT="YES";;
Gilles Peskinedb264062024-09-06 19:08:41 +0200634 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_*_ENABLED) PSK_PRESENT="YES";;
Gilles Peskine24b43032024-09-06 15:38:20 +0200635 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_*_ENABLED) PSK_ONLY="NO";;
636 esac
637done
Gilles Peskine7f453bf2024-09-09 10:57:01 +0200638# At this stage, $PSK_ONLY is empty if we haven't detected a non-PSK
639# key exchange, i.e. if we're in a PSK-only build or a build with no
640# key exchanges at all. We avoid triggering PSK-only adaptation code in
Gilles Peskine6e85e352024-09-10 12:06:33 +0200641# the edge case of no key exchanges.
Gilles Peskine24b43032024-09-06 15:38:20 +0200642: ${PSK_ONLY:=$PSK_PRESENT}
643unset c
Gilles Peskine6e86e542022-02-25 19:52:52 +0100644
Sam Berryd50e8432024-06-19 11:43:03 +0100645HAS_ALG_MD5="NO"
Andrzej Kurek9c061a22022-09-05 10:51:19 -0400646HAS_ALG_SHA_1="NO"
647HAS_ALG_SHA_224="NO"
648HAS_ALG_SHA_256="NO"
649HAS_ALG_SHA_384="NO"
650HAS_ALG_SHA_512="NO"
651
652check_for_hash_alg()
653{
654 CURR_ALG="INVALID";
Gilles Peskinefb31ebd2024-10-24 20:14:16 +0200655 CURR_ALG=PSA_WANT_ALG_${1}
Andrzej Kurek9c061a22022-09-05 10:51:19 -0400656
657 case $CONFIGS_ENABLED in
658 *" $CURR_ALG"[\ =]*)
659 return 0
660 ;;
661 *) :;;
662 esac
663 return 1
664}
665
666populate_enabled_hash_algs()
667{
Sam Berryd50e8432024-06-19 11:43:03 +0100668 for hash_alg in SHA_1 SHA_224 SHA_256 SHA_384 SHA_512 MD5; do
Andrzej Kurek9c061a22022-09-05 10:51:19 -0400669 if check_for_hash_alg "$hash_alg"; then
670 hash_alg_variable=HAS_ALG_${hash_alg}
671 eval ${hash_alg_variable}=YES
672 fi
Valerio Settie7f896d2023-03-13 13:55:28 +0100673 done
Andrzej Kurek9c061a22022-09-05 10:51:19 -0400674}
675
676# skip next test if the given hash alg is not supported
677requires_hash_alg() {
678 HASH_DEFINE="Invalid"
679 HAS_HASH_ALG="NO"
680 case $1 in
Sam Berryd50e8432024-06-19 11:43:03 +0100681 MD5):;;
Andrzej Kurek9c061a22022-09-05 10:51:19 -0400682 SHA_1):;;
683 SHA_224):;;
684 SHA_256):;;
685 SHA_384):;;
686 SHA_512):;;
687 *)
688 echo "Unsupported hash alg - $1"
689 exit 1
690 ;;
691 esac
692
693 HASH_DEFINE=HAS_ALG_${1}
694 eval "HAS_HASH_ALG=\${${HASH_DEFINE}}"
695 if [ "$HAS_HASH_ALG" = "NO" ]
696 then
697 SKIP_NEXT="YES"
698 fi
699}
700
Valerio Settid1f991c2023-02-22 12:54:13 +0100701# Skip next test if the given pk alg is not enabled
702requires_pk_alg() {
703 case $1 in
704 ECDSA)
Gilles Peskinefb31ebd2024-10-24 20:14:16 +0200705 requires_config_enabled PSA_WANT_ALG_ECDSA
Valerio Settid1f991c2023-02-22 12:54:13 +0100706 ;;
707 *)
708 echo "Unknown/unimplemented case $1 in requires_pk_alg"
709 exit 1
710 ;;
711 esac
712}
713
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200714# skip next test if OpenSSL doesn't support FALLBACK_SCSV
715requires_openssl_with_fallback_scsv() {
716 if [ -z "${OPENSSL_HAS_FBSCSV:-}" ]; then
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +0100717 if $OPENSSL s_client -help 2>&1 | grep fallback_scsv >/dev/null
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200718 then
719 OPENSSL_HAS_FBSCSV="YES"
720 else
721 OPENSSL_HAS_FBSCSV="NO"
722 fi
723 fi
724 if [ "$OPENSSL_HAS_FBSCSV" = "NO" ]; then
725 SKIP_NEXT="YES"
726 fi
727}
728
Yuto Takanob0a1c5b2021-07-02 10:10:49 +0100729# skip next test if either IN_CONTENT_LEN or MAX_CONTENT_LEN are below a value
730requires_max_content_len() {
731 requires_config_value_at_least "MBEDTLS_SSL_IN_CONTENT_LEN" $1
732 requires_config_value_at_least "MBEDTLS_SSL_OUT_CONTENT_LEN" $1
733}
734
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200735# skip next test if GnuTLS isn't available
736requires_gnutls() {
737 if [ -z "${GNUTLS_AVAILABLE:-}" ]; then
Manuel Pégourié-Gonnard03db6b02015-06-26 15:45:30 +0200738 if ( which "$GNUTLS_CLI" && which "$GNUTLS_SERV" ) >/dev/null 2>&1; then
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200739 GNUTLS_AVAILABLE="YES"
740 else
741 GNUTLS_AVAILABLE="NO"
742 fi
743 fi
744 if [ "$GNUTLS_AVAILABLE" = "NO" ]; then
745 SKIP_NEXT="YES"
746 fi
747}
748
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200749# skip next test if GnuTLS-next isn't available
750requires_gnutls_next() {
751 if [ -z "${GNUTLS_NEXT_AVAILABLE:-}" ]; then
752 if ( which "${GNUTLS_NEXT_CLI:-}" && which "${GNUTLS_NEXT_SERV:-}" ) >/dev/null 2>&1; then
753 GNUTLS_NEXT_AVAILABLE="YES"
754 else
755 GNUTLS_NEXT_AVAILABLE="NO"
756 fi
757 fi
758 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
759 SKIP_NEXT="YES"
760 fi
761}
762
Jerry Yu04029792021-08-10 16:45:37 +0800763requires_openssl_next() {
764 if [ -z "${OPENSSL_NEXT_AVAILABLE:-}" ]; then
765 if which "${OPENSSL_NEXT:-}" >/dev/null 2>&1; then
766 OPENSSL_NEXT_AVAILABLE="YES"
767 else
768 OPENSSL_NEXT_AVAILABLE="NO"
769 fi
770 fi
771 if [ "$OPENSSL_NEXT_AVAILABLE" = "NO" ]; then
772 SKIP_NEXT="YES"
773 fi
774}
775
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200776# skip next test if openssl version is lower than 3.0
777requires_openssl_3_x() {
778 requires_openssl_next
779 if [ "$OPENSSL_NEXT_AVAILABLE" = "NO" ]; then
780 OPENSSL_3_X_AVAILABLE="NO"
781 fi
782 if [ -z "${OPENSSL_3_X_AVAILABLE:-}" ]; then
Przemek Stekiela53dca12023-06-14 20:53:09 +0200783 if $OPENSSL_NEXT version 2>&1 | grep "OpenSSL 3." >/dev/null
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200784 then
785 OPENSSL_3_X_AVAILABLE="YES"
786 else
787 OPENSSL_3_X_AVAILABLE="NO"
788 fi
789 fi
790 if [ "$OPENSSL_3_X_AVAILABLE" = "NO" ]; then
791 SKIP_NEXT="YES"
792 fi
793}
794
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200795# skip next test if openssl does not support ffdh keys
796requires_openssl_tls1_3_with_ffdh() {
797 requires_openssl_3_x
798}
799
Przemek Stekiel7dda2712023-06-27 14:43:33 +0200800# skip next test if openssl cannot handle ephemeral key exchange
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200801requires_openssl_tls1_3_with_compatible_ephemeral() {
802 requires_openssl_next
803
804 if !(is_config_enabled "PSA_WANT_ALG_ECDH"); then
805 requires_openssl_tls1_3_with_ffdh
806 fi
807}
808
Jerry Yu04029792021-08-10 16:45:37 +0800809# skip next test if tls1_3 is not available
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200810requires_openssl_tls1_3() {
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200811 requires_openssl_next
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200812 if [ "$OPENSSL_NEXT_AVAILABLE" = "NO" ]; then
813 OPENSSL_TLS1_3_AVAILABLE="NO"
814 fi
815 if [ -z "${OPENSSL_TLS1_3_AVAILABLE:-}" ]; then
816 if $OPENSSL_NEXT s_client -help 2>&1 | grep tls1_3 >/dev/null
817 then
818 OPENSSL_TLS1_3_AVAILABLE="YES"
819 else
820 OPENSSL_TLS1_3_AVAILABLE="NO"
821 fi
822 fi
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200823 if [ "$OPENSSL_TLS1_3_AVAILABLE" = "NO" ]; then
824 SKIP_NEXT="YES"
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200825 fi
826}
827
Gilles Peskine7f453bf2024-09-09 10:57:01 +0200828# OpenSSL servers forbid client renegotiation by default since OpenSSL 3.0.
829# Older versions always allow it and have no command-line option.
Gilles Peskine56ee69d2024-09-06 13:52:14 +0200830OPENSSL_S_SERVER_CLIENT_RENEGOTIATION=
831case $($OPENSSL s_server -help 2>&1) in
832 *-client_renegotiation*)
833 OPENSSL_S_SERVER_CLIENT_RENEGOTIATION=-client_renegotiation;;
834esac
835
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200836# skip next test if tls1_3 is not available
Jerry Yu04029792021-08-10 16:45:37 +0800837requires_gnutls_tls1_3() {
838 requires_gnutls_next
839 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
840 GNUTLS_TLS1_3_AVAILABLE="NO"
841 fi
842 if [ -z "${GNUTLS_TLS1_3_AVAILABLE:-}" ]; then
843 if $GNUTLS_NEXT_CLI -l 2>&1 | grep VERS-TLS1.3 >/dev/null
844 then
845 GNUTLS_TLS1_3_AVAILABLE="YES"
846 else
847 GNUTLS_TLS1_3_AVAILABLE="NO"
848 fi
849 fi
850 if [ "$GNUTLS_TLS1_3_AVAILABLE" = "NO" ]; then
851 SKIP_NEXT="YES"
852 fi
853}
854
Jerry Yu75261df2021-09-02 17:40:08 +0800855# Check %NO_TICKETS option
Jerry Yub12d81d2021-08-17 10:56:08 +0800856requires_gnutls_next_no_ticket() {
857 requires_gnutls_next
858 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
859 GNUTLS_NO_TICKETS_AVAILABLE="NO"
860 fi
861 if [ -z "${GNUTLS_NO_TICKETS_AVAILABLE:-}" ]; then
862 if $GNUTLS_NEXT_CLI --priority-list 2>&1 | grep NO_TICKETS >/dev/null
863 then
864 GNUTLS_NO_TICKETS_AVAILABLE="YES"
865 else
866 GNUTLS_NO_TICKETS_AVAILABLE="NO"
867 fi
868 fi
869 if [ "$GNUTLS_NO_TICKETS_AVAILABLE" = "NO" ]; then
870 SKIP_NEXT="YES"
871 fi
872}
873
Jerry Yu75261df2021-09-02 17:40:08 +0800874# Check %DISABLE_TLS13_COMPAT_MODE option
Jerry Yub12d81d2021-08-17 10:56:08 +0800875requires_gnutls_next_disable_tls13_compat() {
876 requires_gnutls_next
877 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
878 GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE="NO"
879 fi
880 if [ -z "${GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE:-}" ]; then
881 if $GNUTLS_NEXT_CLI --priority-list 2>&1 | grep DISABLE_TLS13_COMPAT_MODE >/dev/null
882 then
883 GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE="YES"
884 else
885 GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE="NO"
886 fi
887 fi
888 if [ "$GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE" = "NO" ]; then
889 SKIP_NEXT="YES"
890 fi
891}
892
Jan Bruckneraa31b192023-02-06 12:54:29 +0100893# skip next test if GnuTLS does not support the record size limit extension
894requires_gnutls_record_size_limit() {
895 requires_gnutls_next
896 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
897 GNUTLS_RECORD_SIZE_LIMIT_AVAILABLE="NO"
898 else
899 GNUTLS_RECORD_SIZE_LIMIT_AVAILABLE="YES"
900 fi
901 if [ "$GNUTLS_RECORD_SIZE_LIMIT_AVAILABLE" = "NO" ]; then
902 SKIP_NEXT="YES"
903 fi
904}
905
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200906# skip next test if IPv6 isn't available on this host
907requires_ipv6() {
908 if [ -z "${HAS_IPV6:-}" ]; then
909 $P_SRV server_addr='::1' > $SRV_OUT 2>&1 &
910 SRV_PID=$!
911 sleep 1
912 kill $SRV_PID >/dev/null 2>&1
913 if grep "NET - Binding of the socket failed" $SRV_OUT >/dev/null; then
914 HAS_IPV6="NO"
915 else
916 HAS_IPV6="YES"
917 fi
918 rm -r $SRV_OUT
919 fi
920
921 if [ "$HAS_IPV6" = "NO" ]; then
922 SKIP_NEXT="YES"
923 fi
924}
925
Andrzej Kurekb4593462018-10-11 08:43:30 -0400926# skip next test if it's i686 or uname is not available
927requires_not_i686() {
928 if [ -z "${IS_I686:-}" ]; then
929 IS_I686="YES"
930 if which "uname" >/dev/null 2>&1; then
931 if [ -z "$(uname -a | grep i686)" ]; then
932 IS_I686="NO"
933 fi
934 fi
935 fi
936 if [ "$IS_I686" = "YES" ]; then
937 SKIP_NEXT="YES"
938 fi
939}
940
David Horstmann95d516f2021-05-04 18:36:56 +0100941MAX_CONTENT_LEN=16384
Yuto Takano2be6f1a2021-06-22 07:16:40 +0100942MAX_IN_LEN=$( get_config_value_or_default "MBEDTLS_SSL_IN_CONTENT_LEN" )
943MAX_OUT_LEN=$( get_config_value_or_default "MBEDTLS_SSL_OUT_CONTENT_LEN" )
Tomás González06956a12023-08-23 15:46:20 +0100944if [ "$LIST_TESTS" -eq 0 ];then
945 # Calculate the input & output maximum content lengths set in the config
Angus Grattonc4dd0732018-04-11 16:28:39 +1000946
Tomás González06956a12023-08-23 15:46:20 +0100947 # Calculate the maximum content length that fits both
948 if [ "$MAX_IN_LEN" -lt "$MAX_CONTENT_LEN" ]; then
949 MAX_CONTENT_LEN="$MAX_IN_LEN"
950 fi
951 if [ "$MAX_OUT_LEN" -lt "$MAX_CONTENT_LEN" ]; then
952 MAX_CONTENT_LEN="$MAX_OUT_LEN"
953 fi
Angus Grattonc4dd0732018-04-11 16:28:39 +1000954fi
Angus Grattonc4dd0732018-04-11 16:28:39 +1000955# skip the next test if the SSL output buffer is less than 16KB
956requires_full_size_output_buffer() {
957 if [ "$MAX_OUT_LEN" -ne 16384 ]; then
958 SKIP_NEXT="YES"
959 fi
960}
961
Manuel Pégourié-Gonnard76fe9e42014-09-24 15:17:31 +0200962# skip the next test if valgrind is in use
963not_with_valgrind() {
964 if [ "$MEMCHECK" -gt 0 ]; then
965 SKIP_NEXT="YES"
966 fi
967}
968
Paul Bakker362689d2016-05-13 10:33:25 +0100969# skip the next test if valgrind is NOT in use
970only_with_valgrind() {
971 if [ "$MEMCHECK" -eq 0 ]; then
972 SKIP_NEXT="YES"
973 fi
974}
975
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200976# multiply the client timeout delay by the given factor for the next test
Janos Follath74537a62016-09-02 13:45:28 +0100977client_needs_more_time() {
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200978 CLI_DELAY_FACTOR=$1
979}
980
Janos Follath74537a62016-09-02 13:45:28 +0100981# wait for the given seconds after the client finished in the next test
982server_needs_more_time() {
983 SRV_DELAY_SECONDS=$1
984}
985
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100986# print_name <name>
987print_name() {
Paul Bakkere20310a2016-05-10 11:18:17 +0100988 TESTS=$(( $TESTS + 1 ))
989 LINE=""
990
991 if [ "$SHOW_TEST_NUMBER" -gt 0 ]; then
992 LINE="$TESTS "
993 fi
994
995 LINE="$LINE$1"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100996
Tomás González378e3642023-09-04 10:41:37 +0100997 printf "%s " "$LINE"
998 LEN=$(( 72 - `echo "$LINE" | wc -c` ))
999 for i in `seq 1 $LEN`; do printf '.'; done
1000 printf ' '
1001
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +01001002}
1003
Gilles Peskine560280b2019-09-16 15:17:38 +02001004# record_outcome <outcome> [<failure-reason>]
1005# The test name must be in $NAME.
Gilles Peskine5eb2b022022-01-07 15:47:02 +01001006# Use $TEST_SUITE_NAME as the test suite name if set.
Gilles Peskine560280b2019-09-16 15:17:38 +02001007record_outcome() {
1008 echo "$1"
1009 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ]; then
1010 printf '%s;%s;%s;%s;%s;%s\n' \
1011 "$MBEDTLS_TEST_PLATFORM" "$MBEDTLS_TEST_CONFIGURATION" \
Jerry Yu9e47b262023-11-06 10:52:01 +08001012 "${TEST_SUITE_NAME:-ssl-opt}" "$NAME" \
Gilles Peskine560280b2019-09-16 15:17:38 +02001013 "$1" "${2-}" \
1014 >>"$MBEDTLS_TEST_OUTCOME_FILE"
1015 fi
1016}
Gilles Peskine5eb2b022022-01-07 15:47:02 +01001017unset TEST_SUITE_NAME
Gilles Peskine560280b2019-09-16 15:17:38 +02001018
Gilles Peskine788ad332021-10-20 14:17:02 +02001019# True if the presence of the given pattern in a log definitely indicates
1020# that the test has failed. False if the presence is inconclusive.
1021#
1022# Inputs:
1023# * $1: pattern found in the logs
1024# * $TIMES_LEFT: >0 if retrying is an option
1025#
1026# Outputs:
1027# * $outcome: set to a retry reason if the pattern is inconclusive,
1028# unchanged otherwise.
1029# * Return value: 1 if the pattern is inconclusive,
1030# 0 if the failure is definitive.
1031log_pattern_presence_is_conclusive() {
1032 # If we've run out of attempts, then don't retry no matter what.
1033 if [ $TIMES_LEFT -eq 0 ]; then
1034 return 0
1035 fi
1036 case $1 in
1037 "resend")
1038 # An undesired resend may have been caused by the OS dropping or
1039 # delaying a packet at an inopportune time.
1040 outcome="RETRY(resend)"
1041 return 1;;
1042 esac
1043}
1044
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +01001045# fail <message>
1046fail() {
Gilles Peskine560280b2019-09-16 15:17:38 +02001047 record_outcome "FAIL" "$1"
Manuel Pégourié-Gonnard3eec6042014-02-27 15:37:24 +01001048 echo " ! $1"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01001049
Manuel Pégourié-Gonnardc2b00922014-08-31 16:46:04 +02001050 mv $SRV_OUT o-srv-${TESTS}.log
1051 mv $CLI_OUT o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001052 if [ -n "$PXY_CMD" ]; then
1053 mv $PXY_OUT o-pxy-${TESTS}.log
1054 fi
1055 echo " ! outputs saved to o-XXX-${TESTS}.log"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01001056
Manuel Pégourié-Gonnard3f3302f2020-06-08 11:49:05 +02001057 if [ "${LOG_FAILURE_ON_STDOUT:-0}" != 0 ]; then
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +02001058 echo " ! server output:"
1059 cat o-srv-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001060 echo " ! ========================================================"
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +02001061 echo " ! client output:"
1062 cat o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001063 if [ -n "$PXY_CMD" ]; then
1064 echo " ! ========================================================"
1065 echo " ! proxy output:"
1066 cat o-pxy-${TESTS}.log
1067 fi
1068 echo ""
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +02001069 fi
1070
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +02001071 FAILS=$(( $FAILS + 1 ))
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +01001072}
1073
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001074# is_polar <cmd_line>
1075is_polar() {
Gilles Peskine64457492020-08-26 21:53:33 +02001076 case "$1" in
1077 *ssl_client2*) true;;
1078 *ssl_server2*) true;;
1079 *) false;;
1080 esac
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001081}
1082
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +02001083# openssl s_server doesn't have -www with DTLS
1084check_osrv_dtls() {
Gilles Peskine64457492020-08-26 21:53:33 +02001085 case "$SRV_CMD" in
1086 *s_server*-dtls*)
1087 NEEDS_INPUT=1
1088 SRV_CMD="$( echo $SRV_CMD | sed s/-www// )";;
1089 *) NEEDS_INPUT=0;;
1090 esac
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +02001091}
1092
1093# provide input to commands that need it
1094provide_input() {
1095 if [ $NEEDS_INPUT -eq 0 ]; then
1096 return
1097 fi
1098
1099 while true; do
1100 echo "HTTP/1.0 200 OK"
1101 sleep 1
1102 done
1103}
1104
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001105# has_mem_err <log_file_name>
1106has_mem_err() {
1107 if ( grep -F 'All heap blocks were freed -- no leaks are possible' "$1" &&
1108 grep -F 'ERROR SUMMARY: 0 errors from 0 contexts' "$1" ) > /dev/null
1109 then
1110 return 1 # false: does not have errors
1111 else
1112 return 0 # true: has errors
1113 fi
1114}
1115
Unknownd364f4c2019-09-02 10:42:57 -04001116# Wait for process $2 named $3 to be listening on port $1. Print error to $4.
Gilles Peskine418b5362017-12-14 18:58:42 +01001117if type lsof >/dev/null 2>/dev/null; then
Unknownd364f4c2019-09-02 10:42:57 -04001118 wait_app_start() {
Paul Elliotte05e1262021-10-20 15:59:33 +01001119 newline='
1120'
Gilles Peskine418b5362017-12-14 18:58:42 +01001121 START_TIME=$(date +%s)
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001122 if [ "$DTLS" -eq 1 ]; then
Gilles Peskine418b5362017-12-14 18:58:42 +01001123 proto=UDP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001124 else
Gilles Peskine418b5362017-12-14 18:58:42 +01001125 proto=TCP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001126 fi
Gilles Peskine418b5362017-12-14 18:58:42 +01001127 # Make a tight loop, server normally takes less than 1s to start.
Paul Elliott58ed8a72021-10-19 17:56:39 +01001128 while true; do
Gilles Peskine5bd0b512022-04-15 22:53:18 +02001129 SERVER_PIDS=$(lsof -a -n -b -i "$proto:$1" -t)
Paul Elliotte05e1262021-10-20 15:59:33 +01001130 # When we use a proxy, it will be listening on the same port we
1131 # are checking for as well as the server and lsof will list both.
Paul Elliotte05e1262021-10-20 15:59:33 +01001132 case ${newline}${SERVER_PIDS}${newline} in
Gilles Peskine5bd0b512022-04-15 22:53:18 +02001133 *${newline}${2}${newline}*) break;;
Paul Elliotte05e1262021-10-20 15:59:33 +01001134 esac
Gilles Peskine418b5362017-12-14 18:58:42 +01001135 if [ $(( $(date +%s) - $START_TIME )) -gt $DOG_DELAY ]; then
Unknownd364f4c2019-09-02 10:42:57 -04001136 echo "$3 START TIMEOUT"
1137 echo "$3 START TIMEOUT" >> $4
Gilles Peskine418b5362017-12-14 18:58:42 +01001138 break
1139 fi
1140 # Linux and *BSD support decimal arguments to sleep. On other
1141 # OSes this may be a tight loop.
1142 sleep 0.1 2>/dev/null || true
1143 done
1144 }
1145else
Unknownd364f4c2019-09-02 10:42:57 -04001146 echo "Warning: lsof not available, wait_app_start = sleep"
1147 wait_app_start() {
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001148 sleep "$START_DELAY"
Gilles Peskine418b5362017-12-14 18:58:42 +01001149 }
1150fi
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001151
Unknownd364f4c2019-09-02 10:42:57 -04001152# Wait for server process $2 to be listening on port $1.
1153wait_server_start() {
1154 wait_app_start $1 $2 "SERVER" $SRV_OUT
1155}
1156
1157# Wait for proxy process $2 to be listening on port $1.
1158wait_proxy_start() {
1159 wait_app_start $1 $2 "PROXY" $PXY_OUT
1160}
1161
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001162# Given the client or server debug output, parse the unix timestamp that is
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +01001163# included in the first 4 bytes of the random bytes and check that it's within
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001164# acceptable bounds
1165check_server_hello_time() {
1166 # Extract the time from the debug (lvl 3) output of the client
Andres Amaya Garcia67d8da52017-09-15 15:49:24 +01001167 SERVER_HELLO_TIME="$(sed -n 's/.*server hello, current time: //p' < "$1")"
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001168 # Get the Unix timestamp for now
1169 CUR_TIME=$(date +'%s')
1170 THRESHOLD_IN_SECS=300
1171
1172 # Check if the ServerHello time was printed
1173 if [ -z "$SERVER_HELLO_TIME" ]; then
1174 return 1
1175 fi
1176
1177 # Check the time in ServerHello is within acceptable bounds
1178 if [ $SERVER_HELLO_TIME -lt $(( $CUR_TIME - $THRESHOLD_IN_SECS )) ]; then
1179 # The time in ServerHello is at least 5 minutes before now
1180 return 1
1181 elif [ $SERVER_HELLO_TIME -gt $(( $CUR_TIME + $THRESHOLD_IN_SECS )) ]; then
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +01001182 # The time in ServerHello is at least 5 minutes later than now
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001183 return 1
1184 else
1185 return 0
1186 fi
1187}
1188
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001189# Get handshake memory usage from server or client output and put it into the variable specified by the first argument
1190handshake_memory_get() {
1191 OUTPUT_VARIABLE="$1"
1192 OUTPUT_FILE="$2"
1193
1194 # Get memory usage from a pattern like "Heap memory usage after handshake: 23112 bytes. Peak memory usage was 33112"
1195 MEM_USAGE=$(sed -n 's/.*Heap memory usage after handshake: //p' < "$OUTPUT_FILE" | grep -o "[0-9]*" | head -1)
1196
1197 # Check if memory usage was read
1198 if [ -z "$MEM_USAGE" ]; then
1199 echo "Error: Can not read the value of handshake memory usage"
1200 return 1
1201 else
1202 eval "$OUTPUT_VARIABLE=$MEM_USAGE"
1203 return 0
1204 fi
1205}
1206
1207# Get handshake memory usage from server or client output and check if this value
1208# is not higher than the maximum given by the first argument
1209handshake_memory_check() {
1210 MAX_MEMORY="$1"
1211 OUTPUT_FILE="$2"
1212
1213 # Get memory usage
1214 if ! handshake_memory_get "MEMORY_USAGE" "$OUTPUT_FILE"; then
1215 return 1
1216 fi
1217
1218 # Check if memory usage is below max value
1219 if [ "$MEMORY_USAGE" -gt "$MAX_MEMORY" ]; then
1220 echo "\nFailed: Handshake memory usage was $MEMORY_USAGE bytes," \
1221 "but should be below $MAX_MEMORY bytes"
1222 return 1
1223 else
1224 return 0
1225 fi
1226}
1227
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001228# wait for client to terminate and set CLI_EXIT
1229# must be called right after starting the client
1230wait_client_done() {
1231 CLI_PID=$!
1232
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +02001233 CLI_DELAY=$(( $DOG_DELAY * $CLI_DELAY_FACTOR ))
1234 CLI_DELAY_FACTOR=1
1235
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +02001236 ( sleep $CLI_DELAY; echo "===CLIENT_TIMEOUT===" >> $CLI_OUT; kill $CLI_PID ) &
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001237 DOG_PID=$!
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001238
Jerry Yud2d41102022-07-26 17:34:42 +08001239 # For Ubuntu 22.04, `Terminated` message is outputed by wait command.
1240 # To remove it from stdout, redirect stdout/stderr to CLI_OUT
1241 wait $CLI_PID >> $CLI_OUT 2>&1
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001242 CLI_EXIT=$?
1243
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001244 kill $DOG_PID >/dev/null 2>&1
Jerry Yufe52e552022-07-09 04:23:43 +00001245 wait $DOG_PID >> $CLI_OUT 2>&1
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001246
1247 echo "EXIT: $CLI_EXIT" >> $CLI_OUT
Janos Follath74537a62016-09-02 13:45:28 +01001248
1249 sleep $SRV_DELAY_SECONDS
1250 SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001251}
1252
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001253# check if the given command uses dtls and sets global variable DTLS
1254detect_dtls() {
Gilles Peskine64457492020-08-26 21:53:33 +02001255 case "$1" in
Gilles Peskine6b4d6932024-09-04 16:51:50 +02001256 *dtls=1*|*-dtls*|*-u*|*/dtls_*) DTLS=1;;
Gilles Peskine64457492020-08-26 21:53:33 +02001257 *) DTLS=0;;
1258 esac
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001259}
1260
Dave Rodgman0279c2f2021-02-10 12:45:41 +00001261# check if the given command uses gnutls and sets global variable CMD_IS_GNUTLS
1262is_gnutls() {
1263 case "$1" in
1264 *gnutls-cli*)
1265 CMD_IS_GNUTLS=1
1266 ;;
1267 *gnutls-serv*)
1268 CMD_IS_GNUTLS=1
1269 ;;
1270 *)
1271 CMD_IS_GNUTLS=0
1272 ;;
1273 esac
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001274}
1275
Valerio Setti2f8eb622023-03-16 13:04:44 +01001276# Some external tools (gnutls or openssl) might not have support for static ECDH
1277# and this limit the tests that can be run with them. This function checks server
Valerio Setti6ba247c2023-03-14 17:13:43 +01001278# and client command lines, given as input, to verify if the current test
1279# is using one of these tools.
1280use_ext_tool_without_ecdh_support() {
1281 case "$1" in
1282 *$GNUTLS_SERV*|\
1283 *${GNUTLS_NEXT_SERV:-"gnutls-serv-dummy"}*|\
1284 *${OPENSSL_NEXT:-"openssl-dummy"}*)
1285 echo "yes"
1286 return;;
1287 esac
1288 case "$2" in
1289 *$GNUTLS_CLI*|\
1290 *${GNUTLS_NEXT_CLI:-"gnutls-cli-dummy"}*|\
1291 *${OPENSSL_NEXT:-"openssl-dummy"}*)
1292 echo "yes"
1293 return;;
1294 esac
1295 echo "no"
1296}
1297
Jerry Yuf467d462022-11-07 13:12:44 +08001298# Generate random psk_list argument for ssl_server2
1299get_srv_psk_list ()
1300{
1301 case $(( TESTS % 3 )) in
1302 0) echo "psk_list=abc,dead,def,beef,Client_identity,6162636465666768696a6b6c6d6e6f70";;
1303 1) echo "psk_list=abc,dead,Client_identity,6162636465666768696a6b6c6d6e6f70,def,beef";;
1304 2) echo "psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef";;
1305 esac
1306}
1307
Gilles Peskine309ca652022-03-14 17:55:04 +01001308# Determine what calc_verify trace is to be expected, if any.
1309#
1310# calc_verify is only called for two things: to calculate the
1311# extended master secret, and to process client authentication.
1312#
1313# Warning: the current implementation assumes that extended_ms is not
1314# disabled on the client or on the server.
1315#
1316# Inputs:
Gilles Peskinec8d242f2022-04-06 22:23:45 +02001317# * $1: the value of the server auth_mode parameter.
1318# 'required' if client authentication is expected,
1319# 'none' or absent if not.
Gilles Peskine309ca652022-03-14 17:55:04 +01001320# * $CONFIGS_ENABLED
1321#
1322# Outputs:
1323# * $maybe_calc_verify: set to a trace expected in the debug logs
1324set_maybe_calc_verify() {
1325 maybe_calc_verify=
1326 case $CONFIGS_ENABLED in
1327 *\ MBEDTLS_SSL_EXTENDED_MASTER_SECRET\ *) :;;
1328 *)
1329 case ${1-} in
Gilles Peskinec8d242f2022-04-06 22:23:45 +02001330 ''|none) return;;
1331 required) :;;
Gilles Peskine309ca652022-03-14 17:55:04 +01001332 *) echo "Bad parameter 1 to set_maybe_calc_verify: $1"; exit 1;;
1333 esac
1334 esac
Gilles Peskinefb31ebd2024-10-24 20:14:16 +02001335 maybe_calc_verify="PSA calc verify"
Gilles Peskine309ca652022-03-14 17:55:04 +01001336}
1337
Johan Pascal9bc50b02020-09-24 12:01:13 +02001338# Compare file content
1339# Usage: find_in_both pattern file1 file2
1340# extract from file1 the first line matching the pattern
1341# check in file2 that the same line can be found
1342find_in_both() {
1343 srv_pattern=$(grep -m 1 "$1" "$2");
1344 if [ -z "$srv_pattern" ]; then
1345 return 1;
1346 fi
1347
1348 if grep "$srv_pattern" $3 >/dev/null; then :
Johan Pascal10403152020-10-09 20:43:51 +02001349 return 0;
Johan Pascal9bc50b02020-09-24 12:01:13 +02001350 else
1351 return 1;
1352 fi
1353}
1354
Jerry Yuc46e9b42021-08-06 11:22:24 +08001355SKIP_HANDSHAKE_CHECK="NO"
1356skip_handshake_stage_check() {
1357 SKIP_HANDSHAKE_CHECK="YES"
1358}
1359
Gilles Peskine236bf982021-10-19 16:25:10 +02001360# Analyze the commands that will be used in a test.
1361#
1362# Analyze and possibly instrument $PXY_CMD, $CLI_CMD, $SRV_CMD to pass
1363# extra arguments or go through wrappers.
Gilles Peskine59601d72022-04-05 22:00:17 +02001364#
1365# Inputs:
1366# * $@: supplemental options to run_test() (after the mandatory arguments).
1367# * $CLI_CMD, $PXY_CMD, $SRV_CMD: the client, proxy and server commands.
1368# * $DTLS: 1 if DTLS, otherwise 0.
1369#
1370# Outputs:
1371# * $CLI_CMD, $PXY_CMD, $SRV_CMD: may be tweaked.
Gilles Peskine236bf982021-10-19 16:25:10 +02001372analyze_test_commands() {
Gilles Peskineae710c82024-09-04 16:07:56 +02001373 # If the test uses DTLS, does not force a specific port, and does not
1374 # specify a custom proxy, add a simple proxy.
1375 # It provides timing info that's useful to debug failures.
1376 if [ "$DTLS" -eq 1 ] &&
1377 [ "$THIS_SRV_PORT" = "$SRV_PORT" ] &&
1378 [ -z "$PXY_CMD" ]
1379 then
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +02001380 PXY_CMD="$P_PXY"
Manuel Pégourié-Gonnard8779e9a2020-07-16 10:19:32 +02001381 case " $SRV_CMD " in
1382 *' server_addr=::1 '*)
1383 PXY_CMD="$PXY_CMD server_addr=::1 listen_addr=::1";;
1384 esac
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +02001385 fi
1386
Dave Rodgman0279c2f2021-02-10 12:45:41 +00001387 # update CMD_IS_GNUTLS variable
1388 is_gnutls "$SRV_CMD"
1389
1390 # if the server uses gnutls but doesn't set priority, explicitly
1391 # set the default priority
1392 if [ "$CMD_IS_GNUTLS" -eq 1 ]; then
1393 case "$SRV_CMD" in
1394 *--priority*) :;;
1395 *) SRV_CMD="$SRV_CMD --priority=NORMAL";;
1396 esac
1397 fi
1398
1399 # update CMD_IS_GNUTLS variable
1400 is_gnutls "$CLI_CMD"
1401
1402 # if the client uses gnutls but doesn't set priority, explicitly
1403 # set the default priority
1404 if [ "$CMD_IS_GNUTLS" -eq 1 ]; then
1405 case "$CLI_CMD" in
1406 *--priority*) :;;
1407 *) CLI_CMD="$CLI_CMD --priority=NORMAL";;
1408 esac
1409 fi
1410
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001411 # fix client port
1412 if [ -n "$PXY_CMD" ]; then
1413 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$PXY_PORT/g )
1414 else
Gilles Peskine2bc5c802024-09-04 16:05:11 +02001415 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$THIS_SRV_PORT/g )
1416 fi
1417
1418 # If the test forces a specific port and the server is OpenSSL or
1419 # GnuTLS, override its port specification.
1420 if [ "$THIS_SRV_PORT" != "$SRV_PORT" ]; then
1421 case "$SRV_CMD" in
Gilles Peskine6ef52392024-09-04 23:33:36 +02001422 "$G_SRV"*|"$G_NEXT_SRV"*)
1423 SRV_CMD=$(
1424 printf %s "$SRV_CMD " |
1425 sed -e "s/ -p $SRV_PORT / -p $THIS_SRV_PORT /"
1426 );;
Gilles Peskine2bc5c802024-09-04 16:05:11 +02001427 "$O_SRV"*|"$O_NEXT_SRV"*) SRV_CMD="$SRV_CMD -accept $THIS_SRV_PORT";;
1428 esac
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001429 fi
1430
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001431 # prepend valgrind to our commands if active
1432 if [ "$MEMCHECK" -gt 0 ]; then
1433 if is_polar "$SRV_CMD"; then
1434 SRV_CMD="valgrind --leak-check=full $SRV_CMD"
1435 fi
1436 if is_polar "$CLI_CMD"; then
1437 CLI_CMD="valgrind --leak-check=full $CLI_CMD"
1438 fi
1439 fi
Gilles Peskine236bf982021-10-19 16:25:10 +02001440}
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001441
Gilles Peskine236bf982021-10-19 16:25:10 +02001442# Check for failure conditions after a test case.
1443#
1444# Inputs from run_test:
1445# * positional parameters: test options (see run_test documentation)
1446# * $CLI_EXIT: client return code
1447# * $CLI_EXPECT: expected client return code
1448# * $SRV_RET: server return code
1449# * $CLI_OUT, $SRV_OUT, $PXY_OUT: files containing client/server/proxy logs
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001450# * $TIMES_LEFT: if nonzero, a RETRY outcome is allowed
Gilles Peskine236bf982021-10-19 16:25:10 +02001451#
1452# Outputs:
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001453# * $outcome: one of PASS/RETRY*/FAIL
Gilles Peskine236bf982021-10-19 16:25:10 +02001454check_test_failure() {
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001455 outcome=FAIL
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +02001456
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001457 if [ $TIMES_LEFT -gt 0 ] &&
1458 grep '===CLIENT_TIMEOUT===' $CLI_OUT >/dev/null
1459 then
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001460 outcome="RETRY(client-timeout)"
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001461 return
1462 fi
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +02001463
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001464 # check if the client and server went at least to the handshake stage
Paul Bakker1ebc0c52014-05-22 15:47:58 +02001465 # (useful to avoid tests with only negative assertions and non-zero
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001466 # expected client exit to incorrectly succeed in case of catastrophic
1467 # failure)
Jerry Yuc46e9b42021-08-06 11:22:24 +08001468 if [ "X$SKIP_HANDSHAKE_CHECK" != "XYES" ]
1469 then
1470 if is_polar "$SRV_CMD"; then
1471 if grep "Performing the SSL/TLS handshake" $SRV_OUT >/dev/null; then :;
1472 else
1473 fail "server or client failed to reach handshake stage"
1474 return
1475 fi
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001476 fi
Jerry Yuc46e9b42021-08-06 11:22:24 +08001477 if is_polar "$CLI_CMD"; then
1478 if grep "Performing the SSL/TLS handshake" $CLI_OUT >/dev/null; then :;
1479 else
1480 fail "server or client failed to reach handshake stage"
1481 return
1482 fi
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001483 fi
1484 fi
1485
Jerry Yuc46e9b42021-08-06 11:22:24 +08001486 SKIP_HANDSHAKE_CHECK="NO"
Gilles Peskineaaf866e2021-02-09 21:01:33 +01001487 # Check server exit code (only for Mbed TLS: GnuTLS and OpenSSL don't
1488 # exit with status 0 when interrupted by a signal, and we don't really
1489 # care anyway), in case e.g. the server reports a memory leak.
1490 if [ $SRV_RET != 0 ] && is_polar "$SRV_CMD"; then
Gilles Peskine7f919de2021-02-02 23:29:03 +01001491 fail "Server exited with status $SRV_RET"
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +01001492 return
1493 fi
1494
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001495 # check client exit code
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01001496 if [ \( "$CLI_EXPECT" = 0 -a "$CLI_EXIT" != 0 \) -o \
1497 \( "$CLI_EXPECT" != 0 -a "$CLI_EXIT" = 0 \) ]
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001498 then
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001499 fail "bad client exit code (expected $CLI_EXPECT, got $CLI_EXIT)"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001500 return
1501 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001502
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001503 # check other assertions
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001504 # lines beginning with == are added by valgrind, ignore them
Paul Bakker1f650922016-05-13 10:16:46 +01001505 # lines with 'Serious error when reading debug info', are valgrind issues as well
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001506 while [ $# -gt 0 ]
1507 do
1508 case $1 in
1509 "-s")
Paul Bakker1f650922016-05-13 10:16:46 +01001510 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +01001511 fail "pattern '$2' MUST be present in the Server output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001512 return
1513 fi
1514 ;;
1515
1516 "-c")
Paul Bakker1f650922016-05-13 10:16:46 +01001517 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +01001518 fail "pattern '$2' MUST be present in the Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001519 return
1520 fi
1521 ;;
1522
1523 "-S")
Paul Bakker1f650922016-05-13 10:16:46 +01001524 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Gilles Peskine788ad332021-10-20 14:17:02 +02001525 if log_pattern_presence_is_conclusive "$2"; then
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001526 fail "pattern '$2' MUST NOT be present in the Server output"
1527 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001528 return
1529 fi
1530 ;;
1531
1532 "-C")
Paul Bakker1f650922016-05-13 10:16:46 +01001533 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Gilles Peskine788ad332021-10-20 14:17:02 +02001534 if log_pattern_presence_is_conclusive "$2"; then
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001535 fail "pattern '$2' MUST NOT be present in the Client output"
1536 fi
Simon Butcher8e004102016-10-14 00:48:33 +01001537 return
1538 fi
1539 ;;
1540
1541 # The filtering in the following two options (-u and -U) do the following
1542 # - ignore valgrind output
Antonin Décimo36e89b52019-01-23 15:24:37 +01001543 # - filter out everything but lines right after the pattern occurrences
Simon Butcher8e004102016-10-14 00:48:33 +01001544 # - keep one of each non-unique line
1545 # - count how many lines remain
1546 # A line with '--' will remain in the result from previous outputs, so the number of lines in the result will be 1
1547 # if there were no duplicates.
1548 "-U")
1549 if [ $(grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
1550 fail "lines following pattern '$2' must be unique in Server output"
1551 return
1552 fi
1553 ;;
1554
1555 "-u")
1556 if [ $(grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
1557 fail "lines following pattern '$2' must be unique in Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001558 return
1559 fi
1560 ;;
Andres Amaya Garcia93993de2017-09-06 15:38:07 +01001561 "-F")
1562 if ! $2 "$SRV_OUT"; then
1563 fail "function call to '$2' failed on Server output"
1564 return
1565 fi
1566 ;;
1567 "-f")
1568 if ! $2 "$CLI_OUT"; then
1569 fail "function call to '$2' failed on Client output"
1570 return
1571 fi
1572 ;;
Johan Pascal9bc50b02020-09-24 12:01:13 +02001573 "-g")
1574 if ! eval "$2 '$SRV_OUT' '$CLI_OUT'"; then
1575 fail "function call to '$2' failed on Server and Client output"
1576 return
1577 fi
1578 ;;
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001579
1580 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +02001581 echo "Unknown test: $1" >&2
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001582 exit 1
1583 esac
1584 shift 2
1585 done
1586
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001587 # check valgrind's results
1588 if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001589 if is_polar "$SRV_CMD" && has_mem_err $SRV_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001590 fail "Server has memory errors"
1591 return
1592 fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001593 if is_polar "$CLI_CMD" && has_mem_err $CLI_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001594 fail "Client has memory errors"
1595 return
1596 fi
1597 fi
1598
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001599 # if we're here, everything is ok
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001600 outcome=PASS
Gilles Peskine236bf982021-10-19 16:25:10 +02001601}
1602
Gilles Peskine196d73b2021-10-19 16:35:35 +02001603# Run the current test case: start the server and if applicable the proxy, run
1604# the client, wait for all processes to finish or time out.
1605#
1606# Inputs:
1607# * $NAME: test case name
1608# * $CLI_CMD, $SRV_CMD, $PXY_CMD: commands to run
1609# * $CLI_OUT, $SRV_OUT, $PXY_OUT: files to contain client/server/proxy logs
1610#
1611# Outputs:
1612# * $CLI_EXIT: client return code
1613# * $SRV_RET: server return code
1614do_run_test_once() {
1615 # run the commands
1616 if [ -n "$PXY_CMD" ]; then
1617 printf "# %s\n%s\n" "$NAME" "$PXY_CMD" > $PXY_OUT
1618 $PXY_CMD >> $PXY_OUT 2>&1 &
1619 PXY_PID=$!
1620 wait_proxy_start "$PXY_PORT" "$PXY_PID"
1621 fi
1622
1623 check_osrv_dtls
1624 printf '# %s\n%s\n' "$NAME" "$SRV_CMD" > $SRV_OUT
1625 provide_input | $SRV_CMD >> $SRV_OUT 2>&1 &
1626 SRV_PID=$!
Gilles Peskine2bc5c802024-09-04 16:05:11 +02001627 wait_server_start "$THIS_SRV_PORT" "$SRV_PID"
Gilles Peskine196d73b2021-10-19 16:35:35 +02001628
1629 printf '# %s\n%s\n' "$NAME" "$CLI_CMD" > $CLI_OUT
Andrzej Kurek140b5892022-05-27 06:44:19 -04001630 # The client must be a subprocess of the script in order for killing it to
1631 # work properly, that's why the ampersand is placed inside the eval command,
1632 # not at the end of the line: the latter approach will spawn eval as a
1633 # subprocess, and the $CLI_CMD as a grandchild.
1634 eval "$CLI_CMD &" >> $CLI_OUT 2>&1
Gilles Peskine196d73b2021-10-19 16:35:35 +02001635 wait_client_done
1636
1637 sleep 0.05
1638
1639 # terminate the server (and the proxy)
1640 kill $SRV_PID
Jerry Yud2d41102022-07-26 17:34:42 +08001641 # For Ubuntu 22.04, `Terminated` message is outputed by wait command.
Jerry Yu27d80922022-08-02 21:28:55 +08001642 # To remove it from stdout, redirect stdout/stderr to SRV_OUT
Jerry Yud2d41102022-07-26 17:34:42 +08001643 wait $SRV_PID >> $SRV_OUT 2>&1
Gilles Peskine196d73b2021-10-19 16:35:35 +02001644 SRV_RET=$?
1645
1646 if [ -n "$PXY_CMD" ]; then
1647 kill $PXY_PID >/dev/null 2>&1
Jerry Yu6969eee2022-10-10 10:25:26 +08001648 wait $PXY_PID >> $PXY_OUT 2>&1
Gilles Peskine196d73b2021-10-19 16:35:35 +02001649 fi
1650}
1651
Ronald Cron097ba142023-03-08 16:18:00 +01001652# Detect if the current test is going to use TLS 1.3 or TLS 1.2.
Valerio Setti194e2bd2023-03-02 17:18:10 +01001653# $1 and $2 contain the server and client command lines, respectively.
Valerio Setti213c4ea2023-03-07 19:29:57 +01001654#
1655# Note: this function only provides some guess about TLS version by simply
Yanray Wang7b320fa2023-11-08 10:33:30 +08001656# looking at the server/client command lines. Even though this works
Valerio Setti213c4ea2023-03-07 19:29:57 +01001657# for the sake of tests' filtering (especially in conjunction with the
1658# detect_required_features() function), it does NOT guarantee that the
1659# result is accurate. It does not check other conditions, such as:
Valerio Setti213c4ea2023-03-07 19:29:57 +01001660# - we can force a ciphersuite which contains "WITH" in its name, meaning
1661# that we are going to use TLS 1.2
1662# - etc etc
Valerio Setti1af76d12023-02-23 15:55:10 +01001663get_tls_version() {
Ronald Cron097ba142023-03-08 16:18:00 +01001664 # First check if the version is forced on an Mbed TLS peer
Valerio Setti1af76d12023-02-23 15:55:10 +01001665 case $1 in
Ronald Cron097ba142023-03-08 16:18:00 +01001666 *tls12*)
1667 echo "TLS12"
1668 return;;
1669 *tls13*)
Valerio Setti1af76d12023-02-23 15:55:10 +01001670 echo "TLS13"
1671 return;;
1672 esac
1673 case $2 in
Ronald Cron097ba142023-03-08 16:18:00 +01001674 *tls12*)
1675 echo "TLS12"
1676 return;;
1677 *tls13*)
Valerio Setti1af76d12023-02-23 15:55:10 +01001678 echo "TLS13"
1679 return;;
1680 esac
Ronald Cron097ba142023-03-08 16:18:00 +01001681 # Second check if the version is forced on an OpenSSL or GnuTLS peer
1682 case $1 in
1683 tls1_2*)
1684 echo "TLS12"
1685 return;;
1686 *tls1_3)
1687 echo "TLS13"
1688 return;;
1689 esac
1690 case $2 in
1691 *tls1_2)
1692 echo "TLS12"
1693 return;;
1694 *tls1_3)
1695 echo "TLS13"
1696 return;;
1697 esac
1698 # Third if the version is not forced, if TLS 1.3 is enabled then the test
1699 # is aimed to run a TLS 1.3 handshake.
Gilles Peskine94041692024-09-06 14:43:17 +02001700 if is_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron097ba142023-03-08 16:18:00 +01001701 then
1702 echo "TLS13"
1703 else
1704 echo "TLS12"
1705 fi
Valerio Setti1af76d12023-02-23 15:55:10 +01001706}
1707
Gilles Peskine236bf982021-10-19 16:25:10 +02001708# Usage: run_test name [-p proxy_cmd] srv_cmd cli_cmd cli_exit [option [...]]
1709# Options: -s pattern pattern that must be present in server output
1710# -c pattern pattern that must be present in client output
1711# -u pattern lines after pattern must be unique in client output
1712# -f call shell function on client output
1713# -S pattern pattern that must be absent in server output
1714# -C pattern pattern that must be absent in client output
1715# -U pattern lines after pattern must be unique in server output
1716# -F call shell function on server output
1717# -g call shell function on server and client output
1718run_test() {
1719 NAME="$1"
1720 shift 1
1721
Tomás González787428a2023-08-23 15:27:19 +01001722 if is_excluded "$NAME"; then
1723 SKIP_NEXT="NO"
1724 # There was no request to run the test, so don't record its outcome.
1725 return
1726 fi
1727
Tomás González37a87392023-09-01 11:25:44 +01001728 if [ "$LIST_TESTS" -gt 0 ]; then
Pengyu Lv3c170d32023-11-29 13:53:34 +08001729 printf "%s\n" "${TEST_SUITE_NAME:-ssl-opt};$NAME"
Tomás González37a87392023-09-01 11:25:44 +01001730 return
1731 fi
1732
Jerry Yu50d07bd2023-11-06 10:49:01 +08001733 # Use ssl-opt as default test suite name. Also see record_outcome function
1734 if is_excluded_test_suite "${TEST_SUITE_NAME:-ssl-opt}"; then
1735 # Do not skip next test and skip current test.
1736 SKIP_NEXT="NO"
1737 return
1738 fi
1739
Tomás González51cb7042023-09-07 10:21:19 +01001740 print_name "$NAME"
1741
Gilles Peskine236bf982021-10-19 16:25:10 +02001742 # Do we only run numbered tests?
1743 if [ -n "$RUN_TEST_NUMBER" ]; then
1744 case ",$RUN_TEST_NUMBER," in
1745 *",$TESTS,"*) :;;
1746 *) SKIP_NEXT="YES";;
1747 esac
1748 fi
1749
Gilles Peskineae710c82024-09-04 16:07:56 +02001750 # Does this test specify a proxy?
Gilles Peskine236bf982021-10-19 16:25:10 +02001751 if [ "X$1" = "X-p" ]; then
1752 PXY_CMD="$2"
1753 shift 2
1754 else
1755 PXY_CMD=""
1756 fi
1757
Gilles Peskine2bc5c802024-09-04 16:05:11 +02001758 # Does this test force a specific port?
1759 if [ "$1" = "-P" ]; then
1760 THIS_SRV_PORT="$2"
1761 shift 2
1762 else
1763 THIS_SRV_PORT="$SRV_PORT"
1764 fi
1765
Gilles Peskine236bf982021-10-19 16:25:10 +02001766 # get commands and client output
1767 SRV_CMD="$1"
1768 CLI_CMD="$2"
1769 CLI_EXPECT="$3"
1770 shift 3
1771
1772 # Check if test uses files
1773 case "$SRV_CMD $CLI_CMD" in
David Horstmann184c4f02024-07-01 17:01:28 +01001774 *$DATA_FILES_PATH/*)
Gilles Peskine236bf982021-10-19 16:25:10 +02001775 requires_config_enabled MBEDTLS_FS_IO;;
1776 esac
1777
Gilles Peskine82a4ab22022-02-25 19:46:30 +01001778 # Check if the test uses DTLS.
1779 detect_dtls "$SRV_CMD"
1780 if [ "$DTLS" -eq 1 ]; then
1781 requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
1782 fi
1783
Yanray Wang7b320fa2023-11-08 10:33:30 +08001784 # Check if we are trying to use an external tool which does not support ECDH
Valerio Setti6ba247c2023-03-14 17:13:43 +01001785 EXT_WO_ECDH=$(use_ext_tool_without_ecdh_support "$SRV_CMD" "$CLI_CMD")
1786
Gilles Peskinecc7d6ae2024-09-11 21:03:05 +02001787 # Guess the TLS version which is going to be used.
1788 # Note that this detection is wrong in some cases, which causes unduly
1789 # skipped test cases in builds with TLS 1.3 but not TLS 1.2.
1790 # https://github.com/Mbed-TLS/mbedtls/issues/9560
Valerio Setti726ffbf2023-08-02 20:02:44 +02001791 if [ "$EXT_WO_ECDH" = "no" ]; then
1792 TLS_VERSION=$(get_tls_version "$SRV_CMD" "$CLI_CMD")
1793 else
1794 TLS_VERSION="TLS12"
1795 fi
1796
Gilles Peskine4f098642024-09-06 15:35:58 +02001797 # If we're in a PSK-only build and the test can be adapted to PSK, do that.
1798 maybe_adapt_for_psk "$@"
1799
Valerio Setti726ffbf2023-08-02 20:02:44 +02001800 # If the client or server requires certain features that can be detected
Manuel Pégourié-Gonnardf299efd2023-09-18 11:19:04 +02001801 # from their command-line arguments, check whether they're enabled.
Valerio Setti6ba247c2023-03-14 17:13:43 +01001802 detect_required_features "$SRV_CMD" "server" "$TLS_VERSION" "$EXT_WO_ECDH" "$@"
1803 detect_required_features "$CLI_CMD" "client" "$TLS_VERSION" "$EXT_WO_ECDH" "$@"
Gilles Peskine236bf982021-10-19 16:25:10 +02001804
1805 # should we skip?
1806 if [ "X$SKIP_NEXT" = "XYES" ]; then
1807 SKIP_NEXT="NO"
1808 record_outcome "SKIP"
1809 SKIPS=$(( $SKIPS + 1 ))
1810 return
1811 fi
1812
1813 analyze_test_commands "$@"
1814
Andrzej Kurek8db7c0e2022-04-01 08:52:06 -04001815 # One regular run and two retries
1816 TIMES_LEFT=3
Gilles Peskine236bf982021-10-19 16:25:10 +02001817 while [ $TIMES_LEFT -gt 0 ]; do
1818 TIMES_LEFT=$(( $TIMES_LEFT - 1 ))
1819
Gilles Peskine196d73b2021-10-19 16:35:35 +02001820 do_run_test_once
Gilles Peskine236bf982021-10-19 16:25:10 +02001821
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001822 check_test_failure "$@"
1823 case $outcome in
1824 PASS) break;;
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001825 RETRY*) printf "$outcome ";;
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001826 FAIL) return;;
1827 esac
Gilles Peskine236bf982021-10-19 16:25:10 +02001828 done
1829
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001830 # If we get this far, the test case passed.
Gilles Peskine560280b2019-09-16 15:17:38 +02001831 record_outcome "PASS"
Paul Bakkeracaac852016-05-10 11:47:13 +01001832 if [ "$PRESERVE_LOGS" -gt 0 ]; then
1833 mv $SRV_OUT o-srv-${TESTS}.log
1834 mv $CLI_OUT o-cli-${TESTS}.log
Hanno Becker7be2e5b2018-08-20 12:21:35 +01001835 if [ -n "$PXY_CMD" ]; then
1836 mv $PXY_OUT o-pxy-${TESTS}.log
1837 fi
Paul Bakkeracaac852016-05-10 11:47:13 +01001838 fi
1839
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001840 rm -f $SRV_OUT $CLI_OUT $PXY_OUT
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001841}
1842
Hanno Becker9b5853c2018-11-16 17:28:40 +00001843run_test_psa() {
Gilles Peskine309ca652022-03-14 17:55:04 +01001844 set_maybe_calc_verify none
Hanno Beckere9420c22018-11-20 11:37:34 +00001845 run_test "PSA-supported ciphersuite: $1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001846 "$P_SRV debug_level=3 force_version=tls12" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01001847 "$P_CLI debug_level=3 force_ciphersuite=$1" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001848 0 \
Gilles Peskine309ca652022-03-14 17:55:04 +01001849 -c "$maybe_calc_verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -05001850 -c "calc PSA finished" \
Gilles Peskine309ca652022-03-14 17:55:04 +01001851 -s "$maybe_calc_verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -05001852 -s "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001853 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +00001854 -c "Perform PSA-based ECDH computation."\
Andrzej Kureke85414e2019-01-15 05:23:59 -05001855 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001856 -S "error" \
1857 -C "error"
Gilles Peskine309ca652022-03-14 17:55:04 +01001858 unset maybe_calc_verify
Hanno Becker9b5853c2018-11-16 17:28:40 +00001859}
1860
Hanno Becker354e2482019-01-08 11:40:25 +00001861run_test_psa_force_curve() {
Gilles Peskine309ca652022-03-14 17:55:04 +01001862 set_maybe_calc_verify none
Hanno Becker354e2482019-01-08 11:40:25 +00001863 run_test "PSA - ECDH with $1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02001864 "$P_SRV debug_level=4 force_version=tls12 groups=$1" \
1865 "$P_CLI debug_level=4 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 groups=$1" \
Hanno Becker354e2482019-01-08 11:40:25 +00001866 0 \
Gilles Peskine309ca652022-03-14 17:55:04 +01001867 -c "$maybe_calc_verify" \
Hanno Becker28f78442019-02-18 16:47:50 +00001868 -c "calc PSA finished" \
Gilles Peskine309ca652022-03-14 17:55:04 +01001869 -s "$maybe_calc_verify" \
Hanno Becker28f78442019-02-18 16:47:50 +00001870 -s "calc PSA finished" \
Hanno Becker354e2482019-01-08 11:40:25 +00001871 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +00001872 -c "Perform PSA-based ECDH computation."\
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001873 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001874 -S "error" \
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001875 -C "error"
Gilles Peskine309ca652022-03-14 17:55:04 +01001876 unset maybe_calc_verify
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001877}
1878
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001879# Test that the server's memory usage after a handshake is reduced when a client specifies
1880# a maximum fragment length.
1881# first argument ($1) is MFL for SSL client
1882# second argument ($2) is memory usage for SSL client with default MFL (16k)
Wenxing Houb4d03cc2024-06-19 11:04:13 +08001883run_test_memory_after_handshake_with_mfl()
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001884{
1885 # The test passes if the difference is around 2*(16k-MFL)
Gilles Peskine5b428d72020-08-26 21:52:23 +02001886 MEMORY_USAGE_LIMIT="$(( $2 - ( 2 * ( 16384 - $1 )) ))"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001887
1888 # Leave some margin for robustness
1889 MEMORY_USAGE_LIMIT="$(( ( MEMORY_USAGE_LIMIT * 110 ) / 100 ))"
1890
1891 run_test "Handshake memory usage (MFL $1)" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001892 "$P_SRV debug_level=3 auth_mode=required force_version=tls12" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01001893 "$P_CLI debug_level=3 \
David Horstmann184c4f02024-07-01 17:01:28 +01001894 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001895 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM max_frag_len=$1" \
1896 0 \
1897 -F "handshake_memory_check $MEMORY_USAGE_LIMIT"
1898}
1899
1900
1901# Test that the server's memory usage after a handshake is reduced when a client specifies
1902# different values of Maximum Fragment Length: default (16k), 4k, 2k, 1k and 512 bytes
Wenxing Houb4d03cc2024-06-19 11:04:13 +08001903run_tests_memory_after_handshake()
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001904{
1905 # all tests in this sequence requires the same configuration (see requires_config_enabled())
1906 SKIP_THIS_TESTS="$SKIP_NEXT"
1907
1908 # first test with default MFU is to get reference memory usage
1909 MEMORY_USAGE_MFL_16K=0
1910 run_test "Handshake memory usage initial (MFL 16384 - default)" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001911 "$P_SRV debug_level=3 auth_mode=required force_version=tls12" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01001912 "$P_CLI debug_level=3 \
David Horstmann184c4f02024-07-01 17:01:28 +01001913 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001914 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM" \
1915 0 \
1916 -F "handshake_memory_get MEMORY_USAGE_MFL_16K"
1917
1918 SKIP_NEXT="$SKIP_THIS_TESTS"
Wenxing Houb4d03cc2024-06-19 11:04:13 +08001919 run_test_memory_after_handshake_with_mfl 4096 "$MEMORY_USAGE_MFL_16K"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001920
1921 SKIP_NEXT="$SKIP_THIS_TESTS"
Wenxing Houb4d03cc2024-06-19 11:04:13 +08001922 run_test_memory_after_handshake_with_mfl 2048 "$MEMORY_USAGE_MFL_16K"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001923
1924 SKIP_NEXT="$SKIP_THIS_TESTS"
Wenxing Houb4d03cc2024-06-19 11:04:13 +08001925 run_test_memory_after_handshake_with_mfl 1024 "$MEMORY_USAGE_MFL_16K"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001926
1927 SKIP_NEXT="$SKIP_THIS_TESTS"
Wenxing Houb4d03cc2024-06-19 11:04:13 +08001928 run_test_memory_after_handshake_with_mfl 512 "$MEMORY_USAGE_MFL_16K"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001929}
1930
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001931cleanup() {
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001932 rm -f $CLI_OUT $SRV_OUT $PXY_OUT $SESSION
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001933 rm -f context_srv.txt
1934 rm -f context_cli.txt
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001935 test -n "${SRV_PID:-}" && kill $SRV_PID >/dev/null 2>&1
1936 test -n "${PXY_PID:-}" && kill $PXY_PID >/dev/null 2>&1
1937 test -n "${CLI_PID:-}" && kill $CLI_PID >/dev/null 2>&1
1938 test -n "${DOG_PID:-}" && kill $DOG_PID >/dev/null 2>&1
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001939 exit 1
1940}
1941
Manuel Pégourié-Gonnard9dea8bd2014-02-26 18:21:02 +01001942#
1943# MAIN
1944#
1945
Yanray Wang5b33f642023-02-28 11:56:59 +08001946# Make the outcome file path relative to the original directory, not
1947# to .../tests
1948case "$MBEDTLS_TEST_OUTCOME_FILE" in
1949 [!/]*)
1950 MBEDTLS_TEST_OUTCOME_FILE="$ORIGINAL_PWD/$MBEDTLS_TEST_OUTCOME_FILE"
1951 ;;
1952esac
1953
Andrzej Kurek9c061a22022-09-05 10:51:19 -04001954populate_enabled_hash_algs
1955
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001956# Optimize filters: if $FILTER and $EXCLUDE can be expressed as shell
1957# patterns rather than regular expressions, use a case statement instead
1958# of calling grep. To keep the optimizer simple, it is incomplete and only
1959# detects simple cases: plain substring, everything, nothing.
1960#
1961# As an exception, the character '.' is treated as an ordinary character
1962# if it is the only special character in the string. This is because it's
1963# rare to need "any one character", but needing a literal '.' is common
1964# (e.g. '-f "DTLS 1.2"').
1965need_grep=
1966case "$FILTER" in
1967 '^$') simple_filter=;;
1968 '.*') simple_filter='*';;
Gilles Peskineb09e0012020-09-29 23:48:39 +02001969 *[][$+*?\\^{\|}]*) # Regexp special characters (other than .), we need grep
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001970 need_grep=1;;
1971 *) # No regexp or shell-pattern special character
1972 simple_filter="*$FILTER*";;
1973esac
1974case "$EXCLUDE" in
1975 '^$') simple_exclude=;;
1976 '.*') simple_exclude='*';;
Gilles Peskineb09e0012020-09-29 23:48:39 +02001977 *[][$+*?\\^{\|}]*) # Regexp special characters (other than .), we need grep
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001978 need_grep=1;;
1979 *) # No regexp or shell-pattern special character
1980 simple_exclude="*$EXCLUDE*";;
1981esac
1982if [ -n "$need_grep" ]; then
1983 is_excluded () {
1984 ! echo "$1" | grep "$FILTER" | grep -q -v "$EXCLUDE"
1985 }
1986else
1987 is_excluded () {
1988 case "$1" in
1989 $simple_exclude) true;;
1990 $simple_filter) false;;
1991 *) true;;
1992 esac
1993 }
1994fi
1995
Jerry Yu50d07bd2023-11-06 10:49:01 +08001996# Filter tests according to TEST_SUITE_NAME
1997is_excluded_test_suite () {
1998 if [ -n "$RUN_TEST_SUITE" ]
1999 then
2000 case ",$RUN_TEST_SUITE," in
2001 *",$1,"*) false;;
2002 *) true;;
2003 esac
2004 else
2005 false
2006 fi
2007
2008}
2009
2010
Tomás González06956a12023-08-23 15:46:20 +01002011if [ "$LIST_TESTS" -eq 0 ];then
2012
2013 # sanity checks, avoid an avalanche of errors
2014 P_SRV_BIN="${P_SRV%%[ ]*}"
2015 P_CLI_BIN="${P_CLI%%[ ]*}"
2016 P_PXY_BIN="${P_PXY%%[ ]*}"
2017 if [ ! -x "$P_SRV_BIN" ]; then
2018 echo "Command '$P_SRV_BIN' is not an executable file"
Simon Butcher3c0d7b82016-05-23 11:13:17 +01002019 exit 1
2020 fi
Tomás González06956a12023-08-23 15:46:20 +01002021 if [ ! -x "$P_CLI_BIN" ]; then
2022 echo "Command '$P_CLI_BIN' is not an executable file"
2023 exit 1
2024 fi
2025 if [ ! -x "$P_PXY_BIN" ]; then
2026 echo "Command '$P_PXY_BIN' is not an executable file"
2027 exit 1
2028 fi
2029 if [ "$MEMCHECK" -gt 0 ]; then
2030 if which valgrind >/dev/null 2>&1; then :; else
2031 echo "Memcheck not possible. Valgrind not found"
2032 exit 1
2033 fi
2034 fi
2035 if which $OPENSSL >/dev/null 2>&1; then :; else
2036 echo "Command '$OPENSSL' not found"
2037 exit 1
2038 fi
2039
2040 # used by watchdog
2041 MAIN_PID="$$"
2042
2043 # We use somewhat arbitrary delays for tests:
2044 # - how long do we wait for the server to start (when lsof not available)?
2045 # - how long do we allow for the client to finish?
2046 # (not to check performance, just to avoid waiting indefinitely)
2047 # Things are slower with valgrind, so give extra time here.
2048 #
2049 # Note: without lsof, there is a trade-off between the running time of this
2050 # script and the risk of spurious errors because we didn't wait long enough.
2051 # The watchdog delay on the other hand doesn't affect normal running time of
2052 # the script, only the case where a client or server gets stuck.
2053 if [ "$MEMCHECK" -gt 0 ]; then
2054 START_DELAY=6
2055 DOG_DELAY=60
2056 else
2057 START_DELAY=2
2058 DOG_DELAY=20
2059 fi
2060
2061 # some particular tests need more time:
2062 # - for the client, we multiply the usual watchdog limit by a factor
2063 # - for the server, we sleep for a number of seconds after the client exits
2064 # see client_need_more_time() and server_needs_more_time()
2065 CLI_DELAY_FACTOR=1
2066 SRV_DELAY_SECONDS=0
2067
2068 # fix commands to use this port, force IPv4 while at it
2069 # +SRV_PORT will be replaced by either $SRV_PORT or $PXY_PORT later
2070 # Note: Using 'localhost' rather than 127.0.0.1 here is unwise, as on many
2071 # machines that will resolve to ::1, and we don't want ipv6 here.
2072 P_SRV="$P_SRV server_addr=127.0.0.1 server_port=$SRV_PORT"
2073 P_CLI="$P_CLI server_addr=127.0.0.1 server_port=+SRV_PORT"
2074 P_PXY="$P_PXY server_addr=127.0.0.1 server_port=$SRV_PORT listen_addr=127.0.0.1 listen_port=$PXY_PORT ${SEED:+"seed=$SEED"}"
2075 O_SRV="$O_SRV -accept $SRV_PORT"
2076 O_CLI="$O_CLI -connect 127.0.0.1:+SRV_PORT"
2077 G_SRV="$G_SRV -p $SRV_PORT"
2078 G_CLI="$G_CLI -p +SRV_PORT"
2079
2080 # Newer versions of OpenSSL have a syntax to enable all "ciphers", even
2081 # low-security ones. This covers not just cipher suites but also protocol
2082 # versions. It is necessary, for example, to use (D)TLS 1.0/1.1 on
2083 # OpenSSL 1.1.1f from Ubuntu 20.04. The syntax was only introduced in
2084 # OpenSSL 1.1.0 (21e0c1d23afff48601eb93135defddae51f7e2e3) and I can't find
2085 # a way to discover it from -help, so check the openssl version.
2086 case $($OPENSSL version) in
2087 "OpenSSL 0"*|"OpenSSL 1.0"*) :;;
2088 *)
2089 O_CLI="$O_CLI -cipher ALL@SECLEVEL=0"
2090 O_SRV="$O_SRV -cipher ALL@SECLEVEL=0"
2091 ;;
2092 esac
2093
2094 if [ -n "${OPENSSL_NEXT:-}" ]; then
2095 O_NEXT_SRV="$O_NEXT_SRV -accept $SRV_PORT"
2096 O_NEXT_SRV_NO_CERT="$O_NEXT_SRV_NO_CERT -accept $SRV_PORT"
2097 O_NEXT_SRV_EARLY_DATA="$O_NEXT_SRV_EARLY_DATA -accept $SRV_PORT"
2098 O_NEXT_CLI="$O_NEXT_CLI -connect 127.0.0.1:+SRV_PORT"
2099 O_NEXT_CLI_NO_CERT="$O_NEXT_CLI_NO_CERT -connect 127.0.0.1:+SRV_PORT"
2100 fi
2101
2102 if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
2103 G_NEXT_SRV="$G_NEXT_SRV -p $SRV_PORT"
2104 G_NEXT_SRV_NO_CERT="$G_NEXT_SRV_NO_CERT -p $SRV_PORT"
2105 fi
2106
2107 if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
2108 G_NEXT_CLI="$G_NEXT_CLI -p +SRV_PORT"
2109 G_NEXT_CLI_NO_CERT="$G_NEXT_CLI_NO_CERT -p +SRV_PORT localhost"
2110 fi
2111
2112 # Allow SHA-1, because many of our test certificates use it
2113 P_SRV="$P_SRV allow_sha1=1"
2114 P_CLI="$P_CLI allow_sha1=1"
2115
Simon Butcher3c0d7b82016-05-23 11:13:17 +01002116fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02002117# Also pick a unique name for intermediate files
2118SRV_OUT="srv_out.$$"
2119CLI_OUT="cli_out.$$"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02002120PXY_OUT="pxy_out.$$"
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02002121SESSION="session.$$"
2122
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +02002123SKIP_NEXT="NO"
2124
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01002125trap cleanup INT TERM HUP
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01002126
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002127# Basic test
2128
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02002129# Checks that:
2130# - things work with all ciphersuites active (used with config-full in all.sh)
Gilles Peskine799eee62021-06-02 22:14:15 +02002131# - the expected parameters are selected
Gilles Peskine35615262022-02-25 19:50:38 +01002132requires_ciphersuite_enabled TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002133requires_hash_alg SHA_512 # "signature_algorithm ext: 6"
Gilles Peskinecd4fe702024-09-07 19:50:17 +02002134requires_any_configs_enabled MBEDTLS_ECP_DP_CURVE25519_ENABLED \
2135 PSA_WANT_ECC_MONTGOMERY_255
Ronald Cronf95d1692023-03-14 17:19:42 +01002136run_test "Default, TLS 1.2" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02002137 "$P_SRV debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002138 "$P_CLI force_version=tls12" \
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002139 0 \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02002140 -s "Protocol is TLSv1.2" \
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02002141 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02002142 -s "client hello v3, signature_algorithm ext: 6" \
Gilles Peskine799eee62021-06-02 22:14:15 +02002143 -s "ECDHE curve: x25519" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02002144 -S "error" \
2145 -C "error"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02002146
Jerry Yuab082902021-12-23 18:02:22 +08002147requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine35615262022-02-25 19:50:38 +01002148requires_ciphersuite_enabled TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +00002149run_test "Default, DTLS" \
2150 "$P_SRV dtls=1" \
2151 "$P_CLI dtls=1" \
2152 0 \
2153 -s "Protocol is DTLSv1.2" \
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02002154 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256"
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +00002155
Hanno Becker721f7c12020-08-17 12:17:32 +01002156run_test "TLS client auth: required" \
2157 "$P_SRV auth_mode=required" \
2158 "$P_CLI" \
2159 0 \
2160 -s "Verifying peer X.509 certificate... ok"
2161
Glenn Strauss6eef5632022-01-23 08:37:02 -05002162run_test "key size: TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2163 "$P_SRV" \
2164 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2165 0 \
2166 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2167 -c "Key size is 256"
2168
2169run_test "key size: TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2170 "$P_SRV" \
2171 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2172 0 \
2173 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2174 -c "Key size is 128"
2175
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002176requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settidd43d7b2023-11-09 14:10:51 +01002177# server5.key.enc is in PEM format and AES-256-CBC crypted. Unfortunately PEM
2178# module does not support PSA dispatching so we need builtin support.
2179requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
2180requires_config_enabled MBEDTLS_AES_C
Sam Berryd50e8432024-06-19 11:43:03 +01002181requires_hash_alg MD5
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002182requires_hash_alg SHA_256
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002183run_test "TLS: password protected client key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002184 "$P_SRV force_version=tls12 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01002185 "$P_CLI crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key.enc key_pwd=PolarSSLTest" \
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002186 0
2187
2188requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settidd43d7b2023-11-09 14:10:51 +01002189# server5.key.enc is in PEM format and AES-256-CBC crypted. Unfortunately PEM
2190# module does not support PSA dispatching so we need builtin support.
2191requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
2192requires_config_enabled MBEDTLS_AES_C
Sam Berryd50e8432024-06-19 11:43:03 +01002193requires_hash_alg MD5
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002194requires_hash_alg SHA_256
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002195run_test "TLS: password protected server key" \
David Horstmann184c4f02024-07-01 17:01:28 +01002196 "$P_SRV crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key.enc key_pwd=PolarSSLTest" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002197 "$P_CLI force_version=tls12" \
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002198 0
2199
2200requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002201requires_config_enabled MBEDTLS_RSA_C
Valerio Settidd43d7b2023-11-09 14:10:51 +01002202# server5.key.enc is in PEM format and AES-256-CBC crypted. Unfortunately PEM
2203# module does not support PSA dispatching so we need builtin support.
2204requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
2205requires_config_enabled MBEDTLS_AES_C
Sam Berryd50e8432024-06-19 11:43:03 +01002206requires_hash_alg MD5
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002207requires_hash_alg SHA_256
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002208run_test "TLS: password protected server key, two certificates" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002209 "$P_SRV force_version=tls12\
David Horstmann184c4f02024-07-01 17:01:28 +01002210 key_file=$DATA_FILES_PATH/server5.key.enc key_pwd=PolarSSLTest crt_file=$DATA_FILES_PATH/server5.crt \
2211 key_file2=$DATA_FILES_PATH/server2.key.enc key_pwd2=PolarSSLTest crt_file2=$DATA_FILES_PATH/server2.crt" \
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002212 "$P_CLI" \
2213 0
2214
Hanno Becker746aaf32019-03-28 15:25:23 +00002215requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
2216run_test "CA callback on client" \
2217 "$P_SRV debug_level=3" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02002218 "$P_CLI ca_callback=1 debug_level=3 " \
Hanno Becker746aaf32019-03-28 15:25:23 +00002219 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01002220 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00002221 -S "error" \
2222 -C "error"
2223
2224requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
2225requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002226requires_hash_alg SHA_256
Hanno Becker746aaf32019-03-28 15:25:23 +00002227run_test "CA callback on server" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02002228 "$P_SRV auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01002229 "$P_CLI ca_callback=1 debug_level=3 crt_file=$DATA_FILES_PATH/server5.crt \
2230 key_file=$DATA_FILES_PATH/server5.key" \
Hanno Becker746aaf32019-03-28 15:25:23 +00002231 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01002232 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00002233 -s "Verifying peer X.509 certificate... ok" \
2234 -S "error" \
2235 -C "error"
2236
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002237# Test using an EC opaque private key for client authentication
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002238requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002239requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002240requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002241run_test "Opaque key for client authentication: ECDHE-ECDSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002242 "$P_SRV force_version=tls12 auth_mode=required crt_file=$DATA_FILES_PATH/server5.crt \
2243 key_file=$DATA_FILES_PATH/server5.key" \
2244 "$P_CLI key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2245 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=ecdsa-sign,none" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002246 0 \
2247 -c "key type: Opaque" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002248 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002249 -s "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002250 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002251 -S "error" \
2252 -C "error"
2253
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002254# Test using a RSA opaque private key for client authentication
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002255requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002256requires_config_enabled MBEDTLS_RSA_C
valeriof27472b2023-03-09 16:19:35 +01002257requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002258requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002259run_test "Opaque key for client authentication: ECDHE-RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002260 "$P_SRV force_version=tls12 auth_mode=required crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2261 key_file=$DATA_FILES_PATH/server2.key" \
2262 "$P_CLI key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2263 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002264 0 \
2265 -c "key type: Opaque" \
2266 -c "Ciphersuite is TLS-ECDHE-RSA" \
2267 -s "Verifying peer X.509 certificate... ok" \
2268 -s "Ciphersuite is TLS-ECDHE-RSA" \
2269 -S "error" \
2270 -C "error"
2271
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002272requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
2273requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002274requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002275run_test "Opaque key for client authentication: DHE-RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002276 "$P_SRV force_version=tls12 auth_mode=required crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2277 key_file=$DATA_FILES_PATH/server2.key" \
2278 "$P_CLI key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2279 key_file=$DATA_FILES_PATH/server2.key force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
Neil Armstrong36b02232022-06-30 11:16:53 +02002280 key_opaque_algs=rsa-sign-pkcs1,none" \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002281 0 \
2282 -c "key type: Opaque" \
2283 -c "Ciphersuite is TLS-DHE-RSA" \
2284 -s "Verifying peer X.509 certificate... ok" \
2285 -s "Ciphersuite is TLS-DHE-RSA" \
2286 -S "error" \
2287 -C "error"
2288
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002289# Test using an EC opaque private key for server authentication
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02002290requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002291requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002292requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002293run_test "Opaque key for server authentication: ECDHE-ECDSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002294 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2295 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=ecdsa-sign,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002296 "$P_CLI force_version=tls12" \
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02002297 0 \
2298 -c "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002299 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Gilles Peskine05bf89d2022-01-25 17:50:25 +01002300 -s "key types: Opaque, none" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002301 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02002302 -S "error" \
2303 -C "error"
2304
Neil Armstrong023bf8d2022-03-23 14:04:04 +01002305requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002306requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002307run_test "Opaque key for server authentication: ECDH-" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002308 "$P_SRV auth_mode=required key_opaque=1\
David Horstmann184c4f02024-07-01 17:01:28 +01002309 crt_file=$DATA_FILES_PATH/server5.ku-ka.crt\
2310 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=ecdh,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002311 "$P_CLI force_version=tls12" \
Neil Armstrong023bf8d2022-03-23 14:04:04 +01002312 0 \
2313 -c "Verifying peer X.509 certificate... ok" \
2314 -c "Ciphersuite is TLS-ECDH-" \
2315 -s "key types: Opaque, none" \
2316 -s "Ciphersuite is TLS-ECDH-" \
2317 -S "error" \
2318 -C "error"
2319
Neil Armstrong1948a202022-06-30 18:05:57 +02002320requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurekd6817462022-09-06 14:32:00 -04002321requires_config_disabled MBEDTLS_SSL_ASYNC_PRIVATE
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002322requires_hash_alg SHA_256
Andrzej Kurekd6817462022-09-06 14:32:00 -04002323run_test "Opaque key for server authentication: invalid key: decrypt with ECC key, no async" \
David Horstmann184c4f02024-07-01 17:01:28 +01002324 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2325 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=rsa-decrypt,none \
Andrzej Kurekd6817462022-09-06 14:32:00 -04002326 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002327 "$P_CLI force_version=tls12" \
Andrzej Kurekd6817462022-09-06 14:32:00 -04002328 1 \
2329 -s "key types: Opaque, none" \
2330 -s "error" \
2331 -c "error" \
2332 -c "Public key type mismatch"
2333
Andrzej Kurekd6817462022-09-06 14:32:00 -04002334requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
2335requires_config_enabled MBEDTLS_ECDSA_C
2336requires_config_enabled MBEDTLS_RSA_C
2337requires_config_disabled MBEDTLS_SSL_ASYNC_PRIVATE
2338requires_hash_alg SHA_256
2339run_test "Opaque key for server authentication: invalid key: ecdh with RSA key, no async" \
David Horstmann184c4f02024-07-01 17:01:28 +01002340 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2341 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=ecdh,none \
Andrzej Kurekd6817462022-09-06 14:32:00 -04002342 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002343 "$P_CLI force_version=tls12" \
Andrzej Kurekd6817462022-09-06 14:32:00 -04002344 1 \
2345 -s "key types: Opaque, none" \
2346 -s "error" \
2347 -c "error" \
2348 -c "Public key type mismatch"
2349
Andrzej Kurekd6817462022-09-06 14:32:00 -04002350requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurekd6817462022-09-06 14:32:00 -04002351requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
2352requires_hash_alg SHA_256
2353run_test "Opaque key for server authentication: invalid alg: decrypt with ECC key, async" \
David Horstmann184c4f02024-07-01 17:01:28 +01002354 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2355 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=rsa-decrypt,none \
Neil Armstrong36b02232022-06-30 11:16:53 +02002356 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002357 "$P_CLI force_version=tls12" \
Neil Armstrong36b02232022-06-30 11:16:53 +02002358 1 \
2359 -s "key types: Opaque, none" \
2360 -s "got ciphersuites in common, but none of them usable" \
2361 -s "error" \
2362 -c "error"
2363
Neil Armstrong36b02232022-06-30 11:16:53 +02002364requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrongeb4390b2022-05-27 10:26:02 +02002365requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurekd6817462022-09-06 14:32:00 -04002366requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002367requires_hash_alg SHA_256
Andrzej Kurekd6817462022-09-06 14:32:00 -04002368run_test "Opaque key for server authentication: invalid alg: ecdh with RSA key, async" \
David Horstmann184c4f02024-07-01 17:01:28 +01002369 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2370 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=ecdh,none \
Neil Armstrongeb4390b2022-05-27 10:26:02 +02002371 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002372 "$P_CLI force_version=tls12" \
Neil Armstrongeb4390b2022-05-27 10:26:02 +02002373 1 \
2374 -s "key types: Opaque, none" \
2375 -s "got ciphersuites in common, but none of them usable" \
2376 -s "error" \
2377 -c "error"
2378
Neil Armstrongeb4390b2022-05-27 10:26:02 +02002379requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002380requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002381run_test "Opaque key for server authentication: invalid alg: ECDHE-ECDSA with ecdh" \
David Horstmann184c4f02024-07-01 17:01:28 +01002382 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2383 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=ecdh,none \
Neil Armstrong36b02232022-06-30 11:16:53 +02002384 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002385 "$P_CLI force_version=tls12 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-CCM" \
Neil Armstrong36b02232022-06-30 11:16:53 +02002386 1 \
2387 -s "key types: Opaque, none" \
2388 -s "got ciphersuites in common, but none of them usable" \
2389 -s "error" \
2390 -c "error"
2391
Neil Armstrong167d82c2022-06-30 11:32:00 +02002392requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002393requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002394requires_hash_alg SHA_256
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002395requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Neil Armstrong4b102092022-07-01 09:42:29 +02002396run_test "Opaque keys for server authentication: EC keys with different algs, force ECDHE-ECDSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002397 "$P_SRV force_version=tls12 key_opaque=1 crt_file=$DATA_FILES_PATH/server7.crt \
2398 key_file=$DATA_FILES_PATH/server7.key key_opaque_algs=ecdh,none \
2399 crt_file2=$DATA_FILES_PATH/server5.crt key_file2=$DATA_FILES_PATH/server5.key \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002400 key_opaque_algs2=ecdsa-sign,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002401 "$P_CLI force_version=tls12" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002402 0 \
2403 -c "Verifying peer X.509 certificate... ok" \
2404 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002405 -c "CN=Polarssl Test EC CA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002406 -s "key types: Opaque, Opaque" \
2407 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
2408 -S "error" \
2409 -C "error"
2410
Neil Armstrong167d82c2022-06-30 11:32:00 +02002411requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002412requires_hash_alg SHA_384
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002413requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Neil Armstrong4b102092022-07-01 09:42:29 +02002414run_test "Opaque keys for server authentication: EC keys with different algs, force ECDH-ECDSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002415 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server7.crt \
2416 key_file=$DATA_FILES_PATH/server7.key key_opaque_algs=ecdsa-sign,none \
2417 crt_file2=$DATA_FILES_PATH/server5.crt key_file2=$DATA_FILES_PATH/server5.key \
Neil Armstrong4b102092022-07-01 09:42:29 +02002418 key_opaque_algs2=ecdh,none debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002419 "$P_CLI force_version=tls12 force_ciphersuite=TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002420 0 \
2421 -c "Verifying peer X.509 certificate... ok" \
2422 -c "Ciphersuite is TLS-ECDH-ECDSA" \
2423 -c "CN=Polarssl Test EC CA" \
2424 -s "key types: Opaque, Opaque" \
2425 -s "Ciphersuite is TLS-ECDH-ECDSA" \
2426 -S "error" \
2427 -C "error"
2428
Neil Armstrong4b102092022-07-01 09:42:29 +02002429requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002430requires_hash_alg SHA_384
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002431requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Neil Armstrong1948a202022-06-30 18:05:57 +02002432run_test "Opaque keys for server authentication: EC + RSA, force ECDHE-ECDSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002433 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2434 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=ecdsa-sign,none \
2435 crt_file2=$DATA_FILES_PATH/server2-sha256.crt \
2436 key_file2=$DATA_FILES_PATH/server2.key key_opaque_algs2=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002437 "$P_CLI force_version=tls12 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-CCM" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002438 0 \
2439 -c "Verifying peer X.509 certificate... ok" \
2440 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002441 -c "CN=Polarssl Test EC CA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002442 -s "key types: Opaque, Opaque" \
2443 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
2444 -S "error" \
2445 -C "error"
2446
Przemek Stekielc454aba2022-07-07 09:56:13 +02002447requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Przemek Stekielc454aba2022-07-07 09:56:13 +02002448requires_config_enabled MBEDTLS_RSA_C
Jerry Yuddda0502022-12-01 19:43:12 +08002449requires_config_enabled MBEDTLS_SSL_SRV_C
2450requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron6ec21232022-09-16 16:41:53 +02002451run_test "TLS 1.3 opaque key: no suitable algorithm found" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01002452 "$P_SRV debug_level=4 auth_mode=required key_opaque=1 key_opaque_algs=rsa-decrypt,none" \
Ronald Crone3196d22022-09-16 16:43:35 +02002453 "$P_CLI debug_level=4 key_opaque=1 key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002454 1 \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002455 -c "key type: Opaque" \
2456 -s "key types: Opaque, Opaque" \
2457 -c "error" \
Ronald Cron067a1e72022-09-16 13:44:49 +02002458 -s "no suitable signature algorithm"
Przemek Stekielc454aba2022-07-07 09:56:13 +02002459
2460requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Przemek Stekielc454aba2022-07-07 09:56:13 +02002461requires_config_enabled MBEDTLS_RSA_C
Jerry Yuddda0502022-12-01 19:43:12 +08002462requires_config_enabled MBEDTLS_SSL_SRV_C
2463requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron6ec21232022-09-16 16:41:53 +02002464run_test "TLS 1.3 opaque key: suitable algorithm found" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01002465 "$P_SRV debug_level=4 auth_mode=required key_opaque=1 key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Ronald Crone3196d22022-09-16 16:43:35 +02002466 "$P_CLI debug_level=4 key_opaque=1 key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002467 0 \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002468 -c "key type: Opaque" \
2469 -s "key types: Opaque, Opaque" \
2470 -C "error" \
Jerry Yuddda0502022-12-01 19:43:12 +08002471 -S "error"
Przemek Stekielc454aba2022-07-07 09:56:13 +02002472
2473requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Przemek Stekielc454aba2022-07-07 09:56:13 +02002474requires_config_enabled MBEDTLS_RSA_C
Jerry Yuddda0502022-12-01 19:43:12 +08002475requires_config_enabled MBEDTLS_SSL_SRV_C
2476requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron50969e32022-09-16 15:54:33 +02002477run_test "TLS 1.3 opaque key: first client sig alg not suitable" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01002478 "$P_SRV debug_level=4 auth_mode=required key_opaque=1 key_opaque_algs=rsa-sign-pss-sha512,none" \
Ronald Cron50969e32022-09-16 15:54:33 +02002479 "$P_CLI debug_level=4 sig_algs=rsa_pss_rsae_sha256,rsa_pss_rsae_sha512" \
2480 0 \
Ronald Cron50969e32022-09-16 15:54:33 +02002481 -s "key types: Opaque, Opaque" \
2482 -s "CertificateVerify signature failed with rsa_pss_rsae_sha256" \
2483 -s "CertificateVerify signature with rsa_pss_rsae_sha512" \
2484 -C "error" \
2485 -S "error" \
2486
2487requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron50969e32022-09-16 15:54:33 +02002488requires_config_enabled MBEDTLS_RSA_C
Jerry Yuddda0502022-12-01 19:43:12 +08002489requires_config_enabled MBEDTLS_SSL_SRV_C
2490requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron6ec21232022-09-16 16:41:53 +02002491run_test "TLS 1.3 opaque key: 2 keys on server, suitable algorithm found" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01002492 "$P_SRV debug_level=4 auth_mode=required key_opaque=1 key_opaque_algs2=ecdsa-sign,none key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Ronald Crone3196d22022-09-16 16:43:35 +02002493 "$P_CLI debug_level=4 key_opaque=1 key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002494 0 \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002495 -c "key type: Opaque" \
2496 -s "key types: Opaque, Opaque" \
2497 -C "error" \
2498 -S "error" \
2499
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002500# Test using a RSA opaque private key for server authentication
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002501requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002502requires_config_enabled MBEDTLS_RSA_C
valeriof27472b2023-03-09 16:19:35 +01002503requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002504requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002505run_test "Opaque key for server authentication: ECDHE-RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002506 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2507 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002508 "$P_CLI force_version=tls12" \
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002509 0 \
2510 -c "Verifying peer X.509 certificate... ok" \
2511 -c "Ciphersuite is TLS-ECDHE-RSA" \
2512 -s "key types: Opaque, none" \
2513 -s "Ciphersuite is TLS-ECDHE-RSA" \
2514 -S "error" \
2515 -C "error"
2516
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002517requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002518requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002519requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002520run_test "Opaque key for server authentication: DHE-RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002521 "$P_SRV key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2522 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002523 "$P_CLI force_version=tls12 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002524 0 \
2525 -c "Verifying peer X.509 certificate... ok" \
2526 -c "Ciphersuite is TLS-DHE-RSA" \
2527 -s "key types: Opaque, none" \
2528 -s "Ciphersuite is TLS-DHE-RSA" \
2529 -S "error" \
2530 -C "error"
2531
Neil Armstrong36b02232022-06-30 11:16:53 +02002532requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong1948a202022-06-30 18:05:57 +02002533requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002534requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002535run_test "Opaque key for server authentication: RSA-PSK" \
2536 "$P_SRV debug_level=1 key_opaque=1 key_opaque_algs=rsa-decrypt,none \
Gilles Peskine77c13e62024-04-29 16:09:52 +02002537 psk=73776f726466697368 psk_identity=foo" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002538 "$P_CLI force_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02002539 psk=73776f726466697368 psk_identity=foo" \
Neil Armstrong1948a202022-06-30 18:05:57 +02002540 0 \
2541 -c "Verifying peer X.509 certificate... ok" \
2542 -c "Ciphersuite is TLS-RSA-PSK-" \
2543 -s "key types: Opaque, Opaque" \
2544 -s "Ciphersuite is TLS-RSA-PSK-" \
2545 -S "error" \
2546 -C "error"
2547
Neil Armstrong1948a202022-06-30 18:05:57 +02002548requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
2549requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002550requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002551run_test "Opaque key for server authentication: RSA-" \
2552 "$P_SRV debug_level=3 key_opaque=1 key_opaque_algs=rsa-decrypt,none " \
Ronald Cronf95d1692023-03-14 17:19:42 +01002553 "$P_CLI force_version=tls12 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA256" \
Neil Armstrong1948a202022-06-30 18:05:57 +02002554 0 \
2555 -c "Verifying peer X.509 certificate... ok" \
2556 -c "Ciphersuite is TLS-RSA-" \
2557 -s "key types: Opaque, Opaque" \
2558 -s "Ciphersuite is TLS-RSA-" \
2559 -S "error" \
2560 -C "error"
2561
Neil Armstrong1948a202022-06-30 18:05:57 +02002562requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong36b02232022-06-30 11:16:53 +02002563requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002564requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002565run_test "Opaque key for server authentication: DHE-RSA, PSS instead of PKCS1" \
David Horstmann184c4f02024-07-01 17:01:28 +01002566 "$P_SRV auth_mode=required key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2567 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pss,none debug_level=1" \
2568 "$P_CLI crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2569 key_file=$DATA_FILES_PATH/server2.key force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
Neil Armstrong36b02232022-06-30 11:16:53 +02002570 1 \
2571 -s "key types: Opaque, none" \
2572 -s "got ciphersuites in common, but none of them usable" \
2573 -s "error" \
2574 -c "error"
2575
Neil Armstrong167d82c2022-06-30 11:32:00 +02002576requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong167d82c2022-06-30 11:32:00 +02002577requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002578requires_hash_alg SHA_256
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002579requires_config_disabled MBEDTLS_X509_REMOVE_INFO
valeriof27472b2023-03-09 16:19:35 +01002580requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Neil Armstrong1948a202022-06-30 18:05:57 +02002581run_test "Opaque keys for server authentication: RSA keys with different algs" \
David Horstmann184c4f02024-07-01 17:01:28 +01002582 "$P_SRV force_version=tls12 auth_mode=required key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2583 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pss,none \
2584 crt_file2=$DATA_FILES_PATH/server4.crt \
2585 key_file2=$DATA_FILES_PATH/server4.key key_opaque_algs2=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002586 "$P_CLI force_version=tls12" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002587 0 \
2588 -c "Verifying peer X.509 certificate... ok" \
2589 -c "Ciphersuite is TLS-ECDHE-RSA" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002590 -c "CN=Polarssl Test EC CA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002591 -s "key types: Opaque, Opaque" \
2592 -s "Ciphersuite is TLS-ECDHE-RSA" \
2593 -S "error" \
2594 -C "error"
2595
Neil Armstrong167d82c2022-06-30 11:32:00 +02002596requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong167d82c2022-06-30 11:32:00 +02002597requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002598requires_hash_alg SHA_384
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002599requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Neil Armstrong1948a202022-06-30 18:05:57 +02002600run_test "Opaque keys for server authentication: EC + RSA, force DHE-RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002601 "$P_SRV auth_mode=required key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2602 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=ecdsa-sign,none \
2603 crt_file2=$DATA_FILES_PATH/server4.crt \
2604 key_file2=$DATA_FILES_PATH/server4.key key_opaque_algs2=rsa-sign-pkcs1,none" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002605 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002606 0 \
2607 -c "Verifying peer X.509 certificate... ok" \
2608 -c "Ciphersuite is TLS-DHE-RSA" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002609 -c "CN=Polarssl Test EC CA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002610 -s "key types: Opaque, Opaque" \
2611 -s "Ciphersuite is TLS-DHE-RSA" \
2612 -S "error" \
2613 -C "error"
2614
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002615# Test using an EC opaque private key for client/server authentication
Przemyslaw Stekiel575f23c2021-10-06 11:31:49 +02002616requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002617requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002618requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002619run_test "Opaque key for client/server authentication: ECDHE-ECDSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002620 "$P_SRV force_version=tls12 auth_mode=required key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2621 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=ecdsa-sign,none" \
2622 "$P_CLI key_opaque=1 crt_file=$DATA_FILES_PATH/server5.crt \
2623 key_file=$DATA_FILES_PATH/server5.key key_opaque_algs=ecdsa-sign,none" \
Przemyslaw Stekiel575f23c2021-10-06 11:31:49 +02002624 0 \
2625 -c "key type: Opaque" \
2626 -c "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002627 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Gilles Peskine05bf89d2022-01-25 17:50:25 +01002628 -s "key types: Opaque, none" \
Przemyslaw Stekiel575f23c2021-10-06 11:31:49 +02002629 -s "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002630 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Simon Butcher8e004102016-10-14 00:48:33 +01002631 -S "error" \
2632 -C "error"
2633
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002634# Test using a RSA opaque private key for client/server authentication
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002635requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002636requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002637requires_hash_alg SHA_256
valeriof27472b2023-03-09 16:19:35 +01002638requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Neil Armstrong1948a202022-06-30 18:05:57 +02002639run_test "Opaque key for client/server authentication: ECDHE-RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002640 "$P_SRV auth_mode=required key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2641 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
2642 "$P_CLI force_version=tls12 key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2643 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002644 0 \
2645 -c "key type: Opaque" \
2646 -c "Verifying peer X.509 certificate... ok" \
2647 -c "Ciphersuite is TLS-ECDHE-RSA" \
2648 -s "key types: Opaque, none" \
2649 -s "Verifying peer X.509 certificate... ok" \
2650 -s "Ciphersuite is TLS-ECDHE-RSA" \
2651 -S "error" \
2652 -C "error"
2653
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002654requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002655requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002656requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002657run_test "Opaque key for client/server authentication: DHE-RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01002658 "$P_SRV auth_mode=required key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2659 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
2660 "$P_CLI key_opaque=1 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
2661 key_file=$DATA_FILES_PATH/server2.key key_opaque_algs=rsa-sign-pkcs1,none \
Neil Armstrong36b02232022-06-30 11:16:53 +02002662 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002663 0 \
2664 -c "key type: Opaque" \
2665 -c "Verifying peer X.509 certificate... ok" \
2666 -c "Ciphersuite is TLS-DHE-RSA" \
2667 -s "key types: Opaque, none" \
2668 -s "Verifying peer X.509 certificate... ok" \
2669 -s "Ciphersuite is TLS-DHE-RSA" \
2670 -S "error" \
2671 -C "error"
2672
Neil Armstrong36b02232022-06-30 11:16:53 +02002673
Hanno Becker9b5853c2018-11-16 17:28:40 +00002674# Test ciphersuites which we expect to be fully supported by PSA Crypto
2675# and check that we don't fall back to Mbed TLS' internal crypto primitives.
2676run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM
2677run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
2678run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM
2679run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
2680run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
2681run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
2682run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA
2683run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
2684run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
2685
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002686requires_config_enabled PSA_WANT_ECC_SECP_R1_521
Hanno Becker354e2482019-01-08 11:40:25 +00002687run_test_psa_force_curve "secp521r1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002688requires_config_enabled PSA_WANT_ECC_BRAINPOOL_P_R1_512
Hanno Becker354e2482019-01-08 11:40:25 +00002689run_test_psa_force_curve "brainpoolP512r1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002690requires_config_enabled PSA_WANT_ECC_SECP_R1_384
Hanno Becker354e2482019-01-08 11:40:25 +00002691run_test_psa_force_curve "secp384r1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002692requires_config_enabled PSA_WANT_ECC_BRAINPOOL_P_R1_384
Hanno Becker354e2482019-01-08 11:40:25 +00002693run_test_psa_force_curve "brainpoolP384r1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002694requires_config_enabled PSA_WANT_ECC_SECP_R1_256
Hanno Becker354e2482019-01-08 11:40:25 +00002695run_test_psa_force_curve "secp256r1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002696requires_config_enabled PSA_WANT_ECC_SECP_K1_256
Hanno Becker354e2482019-01-08 11:40:25 +00002697run_test_psa_force_curve "secp256k1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002698requires_config_enabled PSA_WANT_ECC_BRAINPOOL_P_R1_256
Hanno Becker354e2482019-01-08 11:40:25 +00002699run_test_psa_force_curve "brainpoolP256r1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002700requires_config_enabled PSA_WANT_ECC_SECP_R1_224
Hanno Becker354e2482019-01-08 11:40:25 +00002701run_test_psa_force_curve "secp224r1"
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01002702## SECP224K1 is buggy via the PSA API
Dave Rodgman017a1992022-03-31 14:07:01 +01002703## (https://github.com/Mbed-TLS/mbedtls/issues/3541),
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01002704## so it is disabled in PSA even when it's enabled in Mbed TLS.
2705## The proper dependency would be on PSA_WANT_ECC_SECP_K1_224 but
2706## dependencies on PSA symbols in ssl-opt.sh are not implemented yet.
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002707#requires_config_enabled PSA_WANT_ECC_SECP_K1_224
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01002708#run_test_psa_force_curve "secp224k1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002709requires_config_enabled PSA_WANT_ECC_SECP_R1_192
Hanno Becker354e2482019-01-08 11:40:25 +00002710run_test_psa_force_curve "secp192r1"
Manuel Pégourié-Gonnard22334a22023-10-19 11:27:33 +02002711requires_config_enabled PSA_WANT_ECC_SECP_K1_192
Hanno Becker354e2482019-01-08 11:40:25 +00002712run_test_psa_force_curve "secp192k1"
2713
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01002714# Test current time in ServerHello
2715requires_config_enabled MBEDTLS_HAVE_TIME
2716run_test "ServerHello contains gmt_unix_time" \
2717 "$P_SRV debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002718 "$P_CLI force_version=tls12 debug_level=3" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01002719 0 \
2720 -f "check_server_hello_time" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002721 -F "check_server_hello_time"
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01002722
2723# Test for uniqueness of IVs in AEAD ciphersuites
Gilles Peskinebc70a182017-05-09 15:59:24 +02002724run_test "Unique IV in GCM" \
2725 "$P_SRV exchanges=20 debug_level=4" \
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02002726 "$P_CLI exchanges=20 debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002727 0 \
2728 -u "IV used" \
2729 -U "IV used"
2730
Andrzej Kurekec71b092022-11-15 10:21:50 -05002731# Test for correctness of sent single supported algorithm
Gilles Peskinecd4fe702024-09-07 19:50:17 +02002732requires_any_configs_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED \
2733 PSA_WANT_ECC_SECP_R1_256
Andrzej Kurekec71b092022-11-15 10:21:50 -05002734requires_config_enabled MBEDTLS_DEBUG_C
2735requires_config_enabled MBEDTLS_SSL_CLI_C
Paul Elliott3b4ceda2022-11-17 12:47:10 +00002736requires_config_enabled MBEDTLS_SSL_SRV_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002737requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
2738requires_pk_alg "ECDSA"
Andrzej Kurekec71b092022-11-15 10:21:50 -05002739requires_hash_alg SHA_256
Paul Elliottf6e342c2022-11-17 12:50:29 +00002740run_test "Single supported algorithm sending: mbedtls client" \
Andrzej Kurekec71b092022-11-15 10:21:50 -05002741 "$P_SRV sig_algs=ecdsa_secp256r1_sha256 auth_mode=required" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002742 "$P_CLI force_version=tls12 sig_algs=ecdsa_secp256r1_sha256 debug_level=3" \
Andrzej Kurekec71b092022-11-15 10:21:50 -05002743 0 \
2744 -c "Supported Signature Algorithm found: 04 03"
2745
Paul Elliottf6e342c2022-11-17 12:50:29 +00002746requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
2747requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskinecd4fe702024-09-07 19:50:17 +02002748requires_any_configs_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED \
2749 PSA_WANT_ECC_SECP_R1_256
Paul Elliottf6e342c2022-11-17 12:50:29 +00002750requires_hash_alg SHA_256
2751run_test "Single supported algorithm sending: openssl client" \
2752 "$P_SRV sig_algs=ecdsa_secp256r1_sha256 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01002753 "$O_CLI -cert $DATA_FILES_PATH/server6.crt \
2754 -key $DATA_FILES_PATH/server6.key" \
Paul Elliottf6e342c2022-11-17 12:50:29 +00002755 0
2756
Janos Follathee11be62019-04-04 12:03:30 +01002757# Tests for certificate verification callback
2758run_test "Configuration-specific CRT verification callback" \
2759 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard843a00d2024-08-16 09:53:41 +02002760 "$P_CLI context_crt_cb=0 debug_level=3" \
Janos Follathee11be62019-04-04 12:03:30 +01002761 0 \
Janos Follathee11be62019-04-04 12:03:30 +01002762 -S "error" \
2763 -c "Verify requested for " \
2764 -c "Use configuration-specific verification callback" \
2765 -C "Use context-specific verification callback" \
2766 -C "error"
2767
Hanno Beckerefb440a2019-04-03 13:04:33 +01002768run_test "Context-specific CRT verification callback" \
2769 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard843a00d2024-08-16 09:53:41 +02002770 "$P_CLI context_crt_cb=1 debug_level=3" \
Hanno Beckerefb440a2019-04-03 13:04:33 +01002771 0 \
Hanno Beckerefb440a2019-04-03 13:04:33 +01002772 -S "error" \
Janos Follathee11be62019-04-04 12:03:30 +01002773 -c "Verify requested for " \
2774 -c "Use context-specific verification callback" \
2775 -C "Use configuration-specific verification callback" \
Hanno Beckerefb440a2019-04-03 13:04:33 +01002776 -C "error"
2777
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01002778# Tests for SHA-1 support
Gilles Peskine3b81ea12024-04-29 17:42:52 +02002779requires_hash_alg SHA_1
Gilles Peskinebc70a182017-05-09 15:59:24 +02002780run_test "SHA-1 forbidden by default in server certificate" \
David Horstmann184c4f02024-07-01 17:01:28 +01002781 "$P_SRV key_file=$DATA_FILES_PATH/server2.key crt_file=$DATA_FILES_PATH/server2.crt" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002782 "$P_CLI debug_level=2 force_version=tls12 allow_sha1=0" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002783 1 \
2784 -c "The certificate is signed with an unacceptable hash"
2785
Gilles Peskine3b81ea12024-04-29 17:42:52 +02002786requires_hash_alg SHA_1
Gilles Peskinebc70a182017-05-09 15:59:24 +02002787run_test "SHA-1 explicitly allowed in server certificate" \
David Horstmann184c4f02024-07-01 17:01:28 +01002788 "$P_SRV key_file=$DATA_FILES_PATH/server2.key crt_file=$DATA_FILES_PATH/server2.crt" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002789 "$P_CLI force_version=tls12 allow_sha1=1" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002790 0
2791
2792run_test "SHA-256 allowed by default in server certificate" \
David Horstmann184c4f02024-07-01 17:01:28 +01002793 "$P_SRV key_file=$DATA_FILES_PATH/server2.key crt_file=$DATA_FILES_PATH/server2-sha256.crt" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002794 "$P_CLI force_version=tls12 allow_sha1=0" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002795 0
2796
Gilles Peskine3b81ea12024-04-29 17:42:52 +02002797requires_hash_alg SHA_1
2798requires_config_enabled MBEDTLS_RSA_C
Gilles Peskinebc70a182017-05-09 15:59:24 +02002799run_test "SHA-1 forbidden by default in client certificate" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002800 "$P_SRV force_version=tls12 auth_mode=required allow_sha1=0" \
David Horstmann184c4f02024-07-01 17:01:28 +01002801 "$P_CLI key_file=$DATA_FILES_PATH/cli-rsa.key crt_file=$DATA_FILES_PATH/cli-rsa-sha1.crt" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002802 1 \
2803 -s "The certificate is signed with an unacceptable hash"
2804
Gilles Peskine3b81ea12024-04-29 17:42:52 +02002805requires_hash_alg SHA_1
2806requires_config_enabled MBEDTLS_RSA_C
Gilles Peskinebc70a182017-05-09 15:59:24 +02002807run_test "SHA-1 explicitly allowed in client certificate" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002808 "$P_SRV force_version=tls12 auth_mode=required allow_sha1=1" \
David Horstmann184c4f02024-07-01 17:01:28 +01002809 "$P_CLI key_file=$DATA_FILES_PATH/cli-rsa.key crt_file=$DATA_FILES_PATH/cli-rsa-sha1.crt" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002810 0
2811
Gilles Peskine3b81ea12024-04-29 17:42:52 +02002812requires_config_enabled MBEDTLS_RSA_C
2813requires_hash_alg SHA_256
Gilles Peskinebc70a182017-05-09 15:59:24 +02002814run_test "SHA-256 allowed by default in client certificate" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002815 "$P_SRV force_version=tls12 auth_mode=required allow_sha1=0" \
David Horstmann184c4f02024-07-01 17:01:28 +01002816 "$P_CLI key_file=$DATA_FILES_PATH/cli-rsa.key crt_file=$DATA_FILES_PATH/cli-rsa-sha256.crt" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002817 0
2818
Hanno Becker7ae8a762018-08-14 15:43:35 +01002819# Tests for datagram packing
Jerry Yuab082902021-12-23 18:02:22 +08002820requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker7ae8a762018-08-14 15:43:35 +01002821run_test "DTLS: multiple records in same datagram, client and server" \
2822 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
2823 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
2824 0 \
2825 -c "next record in same datagram" \
2826 -s "next record in same datagram"
2827
Jerry Yuab082902021-12-23 18:02:22 +08002828requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker7ae8a762018-08-14 15:43:35 +01002829run_test "DTLS: multiple records in same datagram, client only" \
2830 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
2831 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
2832 0 \
2833 -s "next record in same datagram" \
2834 -C "next record in same datagram"
2835
Jerry Yuab082902021-12-23 18:02:22 +08002836requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker7ae8a762018-08-14 15:43:35 +01002837run_test "DTLS: multiple records in same datagram, server only" \
2838 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
2839 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
2840 0 \
2841 -S "next record in same datagram" \
2842 -c "next record in same datagram"
2843
Jerry Yuab082902021-12-23 18:02:22 +08002844requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker7ae8a762018-08-14 15:43:35 +01002845run_test "DTLS: multiple records in same datagram, neither client nor server" \
2846 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
2847 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
2848 0 \
2849 -S "next record in same datagram" \
2850 -C "next record in same datagram"
2851
Jarno Lamsa2937d812019-06-04 11:33:23 +03002852# Tests for Context serialization
2853
2854requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002855run_test "Context serialization, client serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002856 "$P_SRV dtls=1 serialize=0 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002857 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2858 0 \
2859 -c "Deserializing connection..." \
2860 -S "Deserializing connection..."
2861
2862requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2863run_test "Context serialization, client serializes, ChaChaPoly" \
2864 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2865 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2866 0 \
2867 -c "Deserializing connection..." \
2868 -S "Deserializing connection..."
2869
2870requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2871run_test "Context serialization, client serializes, GCM" \
2872 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2873 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002874 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002875 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002876 -S "Deserializing connection..."
2877
Jerry Yuab082902021-12-23 18:02:22 +08002878requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsa2937d812019-06-04 11:33:23 +03002879requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002880requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2881run_test "Context serialization, client serializes, with CID" \
2882 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
2883 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
2884 0 \
2885 -c "Deserializing connection..." \
2886 -S "Deserializing connection..."
2887
2888requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002889run_test "Context serialization, server serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002890 "$P_SRV dtls=1 serialize=1 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002891 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2892 0 \
2893 -C "Deserializing connection..." \
2894 -s "Deserializing connection..."
2895
2896requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2897run_test "Context serialization, server serializes, ChaChaPoly" \
2898 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2899 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2900 0 \
2901 -C "Deserializing connection..." \
2902 -s "Deserializing connection..."
2903
2904requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2905run_test "Context serialization, server serializes, GCM" \
2906 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2907 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002908 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002909 -C "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002910 -s "Deserializing connection..."
2911
Jerry Yuab082902021-12-23 18:02:22 +08002912requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsa2937d812019-06-04 11:33:23 +03002913requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002914requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2915run_test "Context serialization, server serializes, with CID" \
2916 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
2917 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
2918 0 \
2919 -C "Deserializing connection..." \
2920 -s "Deserializing connection..."
2921
2922requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002923run_test "Context serialization, both serialize, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002924 "$P_SRV dtls=1 serialize=1 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002925 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2926 0 \
2927 -c "Deserializing connection..." \
2928 -s "Deserializing connection..."
2929
2930requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2931run_test "Context serialization, both serialize, ChaChaPoly" \
2932 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2933 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2934 0 \
2935 -c "Deserializing connection..." \
2936 -s "Deserializing connection..."
2937
2938requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2939run_test "Context serialization, both serialize, GCM" \
2940 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2941 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002942 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002943 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002944 -s "Deserializing connection..."
2945
Jerry Yuab082902021-12-23 18:02:22 +08002946requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsac2376f02019-06-06 10:44:14 +03002947requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002948requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2949run_test "Context serialization, both serialize, with CID" \
2950 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
2951 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
2952 0 \
2953 -c "Deserializing connection..." \
2954 -s "Deserializing connection..."
2955
2956requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002957run_test "Context serialization, re-init, client serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002958 "$P_SRV dtls=1 serialize=0 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002959 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2960 0 \
2961 -c "Deserializing connection..." \
2962 -S "Deserializing connection..."
2963
Jerry Yuab082902021-12-23 18:02:22 +08002964requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002965requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2966run_test "Context serialization, re-init, client serializes, ChaChaPoly" \
2967 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2968 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2969 0 \
2970 -c "Deserializing connection..." \
2971 -S "Deserializing connection..."
2972
2973requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2974run_test "Context serialization, re-init, client serializes, GCM" \
2975 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2976 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002977 0 \
2978 -c "Deserializing connection..." \
2979 -S "Deserializing connection..."
2980
Jerry Yuab082902021-12-23 18:02:22 +08002981requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsac2376f02019-06-06 10:44:14 +03002982requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002983requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2984run_test "Context serialization, re-init, client serializes, with CID" \
2985 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
2986 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
2987 0 \
2988 -c "Deserializing connection..." \
2989 -S "Deserializing connection..."
2990
2991requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002992run_test "Context serialization, re-init, server serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002993 "$P_SRV dtls=1 serialize=2 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002994 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2995 0 \
2996 -C "Deserializing connection..." \
2997 -s "Deserializing connection..."
2998
2999requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
3000run_test "Context serialization, re-init, server serializes, ChaChaPoly" \
3001 "$P_SRV dtls=1 serialize=2 exchanges=2" \
3002 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
3003 0 \
3004 -C "Deserializing connection..." \
3005 -s "Deserializing connection..."
3006
3007requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
3008run_test "Context serialization, re-init, server serializes, GCM" \
3009 "$P_SRV dtls=1 serialize=2 exchanges=2" \
3010 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03003011 0 \
3012 -C "Deserializing connection..." \
3013 -s "Deserializing connection..."
3014
Jerry Yuab082902021-12-23 18:02:22 +08003015requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsac2376f02019-06-06 10:44:14 +03003016requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01003017requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
3018run_test "Context serialization, re-init, server serializes, with CID" \
3019 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
3020 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
3021 0 \
3022 -C "Deserializing connection..." \
3023 -s "Deserializing connection..."
3024
3025requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01003026run_test "Context serialization, re-init, both serialize, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02003027 "$P_SRV dtls=1 serialize=2 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01003028 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3029 0 \
3030 -c "Deserializing connection..." \
3031 -s "Deserializing connection..."
3032
3033requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
3034run_test "Context serialization, re-init, both serialize, ChaChaPoly" \
3035 "$P_SRV dtls=1 serialize=2 exchanges=2" \
3036 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
3037 0 \
3038 -c "Deserializing connection..." \
3039 -s "Deserializing connection..."
3040
3041requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
3042run_test "Context serialization, re-init, both serialize, GCM" \
3043 "$P_SRV dtls=1 serialize=2 exchanges=2" \
3044 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03003045 0 \
3046 -c "Deserializing connection..." \
3047 -s "Deserializing connection..."
3048
Jerry Yuab082902021-12-23 18:02:22 +08003049requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker1b18fd32019-08-30 11:18:59 +01003050requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
3051requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
3052run_test "Context serialization, re-init, both serialize, with CID" \
3053 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
3054 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
3055 0 \
3056 -c "Deserializing connection..." \
3057 -s "Deserializing connection..."
3058
Jerry Yuab082902021-12-23 18:02:22 +08003059requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Piotr Nowicki3de298f2020-04-16 14:35:19 +02003060requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
3061run_test "Saving the serialized context to a file" \
3062 "$P_SRV dtls=1 serialize=1 context_file=context_srv.txt" \
3063 "$P_CLI dtls=1 serialize=1 context_file=context_cli.txt" \
3064 0 \
3065 -s "Save serialized context to a file... ok" \
3066 -c "Save serialized context to a file... ok"
3067rm -f context_srv.txt
3068rm -f context_cli.txt
3069
Hanno Becker7cf463e2019-04-09 18:08:47 +01003070# Tests for DTLS Connection ID extension
3071
Hanno Becker7cf463e2019-04-09 18:08:47 +01003072# So far, the CID API isn't implemented, so we can't
3073# grep for output witnessing its use. This needs to be
3074# changed once the CID extension is implemented.
3075
Jerry Yuab082902021-12-23 18:02:22 +08003076requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003077requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003078run_test "Connection ID: Cli enabled, Srv disabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003079 "$P_SRV debug_level=3 dtls=1 cid=0" \
3080 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3081 0 \
3082 -s "Disable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003083 -s "found CID extension" \
3084 -s "Client sent CID extension, but CID disabled" \
Hanno Becker6b78c832019-04-25 17:01:43 +01003085 -c "Enable use of CID extension." \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003086 -c "client hello, adding CID extension" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003087 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003088 -C "found CID extension" \
3089 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003090 -C "Copy CIDs into SSL transform" \
3091 -c "Use of Connection ID was rejected by the server"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003092
Jerry Yuab082902021-12-23 18:02:22 +08003093requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003094requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003095run_test "Connection ID: Cli disabled, Srv enabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003096 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3097 "$P_CLI debug_level=3 dtls=1 cid=0" \
3098 0 \
3099 -c "Disable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003100 -C "client hello, adding CID extension" \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003101 -S "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003102 -s "Enable use of CID extension." \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003103 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003104 -C "found CID extension" \
3105 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003106 -C "Copy CIDs into SSL transform" \
Hanno Beckerb3e9dd52019-05-08 13:19:53 +01003107 -s "Use of Connection ID was not offered by client"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003108
Jerry Yuab082902021-12-23 18:02:22 +08003109requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003110requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003111run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003112 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
3113 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef" \
3114 0 \
3115 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003116 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003117 -c "client hello, adding CID extension" \
3118 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003119 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003120 -s "server hello, adding CID extension" \
3121 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003122 -c "Use of CID extension negotiated" \
3123 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003124 -c "Copy CIDs into SSL transform" \
3125 -c "Peer CID (length 2 Bytes): de ad" \
3126 -s "Peer CID (length 2 Bytes): be ef" \
3127 -s "Use of Connection ID has been negotiated" \
3128 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003129
Jerry Yuab082902021-12-23 18:02:22 +08003130requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003131requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003132run_test "Connection ID, 3D: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003133 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003134 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead" \
3135 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef" \
3136 0 \
3137 -c "Enable use of CID extension." \
3138 -s "Enable use of CID extension." \
3139 -c "client hello, adding CID extension" \
3140 -s "found CID extension" \
3141 -s "Use of CID extension negotiated" \
3142 -s "server hello, adding CID extension" \
3143 -c "found CID extension" \
3144 -c "Use of CID extension negotiated" \
3145 -s "Copy CIDs into SSL transform" \
3146 -c "Copy CIDs into SSL transform" \
3147 -c "Peer CID (length 2 Bytes): de ad" \
3148 -s "Peer CID (length 2 Bytes): be ef" \
3149 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003150 -c "Use of Connection ID has been negotiated" \
3151 -c "ignoring unexpected CID" \
3152 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003153
Jerry Yuab082902021-12-23 18:02:22 +08003154requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003155requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003156run_test "Connection ID, MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
3157 -p "$P_PXY mtu=800" \
3158 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
3159 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
3160 0 \
3161 -c "Enable use of CID extension." \
3162 -s "Enable use of CID extension." \
3163 -c "client hello, adding CID extension" \
3164 -s "found CID extension" \
3165 -s "Use of CID extension negotiated" \
3166 -s "server hello, adding CID extension" \
3167 -c "found CID extension" \
3168 -c "Use of CID extension negotiated" \
3169 -s "Copy CIDs into SSL transform" \
3170 -c "Copy CIDs into SSL transform" \
3171 -c "Peer CID (length 2 Bytes): de ad" \
3172 -s "Peer CID (length 2 Bytes): be ef" \
3173 -s "Use of Connection ID has been negotiated" \
3174 -c "Use of Connection ID has been negotiated"
3175
Jerry Yuab082902021-12-23 18:02:22 +08003176requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003177requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003178run_test "Connection ID, 3D+MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003179 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003180 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
3181 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
3182 0 \
3183 -c "Enable use of CID extension." \
3184 -s "Enable use of CID extension." \
3185 -c "client hello, adding CID extension" \
3186 -s "found CID extension" \
3187 -s "Use of CID extension negotiated" \
3188 -s "server hello, adding CID extension" \
3189 -c "found CID extension" \
3190 -c "Use of CID extension negotiated" \
3191 -s "Copy CIDs into SSL transform" \
3192 -c "Copy CIDs into SSL transform" \
3193 -c "Peer CID (length 2 Bytes): de ad" \
3194 -s "Peer CID (length 2 Bytes): be ef" \
3195 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003196 -c "Use of Connection ID has been negotiated" \
3197 -c "ignoring unexpected CID" \
3198 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003199
Jerry Yuab082902021-12-23 18:02:22 +08003200requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003201requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003202run_test "Connection ID: Cli+Srv enabled, Cli CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003203 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3204 "$P_CLI debug_level=3 dtls=1 cid=1" \
3205 0 \
3206 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003207 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003208 -c "client hello, adding CID extension" \
3209 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003210 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003211 -s "server hello, adding CID extension" \
3212 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003213 -c "Use of CID extension negotiated" \
3214 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003215 -c "Copy CIDs into SSL transform" \
3216 -c "Peer CID (length 4 Bytes): de ad be ef" \
3217 -s "Peer CID (length 0 Bytes):" \
3218 -s "Use of Connection ID has been negotiated" \
3219 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003220
Jerry Yuab082902021-12-23 18:02:22 +08003221requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003222requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003223run_test "Connection ID: Cli+Srv enabled, Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003224 "$P_SRV debug_level=3 dtls=1 cid=1" \
3225 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3226 0 \
3227 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003228 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003229 -c "client hello, adding CID extension" \
3230 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003231 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003232 -s "server hello, adding CID extension" \
3233 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003234 -c "Use of CID extension negotiated" \
3235 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003236 -c "Copy CIDs into SSL transform" \
3237 -s "Peer CID (length 4 Bytes): de ad be ef" \
3238 -c "Peer CID (length 0 Bytes):" \
3239 -s "Use of Connection ID has been negotiated" \
3240 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003241
Jerry Yuab082902021-12-23 18:02:22 +08003242requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003243requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003244run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003245 "$P_SRV debug_level=3 dtls=1 cid=1" \
3246 "$P_CLI debug_level=3 dtls=1 cid=1" \
3247 0 \
3248 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003249 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003250 -c "client hello, adding CID extension" \
3251 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003252 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003253 -s "server hello, adding CID extension" \
3254 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003255 -c "Use of CID extension negotiated" \
3256 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003257 -c "Copy CIDs into SSL transform" \
3258 -S "Use of Connection ID has been negotiated" \
3259 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003260
Hanno Beckera0e20d02019-05-15 14:03:01 +01003261requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003262run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003263 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
3264 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3265 0 \
3266 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003267 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003268 -c "client hello, adding CID extension" \
3269 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003270 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003271 -s "server hello, adding CID extension" \
3272 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003273 -c "Use of CID extension negotiated" \
3274 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003275 -c "Copy CIDs into SSL transform" \
3276 -c "Peer CID (length 2 Bytes): de ad" \
3277 -s "Peer CID (length 2 Bytes): be ef" \
3278 -s "Use of Connection ID has been negotiated" \
3279 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003280
Hanno Beckera0e20d02019-05-15 14:03:01 +01003281requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003282run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003283 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3284 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3285 0 \
3286 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003287 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003288 -c "client hello, adding CID extension" \
3289 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003290 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003291 -s "server hello, adding CID extension" \
3292 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003293 -c "Use of CID extension negotiated" \
3294 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003295 -c "Copy CIDs into SSL transform" \
3296 -c "Peer CID (length 4 Bytes): de ad be ef" \
3297 -s "Peer CID (length 0 Bytes):" \
3298 -s "Use of Connection ID has been negotiated" \
3299 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003300
Hanno Beckera0e20d02019-05-15 14:03:01 +01003301requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003302run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003303 "$P_SRV debug_level=3 dtls=1 cid=1" \
3304 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3305 0 \
3306 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003307 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003308 -c "client hello, adding CID extension" \
3309 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003310 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003311 -s "server hello, adding CID extension" \
3312 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003313 -c "Use of CID extension negotiated" \
3314 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003315 -c "Copy CIDs into SSL transform" \
3316 -s "Peer CID (length 4 Bytes): de ad be ef" \
3317 -c "Peer CID (length 0 Bytes):" \
3318 -s "Use of Connection ID has been negotiated" \
3319 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003320
Hanno Beckera0e20d02019-05-15 14:03:01 +01003321requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003322run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003323 "$P_SRV debug_level=3 dtls=1 cid=1" \
3324 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3325 0 \
3326 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003327 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003328 -c "client hello, adding CID extension" \
3329 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003330 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003331 -s "server hello, adding CID extension" \
3332 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003333 -c "Use of CID extension negotiated" \
3334 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003335 -c "Copy CIDs into SSL transform" \
3336 -S "Use of Connection ID has been negotiated" \
3337 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003338
Hanno Beckera0e20d02019-05-15 14:03:01 +01003339requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003340run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003341 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
3342 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
3343 0 \
3344 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003345 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003346 -c "client hello, adding CID extension" \
3347 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003348 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003349 -s "server hello, adding CID extension" \
3350 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003351 -c "Use of CID extension negotiated" \
3352 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003353 -c "Copy CIDs into SSL transform" \
3354 -c "Peer CID (length 2 Bytes): de ad" \
3355 -s "Peer CID (length 2 Bytes): be ef" \
3356 -s "Use of Connection ID has been negotiated" \
3357 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003358
Hanno Beckera0e20d02019-05-15 14:03:01 +01003359requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003360run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003361 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3362 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
3363 0 \
3364 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003365 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003366 -c "client hello, adding CID extension" \
3367 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003368 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003369 -s "server hello, adding CID extension" \
3370 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003371 -c "Use of CID extension negotiated" \
3372 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003373 -c "Copy CIDs into SSL transform" \
3374 -c "Peer CID (length 4 Bytes): de ad be ef" \
3375 -s "Peer CID (length 0 Bytes):" \
3376 -s "Use of Connection ID has been negotiated" \
3377 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003378
Hanno Beckera0e20d02019-05-15 14:03:01 +01003379requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003380run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003381 "$P_SRV debug_level=3 dtls=1 cid=1" \
3382 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
3383 0 \
3384 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003385 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003386 -c "client hello, adding CID extension" \
3387 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003388 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003389 -s "server hello, adding CID extension" \
3390 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003391 -c "Use of CID extension negotiated" \
3392 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003393 -c "Copy CIDs into SSL transform" \
3394 -s "Peer CID (length 4 Bytes): de ad be ef" \
3395 -c "Peer CID (length 0 Bytes):" \
3396 -s "Use of Connection ID has been negotiated" \
3397 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003398
Hanno Beckera0e20d02019-05-15 14:03:01 +01003399requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003400run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003401 "$P_SRV debug_level=3 dtls=1 cid=1" \
3402 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
3403 0 \
3404 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003405 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003406 -c "client hello, adding CID extension" \
3407 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003408 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003409 -s "server hello, adding CID extension" \
3410 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003411 -c "Use of CID extension negotiated" \
3412 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003413 -c "Copy CIDs into SSL transform" \
3414 -S "Use of Connection ID has been negotiated" \
3415 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003416
Jerry Yuab082902021-12-23 18:02:22 +08003417requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003418requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker9bae30d2019-04-23 11:52:44 +01003419requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003420run_test "Connection ID: Cli+Srv enabled, renegotiate without change of CID" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003421 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
3422 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
3423 0 \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003424 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3425 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3426 -s "(initial handshake) Use of Connection ID has been negotiated" \
3427 -c "(initial handshake) Use of Connection ID has been negotiated" \
3428 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3429 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3430 -s "(after renegotiation) Use of Connection ID has been negotiated" \
3431 -c "(after renegotiation) Use of Connection ID has been negotiated"
3432
Jerry Yuab082902021-12-23 18:02:22 +08003433requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003434requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003435requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003436run_test "Connection ID: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003437 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
3438 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
3439 0 \
3440 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3441 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3442 -s "(initial handshake) Use of Connection ID has been negotiated" \
3443 -c "(initial handshake) Use of Connection ID has been negotiated" \
3444 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3445 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3446 -s "(after renegotiation) Use of Connection ID has been negotiated" \
3447 -c "(after renegotiation) Use of Connection ID has been negotiated"
3448
Jerry Yuab082902021-12-23 18:02:22 +08003449requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003450requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003451requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01003452run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate with different CID" \
3453 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead cid_val_renego=beef renegotiation=1" \
3454 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
3455 0 \
3456 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3457 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3458 -s "(initial handshake) Use of Connection ID has been negotiated" \
3459 -c "(initial handshake) Use of Connection ID has been negotiated" \
3460 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3461 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3462 -s "(after renegotiation) Use of Connection ID has been negotiated" \
3463 -c "(after renegotiation) Use of Connection ID has been negotiated"
3464
Jerry Yuab082902021-12-23 18:02:22 +08003465requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003466requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01003467requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003468run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003469 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003470 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
3471 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
3472 0 \
3473 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3474 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3475 -s "(initial handshake) Use of Connection ID has been negotiated" \
3476 -c "(initial handshake) Use of Connection ID has been negotiated" \
3477 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3478 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3479 -s "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003480 -c "(after renegotiation) Use of Connection ID has been negotiated" \
3481 -c "ignoring unexpected CID" \
3482 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003483
Jerry Yuab082902021-12-23 18:02:22 +08003484requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003485requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003486requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3487run_test "Connection ID: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003488 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3489 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3490 0 \
3491 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3492 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3493 -s "(initial handshake) Use of Connection ID has been negotiated" \
3494 -c "(initial handshake) Use of Connection ID has been negotiated" \
3495 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3496 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3497 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3498 -S "(after renegotiation) Use of Connection ID has been negotiated"
3499
Jerry Yuab082902021-12-23 18:02:22 +08003500requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003501requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003502requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01003503run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate without CID" \
3504 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3505 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3506 0 \
3507 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3508 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3509 -s "(initial handshake) Use of Connection ID has been negotiated" \
3510 -c "(initial handshake) Use of Connection ID has been negotiated" \
3511 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3512 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3513 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3514 -S "(after renegotiation) Use of Connection ID has been negotiated"
3515
Jerry Yuab082902021-12-23 18:02:22 +08003516requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003517requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01003518requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003519run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003520 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003521 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3522 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3523 0 \
3524 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3525 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3526 -s "(initial handshake) Use of Connection ID has been negotiated" \
3527 -c "(initial handshake) Use of Connection ID has been negotiated" \
3528 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3529 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3530 -C "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003531 -S "(after renegotiation) Use of Connection ID has been negotiated" \
3532 -c "ignoring unexpected CID" \
3533 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003534
Jerry Yuab082902021-12-23 18:02:22 +08003535requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003536requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003537requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3538run_test "Connection ID: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003539 "$P_SRV debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
3540 "$P_CLI debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
3541 0 \
3542 -S "(initial handshake) Use of Connection ID has been negotiated" \
3543 -C "(initial handshake) Use of Connection ID has been negotiated" \
3544 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3545 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3546 -c "(after renegotiation) Use of Connection ID has been negotiated" \
3547 -s "(after renegotiation) Use of Connection ID has been negotiated"
3548
Jerry Yuab082902021-12-23 18:02:22 +08003549requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003550requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003551requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01003552run_test "Connection ID, no packing: Cli+Srv enabled, CID on renegotiation" \
3553 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
3554 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
3555 0 \
3556 -S "(initial handshake) Use of Connection ID has been negotiated" \
3557 -C "(initial handshake) Use of Connection ID has been negotiated" \
3558 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3559 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3560 -c "(after renegotiation) Use of Connection ID has been negotiated" \
3561 -s "(after renegotiation) Use of Connection ID has been negotiated"
3562
Jerry Yuab082902021-12-23 18:02:22 +08003563requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003564requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01003565requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003566run_test "Connection ID, 3D+MTU: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003567 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003568 "$P_SRV debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
3569 "$P_CLI debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
3570 0 \
3571 -S "(initial handshake) Use of Connection ID has been negotiated" \
3572 -C "(initial handshake) Use of Connection ID has been negotiated" \
3573 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3574 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3575 -c "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003576 -s "(after renegotiation) Use of Connection ID has been negotiated" \
3577 -c "ignoring unexpected CID" \
3578 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003579
Jerry Yuab082902021-12-23 18:02:22 +08003580requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003581requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003582requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3583run_test "Connection ID: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003584 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
3585 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3586 0 \
3587 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3588 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3589 -s "(initial handshake) Use of Connection ID has been negotiated" \
3590 -c "(initial handshake) Use of Connection ID has been negotiated" \
3591 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3592 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3593 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3594 -S "(after renegotiation) Use of Connection ID has been negotiated" \
3595 -s "(after renegotiation) Use of Connection ID was not offered by client"
3596
Jerry Yuab082902021-12-23 18:02:22 +08003597requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003598requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003599requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003600run_test "Connection ID, 3D: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003601 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003602 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
3603 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3604 0 \
3605 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3606 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3607 -s "(initial handshake) Use of Connection ID has been negotiated" \
3608 -c "(initial handshake) Use of Connection ID has been negotiated" \
3609 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3610 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3611 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3612 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003613 -s "(after renegotiation) Use of Connection ID was not offered by client" \
3614 -c "ignoring unexpected CID" \
3615 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003616
Jerry Yuab082902021-12-23 18:02:22 +08003617requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003618requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003619requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3620run_test "Connection ID: Cli+Srv enabled, Srv disables on renegotiation" \
3621 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3622 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
3623 0 \
3624 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3625 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3626 -s "(initial handshake) Use of Connection ID has been negotiated" \
3627 -c "(initial handshake) Use of Connection ID has been negotiated" \
3628 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3629 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3630 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3631 -S "(after renegotiation) Use of Connection ID has been negotiated" \
3632 -c "(after renegotiation) Use of Connection ID was rejected by the server"
3633
Jerry Yuab082902021-12-23 18:02:22 +08003634requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003635requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003636requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3637run_test "Connection ID, 3D: Cli+Srv enabled, Srv disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003638 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003639 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3640 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
3641 0 \
3642 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3643 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3644 -s "(initial handshake) Use of Connection ID has been negotiated" \
3645 -c "(initial handshake) Use of Connection ID has been negotiated" \
3646 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3647 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3648 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3649 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003650 -c "(after renegotiation) Use of Connection ID was rejected by the server" \
3651 -c "ignoring unexpected CID" \
3652 -s "ignoring unexpected CID"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003653
Yuto Takano3fa16732021-07-09 11:21:43 +01003654# This and the test below it require MAX_CONTENT_LEN to be at least MFL+1, because the
Yuto Takano9c09d552021-07-08 16:03:44 +01003655# tests check that the buffer contents are reallocated when the message is
3656# larger than the buffer.
Andrzej Kurekb6577832020-06-08 07:08:03 -04003657requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
3658requires_config_enabled MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Yuto Takano9c09d552021-07-08 16:03:44 +01003659requires_max_content_len 513
Andrzej Kurekb6577832020-06-08 07:08:03 -04003660run_test "Connection ID: Cli+Srv enabled, variable buffer lengths, MFL=512" \
3661 "$P_SRV dtls=1 cid=1 cid_val=dead debug_level=2" \
3662 "$P_CLI force_ciphersuite="TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" max_frag_len=512 dtls=1 cid=1 cid_val=beef" \
3663 0 \
3664 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3665 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3666 -s "(initial handshake) Use of Connection ID has been negotiated" \
3667 -c "(initial handshake) Use of Connection ID has been negotiated" \
3668 -s "Reallocating in_buf" \
3669 -s "Reallocating out_buf"
3670
3671requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
3672requires_config_enabled MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Yuto Takano9c09d552021-07-08 16:03:44 +01003673requires_max_content_len 1025
Andrzej Kurekb6577832020-06-08 07:08:03 -04003674run_test "Connection ID: Cli+Srv enabled, variable buffer lengths, MFL=1024" \
3675 "$P_SRV dtls=1 cid=1 cid_val=dead debug_level=2" \
3676 "$P_CLI force_ciphersuite="TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" max_frag_len=1024 dtls=1 cid=1 cid_val=beef" \
3677 0 \
3678 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3679 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3680 -s "(initial handshake) Use of Connection ID has been negotiated" \
3681 -c "(initial handshake) Use of Connection ID has been negotiated" \
3682 -s "Reallocating in_buf" \
3683 -s "Reallocating out_buf"
3684
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003685# Tests for Encrypt-then-MAC extension
3686
3687run_test "Encrypt then MAC: default" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01003688 "$P_SRV debug_level=3 \
3689 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003690 "$P_CLI debug_level=3" \
3691 0 \
3692 -c "client hello, adding encrypt_then_mac extension" \
3693 -s "found encrypt then mac extension" \
3694 -s "server hello, adding encrypt then mac extension" \
3695 -c "found encrypt_then_mac extension" \
3696 -c "using encrypt then mac" \
3697 -s "using encrypt then mac"
3698
3699run_test "Encrypt then MAC: client enabled, server disabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01003700 "$P_SRV debug_level=3 etm=0 \
3701 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003702 "$P_CLI debug_level=3 etm=1" \
3703 0 \
3704 -c "client hello, adding encrypt_then_mac extension" \
3705 -s "found encrypt then mac extension" \
3706 -S "server hello, adding encrypt then mac extension" \
3707 -C "found encrypt_then_mac extension" \
3708 -C "using encrypt then mac" \
3709 -S "using encrypt then mac"
3710
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01003711run_test "Encrypt then MAC: client enabled, aead cipher" \
3712 "$P_SRV debug_level=3 etm=1 \
3713 force_ciphersuite=TLS-RSA-WITH-AES-128-GCM-SHA256" \
3714 "$P_CLI debug_level=3 etm=1" \
3715 0 \
3716 -c "client hello, adding encrypt_then_mac extension" \
3717 -s "found encrypt then mac extension" \
3718 -S "server hello, adding encrypt then mac extension" \
3719 -C "found encrypt_then_mac extension" \
3720 -C "using encrypt then mac" \
3721 -S "using encrypt then mac"
3722
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003723run_test "Encrypt then MAC: client disabled, server enabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01003724 "$P_SRV debug_level=3 etm=1 \
3725 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003726 "$P_CLI debug_level=3 etm=0" \
3727 0 \
3728 -C "client hello, adding encrypt_then_mac extension" \
3729 -S "found encrypt then mac extension" \
3730 -S "server hello, adding encrypt then mac extension" \
3731 -C "found encrypt_then_mac extension" \
3732 -C "using encrypt then mac" \
3733 -S "using encrypt then mac"
3734
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003735# Tests for Extended Master Secret extension
3736
Gilles Peskine2fe796f2022-02-25 19:51:52 +01003737requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003738run_test "Extended Master Secret: default" \
3739 "$P_SRV debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003740 "$P_CLI force_version=tls12 debug_level=3" \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003741 0 \
3742 -c "client hello, adding extended_master_secret extension" \
3743 -s "found extended master secret extension" \
3744 -s "server hello, adding extended master secret extension" \
3745 -c "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003746 -c "session hash for extended master secret" \
3747 -s "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003748
Gilles Peskine2fe796f2022-02-25 19:51:52 +01003749requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003750run_test "Extended Master Secret: client enabled, server disabled" \
3751 "$P_SRV debug_level=3 extended_ms=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003752 "$P_CLI force_version=tls12 debug_level=3 extended_ms=1" \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003753 0 \
3754 -c "client hello, adding extended_master_secret extension" \
3755 -s "found extended master secret extension" \
3756 -S "server hello, adding extended master secret extension" \
3757 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003758 -C "session hash for extended master secret" \
3759 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003760
Gilles Peskine2fe796f2022-02-25 19:51:52 +01003761requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003762run_test "Extended Master Secret: client disabled, server enabled" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003763 "$P_SRV force_version=tls12 debug_level=3 extended_ms=1" \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003764 "$P_CLI debug_level=3 extended_ms=0" \
3765 0 \
3766 -C "client hello, adding extended_master_secret extension" \
3767 -S "found extended master secret extension" \
3768 -S "server hello, adding extended master secret extension" \
3769 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003770 -C "session hash for extended master secret" \
3771 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003772
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003773# Test sending and receiving empty application data records
3774
3775run_test "Encrypt then MAC: empty application data record" \
3776 "$P_SRV auth_mode=none debug_level=4 etm=1" \
3777 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA" \
3778 0 \
3779 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
3780 -s "dumping 'input payload after decrypt' (0 bytes)" \
3781 -c "0 bytes written in 1 fragments"
3782
Jerry Yuab082902021-12-23 18:02:22 +08003783requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9e2c80f2020-03-24 10:53:39 +01003784run_test "Encrypt then MAC: disabled, empty application data record" \
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003785 "$P_SRV auth_mode=none debug_level=4 etm=0" \
3786 "$P_CLI auth_mode=none etm=0 request_size=0" \
3787 0 \
3788 -s "dumping 'input payload after decrypt' (0 bytes)" \
3789 -c "0 bytes written in 1 fragments"
3790
3791run_test "Encrypt then MAC, DTLS: empty application data record" \
3792 "$P_SRV auth_mode=none debug_level=4 etm=1 dtls=1" \
3793 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA dtls=1" \
3794 0 \
3795 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
3796 -s "dumping 'input payload after decrypt' (0 bytes)" \
3797 -c "0 bytes written in 1 fragments"
3798
Jerry Yuab082902021-12-23 18:02:22 +08003799requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9e2c80f2020-03-24 10:53:39 +01003800run_test "Encrypt then MAC, DTLS: disabled, empty application data record" \
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003801 "$P_SRV auth_mode=none debug_level=4 etm=0 dtls=1" \
3802 "$P_CLI auth_mode=none etm=0 request_size=0 dtls=1" \
3803 0 \
3804 -s "dumping 'input payload after decrypt' (0 bytes)" \
3805 -c "0 bytes written in 1 fragments"
3806
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003807# Tests for CBC 1/n-1 record splitting
3808
3809run_test "CBC Record splitting: TLS 1.2, no splitting" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01003810 "$P_SRV force_version=tls12" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003811 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
Ronald Cronf3b425b2022-03-17 16:45:09 +01003812 request_size=123" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003813 0 \
3814 -s "Read from client: 123 bytes read" \
3815 -S "Read from client: 1 bytes read" \
3816 -S "122 bytes read"
3817
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003818# Tests for Session Tickets
3819
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003820requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003821run_test "Session resume using tickets: basic" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003822 "$P_SRV debug_level=3 tickets=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003823 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003824 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003825 -c "client hello, adding session ticket extension" \
3826 -s "found session ticket extension" \
3827 -s "server hello, adding session ticket extension" \
3828 -c "found session_ticket extension" \
3829 -c "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003830 -S "session successfully restored from cache" \
3831 -s "session successfully restored from ticket" \
3832 -s "a session has been resumed" \
3833 -c "a session has been resumed"
3834
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003835requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Glenn Strausse3282452022-02-03 17:23:24 -05003836run_test "Session resume using tickets: manual rotation" \
3837 "$P_SRV debug_level=3 tickets=1 ticket_rotate=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003838 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Glenn Strausse3282452022-02-03 17:23:24 -05003839 0 \
3840 -c "client hello, adding session ticket extension" \
3841 -s "found session ticket extension" \
3842 -s "server hello, adding session ticket extension" \
3843 -c "found session_ticket extension" \
3844 -c "parse new session ticket" \
3845 -S "session successfully restored from cache" \
3846 -s "session successfully restored from ticket" \
3847 -s "a session has been resumed" \
3848 -c "a session has been resumed"
3849
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003850requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003851run_test "Session resume using tickets: cache disabled" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003852 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003853 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01003854 0 \
3855 -c "client hello, adding session ticket extension" \
3856 -s "found session ticket extension" \
3857 -s "server hello, adding session ticket extension" \
3858 -c "found session_ticket extension" \
3859 -c "parse new session ticket" \
3860 -S "session successfully restored from cache" \
3861 -s "session successfully restored from ticket" \
3862 -s "a session has been resumed" \
3863 -c "a session has been resumed"
3864
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003865requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003866run_test "Session resume using tickets: timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003867 "$P_SRV debug_level=3 tickets=1 cache_max=0 ticket_timeout=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003868 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1 reco_delay=2000" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01003869 0 \
3870 -c "client hello, adding session ticket extension" \
3871 -s "found session ticket extension" \
3872 -s "server hello, adding session ticket extension" \
3873 -c "found session_ticket extension" \
3874 -c "parse new session ticket" \
3875 -S "session successfully restored from cache" \
3876 -S "session successfully restored from ticket" \
3877 -S "a session has been resumed" \
3878 -C "a session has been resumed"
3879
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003880requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003881run_test "Session resume using tickets: session copy" \
3882 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003883 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003884 0 \
3885 -c "client hello, adding session ticket extension" \
3886 -s "found session ticket extension" \
3887 -s "server hello, adding session ticket extension" \
3888 -c "found session_ticket extension" \
3889 -c "parse new session ticket" \
3890 -S "session successfully restored from cache" \
3891 -s "session successfully restored from ticket" \
3892 -s "a session has been resumed" \
3893 -c "a session has been resumed"
3894
Jerry Yuab082902021-12-23 18:02:22 +08003895requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003896requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003897run_test "Session resume using tickets: openssl server" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02003898 "$O_SRV -tls1_2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003899 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01003900 0 \
3901 -c "client hello, adding session ticket extension" \
3902 -c "found session_ticket extension" \
3903 -c "parse new session ticket" \
3904 -c "a session has been resumed"
3905
Jerry Yuab082902021-12-23 18:02:22 +08003906requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003907requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003908run_test "Session resume using tickets: openssl client" \
Gilles Peskine01fde2c2024-04-29 17:44:19 +02003909 "$P_SRV force_version=tls12 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02003910 "( $O_CLI -sess_out $SESSION; \
3911 $O_CLI -sess_in $SESSION; \
3912 rm -f $SESSION )" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01003913 0 \
3914 -s "found session ticket extension" \
3915 -s "server hello, adding session ticket extension" \
3916 -S "session successfully restored from cache" \
3917 -s "session successfully restored from ticket" \
3918 -s "a session has been resumed"
3919
Valerio Setti73d05312023-11-09 16:53:59 +01003920requires_cipher_enabled "AES" "GCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003921requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003922run_test "Session resume using tickets: AES-128-GCM" \
3923 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-128-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003924 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003925 0 \
3926 -c "client hello, adding session ticket extension" \
3927 -s "found session ticket extension" \
3928 -s "server hello, adding session ticket extension" \
3929 -c "found session_ticket extension" \
3930 -c "parse new session ticket" \
3931 -S "session successfully restored from cache" \
3932 -s "session successfully restored from ticket" \
3933 -s "a session has been resumed" \
3934 -c "a session has been resumed"
3935
Valerio Setti73d05312023-11-09 16:53:59 +01003936requires_cipher_enabled "AES" "GCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003937requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003938run_test "Session resume using tickets: AES-192-GCM" \
3939 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-192-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003940 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003941 0 \
3942 -c "client hello, adding session ticket extension" \
3943 -s "found session ticket extension" \
3944 -s "server hello, adding session ticket extension" \
3945 -c "found session_ticket extension" \
3946 -c "parse new session ticket" \
3947 -S "session successfully restored from cache" \
3948 -s "session successfully restored from ticket" \
3949 -s "a session has been resumed" \
3950 -c "a session has been resumed"
3951
Valerio Setti73d05312023-11-09 16:53:59 +01003952requires_cipher_enabled "AES" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003953requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003954run_test "Session resume using tickets: AES-128-CCM" \
3955 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-128-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003956 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003957 0 \
3958 -c "client hello, adding session ticket extension" \
3959 -s "found session ticket extension" \
3960 -s "server hello, adding session ticket extension" \
3961 -c "found session_ticket extension" \
3962 -c "parse new session ticket" \
3963 -S "session successfully restored from cache" \
3964 -s "session successfully restored from ticket" \
3965 -s "a session has been resumed" \
3966 -c "a session has been resumed"
3967
Valerio Setti73d05312023-11-09 16:53:59 +01003968requires_cipher_enabled "AES" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003969requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003970run_test "Session resume using tickets: AES-192-CCM" \
3971 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-192-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003972 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003973 0 \
3974 -c "client hello, adding session ticket extension" \
3975 -s "found session ticket extension" \
3976 -s "server hello, adding session ticket extension" \
3977 -c "found session_ticket extension" \
3978 -c "parse new session ticket" \
3979 -S "session successfully restored from cache" \
3980 -s "session successfully restored from ticket" \
3981 -s "a session has been resumed" \
3982 -c "a session has been resumed"
3983
Valerio Setti73d05312023-11-09 16:53:59 +01003984requires_cipher_enabled "AES" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02003985requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003986run_test "Session resume using tickets: AES-256-CCM" \
3987 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-256-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003988 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003989 0 \
3990 -c "client hello, adding session ticket extension" \
3991 -s "found session ticket extension" \
3992 -s "server hello, adding session ticket extension" \
3993 -c "found session_ticket extension" \
3994 -c "parse new session ticket" \
3995 -S "session successfully restored from cache" \
3996 -s "session successfully restored from ticket" \
3997 -s "a session has been resumed" \
3998 -c "a session has been resumed"
3999
Valerio Setti73d05312023-11-09 16:53:59 +01004000requires_cipher_enabled "CAMELLIA" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004001requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004002run_test "Session resume using tickets: CAMELLIA-128-CCM" \
4003 "$P_SRV debug_level=3 tickets=1 ticket_aead=CAMELLIA-128-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004004 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004005 0 \
4006 -c "client hello, adding session ticket extension" \
4007 -s "found session ticket extension" \
4008 -s "server hello, adding session ticket extension" \
4009 -c "found session_ticket extension" \
4010 -c "parse new session ticket" \
4011 -S "session successfully restored from cache" \
4012 -s "session successfully restored from ticket" \
4013 -s "a session has been resumed" \
4014 -c "a session has been resumed"
4015
Valerio Setti73d05312023-11-09 16:53:59 +01004016requires_cipher_enabled "CAMELLIA" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004017requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004018run_test "Session resume using tickets: CAMELLIA-192-CCM" \
4019 "$P_SRV debug_level=3 tickets=1 ticket_aead=CAMELLIA-192-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004020 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004021 0 \
4022 -c "client hello, adding session ticket extension" \
4023 -s "found session ticket extension" \
4024 -s "server hello, adding session ticket extension" \
4025 -c "found session_ticket extension" \
4026 -c "parse new session ticket" \
4027 -S "session successfully restored from cache" \
4028 -s "session successfully restored from ticket" \
4029 -s "a session has been resumed" \
4030 -c "a session has been resumed"
4031
Valerio Setti73d05312023-11-09 16:53:59 +01004032requires_cipher_enabled "CAMELLIA" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004033requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004034run_test "Session resume using tickets: CAMELLIA-256-CCM" \
4035 "$P_SRV debug_level=3 tickets=1 ticket_aead=CAMELLIA-256-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004036 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004037 0 \
4038 -c "client hello, adding session ticket extension" \
4039 -s "found session ticket extension" \
4040 -s "server hello, adding session ticket extension" \
4041 -c "found session_ticket extension" \
4042 -c "parse new session ticket" \
4043 -S "session successfully restored from cache" \
4044 -s "session successfully restored from ticket" \
4045 -s "a session has been resumed" \
4046 -c "a session has been resumed"
4047
Valerio Setti04c85e12023-11-13 10:54:05 +01004048requires_cipher_enabled "ARIA" "GCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004049requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004050run_test "Session resume using tickets: ARIA-128-GCM" \
4051 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-128-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004052 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004053 0 \
4054 -c "client hello, adding session ticket extension" \
4055 -s "found session ticket extension" \
4056 -s "server hello, adding session ticket extension" \
4057 -c "found session_ticket extension" \
4058 -c "parse new session ticket" \
4059 -S "session successfully restored from cache" \
4060 -s "session successfully restored from ticket" \
4061 -s "a session has been resumed" \
4062 -c "a session has been resumed"
4063
Valerio Setti04c85e12023-11-13 10:54:05 +01004064requires_cipher_enabled "ARIA" "GCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004065requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004066run_test "Session resume using tickets: ARIA-192-GCM" \
4067 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-192-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004068 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004069 0 \
4070 -c "client hello, adding session ticket extension" \
4071 -s "found session ticket extension" \
4072 -s "server hello, adding session ticket extension" \
4073 -c "found session_ticket extension" \
4074 -c "parse new session ticket" \
4075 -S "session successfully restored from cache" \
4076 -s "session successfully restored from ticket" \
4077 -s "a session has been resumed" \
4078 -c "a session has been resumed"
4079
Valerio Setti04c85e12023-11-13 10:54:05 +01004080requires_cipher_enabled "ARIA" "GCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004081requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004082run_test "Session resume using tickets: ARIA-256-GCM" \
4083 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-256-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004084 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004085 0 \
4086 -c "client hello, adding session ticket extension" \
4087 -s "found session ticket extension" \
4088 -s "server hello, adding session ticket extension" \
4089 -c "found session_ticket extension" \
4090 -c "parse new session ticket" \
4091 -S "session successfully restored from cache" \
4092 -s "session successfully restored from ticket" \
4093 -s "a session has been resumed" \
4094 -c "a session has been resumed"
4095
Valerio Setti73d05312023-11-09 16:53:59 +01004096requires_cipher_enabled "ARIA" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004097requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004098run_test "Session resume using tickets: ARIA-128-CCM" \
4099 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-128-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004100 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004101 0 \
4102 -c "client hello, adding session ticket extension" \
4103 -s "found session ticket extension" \
4104 -s "server hello, adding session ticket extension" \
4105 -c "found session_ticket extension" \
4106 -c "parse new session ticket" \
4107 -S "session successfully restored from cache" \
4108 -s "session successfully restored from ticket" \
4109 -s "a session has been resumed" \
4110 -c "a session has been resumed"
4111
Valerio Setti73d05312023-11-09 16:53:59 +01004112requires_cipher_enabled "ARIA" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004113requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004114run_test "Session resume using tickets: ARIA-192-CCM" \
4115 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-192-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004116 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004117 0 \
4118 -c "client hello, adding session ticket extension" \
4119 -s "found session ticket extension" \
4120 -s "server hello, adding session ticket extension" \
4121 -c "found session_ticket extension" \
4122 -c "parse new session ticket" \
4123 -S "session successfully restored from cache" \
4124 -s "session successfully restored from ticket" \
4125 -s "a session has been resumed" \
4126 -c "a session has been resumed"
4127
Valerio Setti73d05312023-11-09 16:53:59 +01004128requires_cipher_enabled "ARIA" "CCM"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004129requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004130run_test "Session resume using tickets: ARIA-256-CCM" \
4131 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-256-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004132 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01004133 0 \
4134 -c "client hello, adding session ticket extension" \
4135 -s "found session ticket extension" \
4136 -s "server hello, adding session ticket extension" \
4137 -c "found session_ticket extension" \
4138 -c "parse new session ticket" \
4139 -S "session successfully restored from cache" \
4140 -s "session successfully restored from ticket" \
4141 -s "a session has been resumed" \
4142 -c "a session has been resumed"
4143
Valerio Setti73d05312023-11-09 16:53:59 +01004144requires_cipher_enabled "CHACHA20"
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004145requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Gabor Mezei49c8eb32022-03-10 16:13:17 +01004146run_test "Session resume using tickets: CHACHA20-POLY1305" \
4147 "$P_SRV debug_level=3 tickets=1 ticket_aead=CHACHA20-POLY1305" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004148 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei49c8eb32022-03-10 16:13:17 +01004149 0 \
4150 -c "client hello, adding session ticket extension" \
4151 -s "found session ticket extension" \
4152 -s "server hello, adding session ticket extension" \
4153 -c "found session_ticket extension" \
4154 -c "parse new session ticket" \
4155 -S "session successfully restored from cache" \
4156 -s "session successfully restored from ticket" \
4157 -s "a session has been resumed" \
4158 -c "a session has been resumed"
4159
Hanno Becker1d739932018-08-21 13:55:22 +01004160# Tests for Session Tickets with DTLS
4161
Jerry Yuab082902021-12-23 18:02:22 +08004162requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004163requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker1d739932018-08-21 13:55:22 +01004164run_test "Session resume using tickets, DTLS: basic" \
4165 "$P_SRV debug_level=3 dtls=1 tickets=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004166 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004167 0 \
4168 -c "client hello, adding session ticket extension" \
4169 -s "found session ticket extension" \
4170 -s "server hello, adding session ticket extension" \
4171 -c "found session_ticket extension" \
4172 -c "parse new session ticket" \
4173 -S "session successfully restored from cache" \
4174 -s "session successfully restored from ticket" \
4175 -s "a session has been resumed" \
4176 -c "a session has been resumed"
4177
Jerry Yuab082902021-12-23 18:02:22 +08004178requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004179requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker1d739932018-08-21 13:55:22 +01004180run_test "Session resume using tickets, DTLS: cache disabled" \
4181 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004182 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004183 0 \
4184 -c "client hello, adding session ticket extension" \
4185 -s "found session ticket extension" \
4186 -s "server hello, adding session ticket extension" \
4187 -c "found session_ticket extension" \
4188 -c "parse new session ticket" \
4189 -S "session successfully restored from cache" \
4190 -s "session successfully restored from ticket" \
4191 -s "a session has been resumed" \
4192 -c "a session has been resumed"
4193
Jerry Yuab082902021-12-23 18:02:22 +08004194requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004195requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker1d739932018-08-21 13:55:22 +01004196run_test "Session resume using tickets, DTLS: timeout" \
4197 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0 ticket_timeout=1" \
Jerry Yua15af372022-12-05 15:55:24 +08004198 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1 reco_delay=2000" \
Hanno Becker1d739932018-08-21 13:55:22 +01004199 0 \
4200 -c "client hello, adding session ticket extension" \
4201 -s "found session ticket extension" \
4202 -s "server hello, adding session ticket extension" \
4203 -c "found session_ticket extension" \
4204 -c "parse new session ticket" \
4205 -S "session successfully restored from cache" \
4206 -S "session successfully restored from ticket" \
4207 -S "a session has been resumed" \
4208 -C "a session has been resumed"
4209
Jerry Yuab082902021-12-23 18:02:22 +08004210requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004211requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004212run_test "Session resume using tickets, DTLS: session copy" \
4213 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004214 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004215 0 \
4216 -c "client hello, adding session ticket extension" \
4217 -s "found session ticket extension" \
4218 -s "server hello, adding session ticket extension" \
4219 -c "found session_ticket extension" \
4220 -c "parse new session ticket" \
4221 -S "session successfully restored from cache" \
4222 -s "session successfully restored from ticket" \
4223 -s "a session has been resumed" \
4224 -c "a session has been resumed"
4225
Jerry Yuab082902021-12-23 18:02:22 +08004226requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004227requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004228run_test "Session resume using tickets, DTLS: openssl server" \
4229 "$O_SRV -dtls" \
4230 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1" \
4231 0 \
4232 -c "client hello, adding session ticket extension" \
4233 -c "found session_ticket extension" \
4234 -c "parse new session ticket" \
4235 -c "a session has been resumed"
4236
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004237# For reasons that aren't fully understood, this test randomly fails with high
Paul Elliott09cfa182021-10-13 16:13:44 +01004238# probability with OpenSSL 1.0.2g on the CI, see #5012.
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004239requires_openssl_next
Jerry Yuab082902021-12-23 18:02:22 +08004240requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004241requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004242run_test "Session resume using tickets, DTLS: openssl client" \
4243 "$P_SRV dtls=1 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004244 "( $O_NEXT_CLI -dtls -sess_out $SESSION; \
4245 $O_NEXT_CLI -dtls -sess_in $SESSION; \
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004246 rm -f $SESSION )" \
4247 0 \
4248 -s "found session ticket extension" \
4249 -s "server hello, adding session ticket extension" \
4250 -S "session successfully restored from cache" \
4251 -s "session successfully restored from ticket" \
4252 -s "a session has been resumed"
4253
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004254# Tests for Session Resume based on session-ID and cache
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004255
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004256requires_config_enabled MBEDTLS_SSL_CACHE_C
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004257requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004258run_test "Session resume using cache: tickets enabled on client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004259 "$P_SRV debug_level=3 tickets=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004260 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01004261 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004262 -c "client hello, adding session ticket extension" \
4263 -s "found session ticket extension" \
4264 -S "server hello, adding session ticket extension" \
4265 -C "found session_ticket extension" \
4266 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01004267 -s "session successfully restored from cache" \
4268 -S "session successfully restored from ticket" \
4269 -s "a session has been resumed" \
4270 -c "a session has been resumed"
4271
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004272requires_config_enabled MBEDTLS_SSL_CACHE_C
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004273requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004274run_test "Session resume using cache: tickets enabled on server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004275 "$P_SRV debug_level=3 tickets=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004276 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01004277 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004278 -C "client hello, adding session ticket extension" \
4279 -S "found session ticket extension" \
4280 -S "server hello, adding session ticket extension" \
4281 -C "found session_ticket extension" \
4282 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01004283 -s "session successfully restored from cache" \
4284 -S "session successfully restored from ticket" \
4285 -s "a session has been resumed" \
4286 -c "a session has been resumed"
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004287
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004288requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004289run_test "Session resume using cache: cache_max=0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004290 "$P_SRV debug_level=3 tickets=0 cache_max=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004291 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01004292 0 \
4293 -S "session successfully restored from cache" \
4294 -S "session successfully restored from ticket" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004295 -S "a session has been resumed" \
4296 -C "a session has been resumed"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01004297
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004298requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004299run_test "Session resume using cache: cache_max=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004300 "$P_SRV debug_level=3 tickets=0 cache_max=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004301 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004302 0 \
4303 -s "session successfully restored from cache" \
4304 -S "session successfully restored from ticket" \
4305 -s "a session has been resumed" \
4306 -c "a session has been resumed"
4307
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004308requires_config_enabled MBEDTLS_SSL_CACHE_C
Pengyu Lv62ed1aa2023-03-07 14:52:47 +08004309run_test "Session resume using cache: cache removed" \
4310 "$P_SRV debug_level=3 tickets=0 cache_remove=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004311 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1" \
Pengyu Lv62ed1aa2023-03-07 14:52:47 +08004312 0 \
4313 -C "client hello, adding session ticket extension" \
4314 -S "found session ticket extension" \
4315 -S "server hello, adding session ticket extension" \
4316 -C "found session_ticket extension" \
4317 -C "parse new session ticket" \
4318 -S "session successfully restored from cache" \
4319 -S "session successfully restored from ticket" \
4320 -S "a session has been resumed" \
4321 -C "a session has been resumed"
4322
4323requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
4324requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard6df31962015-05-04 10:55:47 +02004325run_test "Session resume using cache: timeout > delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004326 "$P_SRV debug_level=3 tickets=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004327 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1 reco_delay=0" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004328 0 \
4329 -s "session successfully restored from cache" \
4330 -S "session successfully restored from ticket" \
4331 -s "a session has been resumed" \
4332 -c "a session has been resumed"
4333
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004334requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004335run_test "Session resume using cache: timeout < delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004336 "$P_SRV debug_level=3 tickets=0 cache_timeout=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004337 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1 reco_delay=2000" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004338 0 \
4339 -S "session successfully restored from cache" \
4340 -S "session successfully restored from ticket" \
4341 -S "a session has been resumed" \
4342 -C "a session has been resumed"
4343
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004344requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004345run_test "Session resume using cache: no timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004346 "$P_SRV debug_level=3 tickets=0 cache_timeout=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004347 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1 reco_delay=2000" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01004348 0 \
4349 -s "session successfully restored from cache" \
4350 -S "session successfully restored from ticket" \
4351 -s "a session has been resumed" \
4352 -c "a session has been resumed"
4353
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004354requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004355run_test "Session resume using cache: session copy" \
4356 "$P_SRV debug_level=3 tickets=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004357 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004358 0 \
4359 -s "session successfully restored from cache" \
4360 -S "session successfully restored from ticket" \
4361 -s "a session has been resumed" \
4362 -c "a session has been resumed"
4363
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004364requires_config_enabled MBEDTLS_SSL_CACHE_C
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004365requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004366run_test "Session resume using cache: openssl client" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004367 "$P_SRV force_version=tls12 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02004368 "( $O_CLI -sess_out $SESSION; \
4369 $O_CLI -sess_in $SESSION; \
4370 rm -f $SESSION )" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01004371 0 \
4372 -s "found session ticket extension" \
4373 -S "server hello, adding session ticket extension" \
4374 -s "session successfully restored from cache" \
4375 -S "session successfully restored from ticket" \
4376 -s "a session has been resumed"
4377
Jerry Yuab082902021-12-23 18:02:22 +08004378requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004379requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004380run_test "Session resume using cache: openssl server" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02004381 "$O_SRV -tls1_2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004382 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01004383 0 \
4384 -C "found session_ticket extension" \
4385 -C "parse new session ticket" \
4386 -c "a session has been resumed"
4387
Andrzej Kurek7cf87252022-06-14 07:12:33 -04004388# Tests for Session resume and extensions
4389
4390requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
4391requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
4392run_test "Session resume and connection ID" \
4393 "$P_SRV debug_level=3 cid=1 cid_val=dead dtls=1 tickets=0" \
4394 "$P_CLI debug_level=3 cid=1 cid_val=beef dtls=1 tickets=0 reconnect=1" \
4395 0 \
4396 -c "Enable use of CID extension." \
4397 -s "Enable use of CID extension." \
4398 -c "client hello, adding CID extension" \
4399 -s "found CID extension" \
4400 -s "Use of CID extension negotiated" \
4401 -s "server hello, adding CID extension" \
4402 -c "found CID extension" \
4403 -c "Use of CID extension negotiated" \
4404 -s "Copy CIDs into SSL transform" \
4405 -c "Copy CIDs into SSL transform" \
4406 -c "Peer CID (length 2 Bytes): de ad" \
4407 -s "Peer CID (length 2 Bytes): be ef" \
4408 -s "Use of Connection ID has been negotiated" \
4409 -c "Use of Connection ID has been negotiated"
4410
Hanno Becker1d739932018-08-21 13:55:22 +01004411# Tests for Session Resume based on session-ID and cache, DTLS
4412
Jerry Yuab082902021-12-23 18:02:22 +08004413requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004414requires_config_enabled MBEDTLS_SSL_CACHE_C
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004415requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker1d739932018-08-21 13:55:22 +01004416run_test "Session resume using cache, DTLS: tickets enabled on client" \
4417 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004418 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004419 0 \
4420 -c "client hello, adding session ticket extension" \
4421 -s "found session ticket extension" \
4422 -S "server hello, adding session ticket extension" \
4423 -C "found session_ticket extension" \
4424 -C "parse new session ticket" \
4425 -s "session successfully restored from cache" \
4426 -S "session successfully restored from ticket" \
4427 -s "a session has been resumed" \
4428 -c "a session has been resumed"
4429
Jerry Yuab082902021-12-23 18:02:22 +08004430requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004431requires_config_enabled MBEDTLS_SSL_CACHE_C
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004432requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker1d739932018-08-21 13:55:22 +01004433run_test "Session resume using cache, DTLS: tickets enabled on server" \
4434 "$P_SRV dtls=1 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004435 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004436 0 \
4437 -C "client hello, adding session ticket extension" \
4438 -S "found session ticket extension" \
4439 -S "server hello, adding session ticket extension" \
4440 -C "found session_ticket extension" \
4441 -C "parse new session ticket" \
4442 -s "session successfully restored from cache" \
4443 -S "session successfully restored from ticket" \
4444 -s "a session has been resumed" \
4445 -c "a session has been resumed"
4446
Jerry Yuab082902021-12-23 18:02:22 +08004447requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004448requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004449run_test "Session resume using cache, DTLS: cache_max=0" \
4450 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004451 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004452 0 \
4453 -S "session successfully restored from cache" \
4454 -S "session successfully restored from ticket" \
4455 -S "a session has been resumed" \
4456 -C "a session has been resumed"
4457
Jerry Yuab082902021-12-23 18:02:22 +08004458requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004459requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004460run_test "Session resume using cache, DTLS: cache_max=1" \
4461 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004462 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004463 0 \
4464 -s "session successfully restored from cache" \
4465 -S "session successfully restored from ticket" \
4466 -s "a session has been resumed" \
4467 -c "a session has been resumed"
4468
Jerry Yuab082902021-12-23 18:02:22 +08004469requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004470requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004471run_test "Session resume using cache, DTLS: timeout > delay" \
4472 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004473 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=0" \
Hanno Becker1d739932018-08-21 13:55:22 +01004474 0 \
4475 -s "session successfully restored from cache" \
4476 -S "session successfully restored from ticket" \
4477 -s "a session has been resumed" \
4478 -c "a session has been resumed"
4479
Jerry Yuab082902021-12-23 18:02:22 +08004480requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004481requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004482run_test "Session resume using cache, DTLS: timeout < delay" \
4483 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=1" \
Jerry Yua15af372022-12-05 15:55:24 +08004484 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=2000" \
Hanno Becker1d739932018-08-21 13:55:22 +01004485 0 \
4486 -S "session successfully restored from cache" \
4487 -S "session successfully restored from ticket" \
4488 -S "a session has been resumed" \
4489 -C "a session has been resumed"
4490
Jerry Yuab082902021-12-23 18:02:22 +08004491requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004492requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004493run_test "Session resume using cache, DTLS: no timeout" \
4494 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=0" \
Jerry Yua15af372022-12-05 15:55:24 +08004495 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=2000" \
Hanno Becker1d739932018-08-21 13:55:22 +01004496 0 \
4497 -s "session successfully restored from cache" \
4498 -S "session successfully restored from ticket" \
4499 -s "a session has been resumed" \
4500 -c "a session has been resumed"
4501
Jerry Yuab082902021-12-23 18:02:22 +08004502requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004503requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004504run_test "Session resume using cache, DTLS: session copy" \
4505 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004506 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004507 0 \
4508 -s "session successfully restored from cache" \
4509 -S "session successfully restored from ticket" \
4510 -s "a session has been resumed" \
4511 -c "a session has been resumed"
4512
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004513# For reasons that aren't fully understood, this test randomly fails with high
Paul Elliott09cfa182021-10-13 16:13:44 +01004514# probability with OpenSSL 1.0.2g on the CI, see #5012.
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004515requires_openssl_next
Jerry Yuab082902021-12-23 18:02:22 +08004516requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004517requires_config_enabled MBEDTLS_SSL_CACHE_C
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02004518requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004519run_test "Session resume using cache, DTLS: openssl client" \
4520 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004521 "( $O_NEXT_CLI -dtls -sess_out $SESSION; \
4522 $O_NEXT_CLI -dtls -sess_in $SESSION; \
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004523 rm -f $SESSION )" \
4524 0 \
4525 -s "found session ticket extension" \
4526 -S "server hello, adding session ticket extension" \
4527 -s "session successfully restored from cache" \
4528 -S "session successfully restored from ticket" \
4529 -s "a session has been resumed"
4530
Jerry Yuab082902021-12-23 18:02:22 +08004531requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004532requires_config_enabled MBEDTLS_SSL_CACHE_C
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004533run_test "Session resume using cache, DTLS: openssl server" \
4534 "$O_SRV -dtls" \
4535 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
4536 0 \
4537 -C "found session_ticket extension" \
4538 -C "parse new session ticket" \
4539 -c "a session has been resumed"
4540
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004541# Tests for Max Fragment Length extension
4542
Hanno Becker4aed27e2017-09-18 15:00:34 +01004543requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004544requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc5266962017-09-18 15:01:50 +01004545run_test "Max fragment length: enabled, default" \
Waleed Elmelegy3d46b7f2024-01-01 20:50:53 +00004546 "$P_SRV debug_level=3 force_version=tls12" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004547 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004548 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004549 -c "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4550 -c "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
4551 -s "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4552 -s "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004553 -C "client hello, adding max_fragment_length extension" \
4554 -S "found max fragment length extension" \
4555 -S "server hello, max_fragment_length extension" \
4556 -C "found max_fragment_length extension"
4557
Hanno Becker4aed27e2017-09-18 15:00:34 +01004558requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004559requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc5266962017-09-18 15:01:50 +01004560run_test "Max fragment length: enabled, default, larger message" \
Waleed Elmelegy3d46b7f2024-01-01 20:50:53 +00004561 "$P_SRV debug_level=3 force_version=tls12" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004562 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004563 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004564 -c "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4565 -c "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
4566 -s "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4567 -s "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004568 -C "client hello, adding max_fragment_length extension" \
4569 -S "found max fragment length extension" \
4570 -S "server hello, max_fragment_length extension" \
4571 -C "found max_fragment_length extension" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004572 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
4573 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01004574 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01004575
4576requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004577requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc5266962017-09-18 15:01:50 +01004578run_test "Max fragment length, DTLS: enabled, default, larger message" \
4579 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004580 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004581 1 \
Hanno Becker59d36702021-06-08 05:35:29 +01004582 -c "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4583 -c "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
4584 -s "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4585 -s "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004586 -C "client hello, adding max_fragment_length extension" \
4587 -S "found max fragment length extension" \
4588 -S "server hello, max_fragment_length extension" \
4589 -C "found max_fragment_length extension" \
4590 -c "fragment larger than.*maximum "
4591
Angus Grattonc4dd0732018-04-11 16:28:39 +10004592# Run some tests with MBEDTLS_SSL_MAX_FRAGMENT_LENGTH disabled
4593# (session fragment length will be 16384 regardless of mbedtls
4594# content length configuration.)
4595
Hanno Beckerc5266962017-09-18 15:01:50 +01004596requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004597requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc5266962017-09-18 15:01:50 +01004598run_test "Max fragment length: disabled, larger message" \
Waleed Elmelegy3d46b7f2024-01-01 20:50:53 +00004599 "$P_SRV debug_level=3 force_version=tls12" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004600 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004601 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004602 -C "Maximum incoming record payload length is 16384" \
4603 -C "Maximum outgoing record payload length is 16384" \
4604 -S "Maximum incoming record payload length is 16384" \
4605 -S "Maximum outgoing record payload length is 16384" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004606 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
4607 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01004608 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01004609
4610requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004611requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Yuto Takano0509fea2021-06-21 19:43:33 +01004612run_test "Max fragment length, DTLS: disabled, larger message" \
Waleed Elmelegy3d46b7f2024-01-01 20:50:53 +00004613 "$P_SRV debug_level=3 dtls=1 force_version=tls12" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004614 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004615 1 \
Hanno Becker59d36702021-06-08 05:35:29 +01004616 -C "Maximum incoming record payload length is 16384" \
4617 -C "Maximum outgoing record payload length is 16384" \
4618 -S "Maximum incoming record payload length is 16384" \
4619 -S "Maximum outgoing record payload length is 16384" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004620 -c "fragment larger than.*maximum "
4621
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004622requires_max_content_len 4096
Hanno Beckerc5266962017-09-18 15:01:50 +01004623requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004624run_test "Max fragment length: used by client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004625 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004626 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004627 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004628 -c "Maximum incoming record payload length is 4096" \
4629 -c "Maximum outgoing record payload length is 4096" \
4630 -s "Maximum incoming record payload length is 4096" \
4631 -s "Maximum outgoing record payload length is 4096" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004632 -c "client hello, adding max_fragment_length extension" \
4633 -s "found max fragment length extension" \
4634 -s "server hello, max_fragment_length extension" \
4635 -c "found max_fragment_length extension"
4636
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004637requires_max_content_len 1024
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004638requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4639run_test "Max fragment length: client 512, server 1024" \
4640 "$P_SRV debug_level=3 max_frag_len=1024" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004641 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004642 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004643 -c "Maximum incoming record payload length is 512" \
4644 -c "Maximum outgoing record payload length is 512" \
4645 -s "Maximum incoming record payload length is 512" \
4646 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004647 -c "client hello, adding max_fragment_length extension" \
4648 -s "found max fragment length extension" \
4649 -s "server hello, max_fragment_length extension" \
4650 -c "found max_fragment_length extension"
4651
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004652requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004653requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4654run_test "Max fragment length: client 512, server 2048" \
4655 "$P_SRV debug_level=3 max_frag_len=2048" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004656 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004657 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004658 -c "Maximum incoming record payload length is 512" \
4659 -c "Maximum outgoing record payload length is 512" \
4660 -s "Maximum incoming record payload length is 512" \
4661 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004662 -c "client hello, adding max_fragment_length extension" \
4663 -s "found max fragment length extension" \
4664 -s "server hello, max_fragment_length extension" \
4665 -c "found max_fragment_length extension"
4666
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004667requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004668requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4669run_test "Max fragment length: client 512, server 4096" \
4670 "$P_SRV debug_level=3 max_frag_len=4096" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004671 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004672 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004673 -c "Maximum incoming record payload length is 512" \
4674 -c "Maximum outgoing record payload length is 512" \
4675 -s "Maximum incoming record payload length is 512" \
4676 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004677 -c "client hello, adding max_fragment_length extension" \
4678 -s "found max fragment length extension" \
4679 -s "server hello, max_fragment_length extension" \
4680 -c "found max_fragment_length extension"
4681
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004682requires_max_content_len 1024
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004683requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4684run_test "Max fragment length: client 1024, server 512" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004685 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004686 "$P_CLI debug_level=3 max_frag_len=1024" \
4687 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004688 -c "Maximum incoming record payload length is 1024" \
4689 -c "Maximum outgoing record payload length is 1024" \
4690 -s "Maximum incoming record payload length is 1024" \
4691 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004692 -c "client hello, adding max_fragment_length extension" \
4693 -s "found max fragment length extension" \
4694 -s "server hello, max_fragment_length extension" \
4695 -c "found max_fragment_length extension"
4696
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004697requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004698requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4699run_test "Max fragment length: client 1024, server 2048" \
4700 "$P_SRV debug_level=3 max_frag_len=2048" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004701 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004702 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004703 -c "Maximum incoming record payload length is 1024" \
4704 -c "Maximum outgoing record payload length is 1024" \
4705 -s "Maximum incoming record payload length is 1024" \
4706 -s "Maximum outgoing record payload length is 1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004707 -c "client hello, adding max_fragment_length extension" \
4708 -s "found max fragment length extension" \
4709 -s "server hello, max_fragment_length extension" \
4710 -c "found max_fragment_length extension"
4711
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004712requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004713requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4714run_test "Max fragment length: client 1024, server 4096" \
4715 "$P_SRV debug_level=3 max_frag_len=4096" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004716 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004717 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004718 -c "Maximum incoming record payload length is 1024" \
4719 -c "Maximum outgoing record payload length is 1024" \
4720 -s "Maximum incoming record payload length is 1024" \
4721 -s "Maximum outgoing record payload length is 1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004722 -c "client hello, adding max_fragment_length extension" \
4723 -s "found max fragment length extension" \
4724 -s "server hello, max_fragment_length extension" \
4725 -c "found max_fragment_length extension"
4726
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004727requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004728requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4729run_test "Max fragment length: client 2048, server 512" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004730 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004731 "$P_CLI debug_level=3 max_frag_len=2048" \
4732 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004733 -c "Maximum incoming record payload length is 2048" \
4734 -c "Maximum outgoing record payload length is 2048" \
4735 -s "Maximum incoming record payload length is 2048" \
4736 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004737 -c "client hello, adding max_fragment_length extension" \
4738 -s "found max fragment length extension" \
4739 -s "server hello, max_fragment_length extension" \
4740 -c "found max_fragment_length extension"
4741
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004742requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004743requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4744run_test "Max fragment length: client 2048, server 1024" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004745 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004746 "$P_CLI debug_level=3 max_frag_len=2048" \
4747 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004748 -c "Maximum incoming record payload length is 2048" \
4749 -c "Maximum outgoing record payload length is 2048" \
4750 -s "Maximum incoming record payload length is 2048" \
4751 -s "Maximum outgoing record payload length is 1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004752 -c "client hello, adding max_fragment_length extension" \
4753 -s "found max fragment length extension" \
4754 -s "server hello, max_fragment_length extension" \
4755 -c "found max_fragment_length extension"
4756
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004757requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004758requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4759run_test "Max fragment length: client 2048, server 4096" \
4760 "$P_SRV debug_level=3 max_frag_len=4096" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004761 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=2048" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004762 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004763 -c "Maximum incoming record payload length is 2048" \
4764 -c "Maximum outgoing record payload length is 2048" \
4765 -s "Maximum incoming record payload length is 2048" \
4766 -s "Maximum outgoing record payload length is 2048" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004767 -c "client hello, adding max_fragment_length extension" \
4768 -s "found max fragment length extension" \
4769 -s "server hello, max_fragment_length extension" \
4770 -c "found max_fragment_length extension"
4771
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004772requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004773requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4774run_test "Max fragment length: client 4096, server 512" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004775 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004776 "$P_CLI debug_level=3 max_frag_len=4096" \
4777 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004778 -c "Maximum incoming record payload length is 4096" \
4779 -c "Maximum outgoing record payload length is 4096" \
4780 -s "Maximum incoming record payload length is 4096" \
4781 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004782 -c "client hello, adding max_fragment_length extension" \
4783 -s "found max fragment length extension" \
4784 -s "server hello, max_fragment_length extension" \
4785 -c "found max_fragment_length extension"
4786
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004787requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004788requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4789run_test "Max fragment length: client 4096, server 1024" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004790 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004791 "$P_CLI debug_level=3 max_frag_len=4096" \
4792 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004793 -c "Maximum incoming record payload length is 4096" \
4794 -c "Maximum outgoing record payload length is 4096" \
4795 -s "Maximum incoming record payload length is 4096" \
4796 -s "Maximum outgoing record payload length is 1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004797 -c "client hello, adding max_fragment_length extension" \
4798 -s "found max fragment length extension" \
4799 -s "server hello, max_fragment_length extension" \
4800 -c "found max_fragment_length extension"
4801
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004802requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004803requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4804run_test "Max fragment length: client 4096, server 2048" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004805 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=2048" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004806 "$P_CLI debug_level=3 max_frag_len=4096" \
4807 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004808 -c "Maximum incoming record payload length is 4096" \
4809 -c "Maximum outgoing record payload length is 4096" \
4810 -s "Maximum incoming record payload length is 4096" \
4811 -s "Maximum outgoing record payload length is 2048" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004812 -c "client hello, adding max_fragment_length extension" \
4813 -s "found max fragment length extension" \
4814 -s "server hello, max_fragment_length extension" \
4815 -c "found max_fragment_length extension"
4816
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004817requires_max_content_len 4096
Hanno Becker4aed27e2017-09-18 15:00:34 +01004818requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004819run_test "Max fragment length: used by server" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004820 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004821 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004822 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004823 -c "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4824 -c "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
4825 -s "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4826 -s "Maximum outgoing record payload length is 4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004827 -C "client hello, adding max_fragment_length extension" \
4828 -S "found max fragment length extension" \
4829 -S "server hello, max_fragment_length extension" \
4830 -C "found max_fragment_length extension"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004831
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004832requires_max_content_len 4096
Hanno Becker4aed27e2017-09-18 15:00:34 +01004833requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004834requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08004835requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004836run_test "Max fragment length: gnutls server" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02004837 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004838 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02004839 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004840 -c "Maximum incoming record payload length is 4096" \
4841 -c "Maximum outgoing record payload length is 4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02004842 -c "client hello, adding max_fragment_length extension" \
4843 -c "found max_fragment_length extension"
4844
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004845requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01004846requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004847run_test "Max fragment length: client, message just fits" \
4848 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004849 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=2048 request_size=2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004850 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004851 -c "Maximum incoming record payload length is 2048" \
4852 -c "Maximum outgoing record payload length is 2048" \
4853 -s "Maximum incoming record payload length is 2048" \
4854 -s "Maximum outgoing record payload length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004855 -c "client hello, adding max_fragment_length extension" \
4856 -s "found max fragment length extension" \
4857 -s "server hello, max_fragment_length extension" \
4858 -c "found max_fragment_length extension" \
4859 -c "2048 bytes written in 1 fragments" \
4860 -s "2048 bytes read"
4861
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004862requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01004863requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004864run_test "Max fragment length: client, larger message" \
4865 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004866 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=2048 request_size=2345" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004867 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004868 -c "Maximum incoming record payload length is 2048" \
4869 -c "Maximum outgoing record payload length is 2048" \
4870 -s "Maximum incoming record payload length is 2048" \
4871 -s "Maximum outgoing record payload length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004872 -c "client hello, adding max_fragment_length extension" \
4873 -s "found max fragment length extension" \
4874 -s "server hello, max_fragment_length extension" \
4875 -c "found max_fragment_length extension" \
4876 -c "2345 bytes written in 2 fragments" \
4877 -s "2048 bytes read" \
4878 -s "297 bytes read"
4879
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004880requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01004881requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004882requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard23eb74d2015-01-21 14:37:13 +00004883run_test "Max fragment length: DTLS client, larger message" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004884 "$P_SRV debug_level=3 dtls=1" \
4885 "$P_CLI debug_level=3 dtls=1 max_frag_len=2048 request_size=2345" \
4886 1 \
Hanno Becker59d36702021-06-08 05:35:29 +01004887 -c "Maximum incoming record payload length is 2048" \
4888 -c "Maximum outgoing record payload length is 2048" \
4889 -s "Maximum incoming record payload length is 2048" \
4890 -s "Maximum outgoing record payload length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004891 -c "client hello, adding max_fragment_length extension" \
4892 -s "found max fragment length extension" \
4893 -s "server hello, max_fragment_length extension" \
4894 -c "found max_fragment_length extension" \
4895 -c "fragment larger than.*maximum"
4896
Jan Bruckneraa31b192023-02-06 12:54:29 +01004897# Tests for Record Size Limit extension
4898
Jan Bruckneraa31b192023-02-06 12:54:29 +01004899requires_gnutls_tls1_3
4900requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02004901requires_config_enabled MBEDTLS_SSL_SRV_C
4902requires_config_enabled MBEDTLS_DEBUG_C
Jan Bruckner151f6422023-02-10 12:45:19 +01004903requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy9457e672024-01-08 15:40:12 +00004904requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jan Brucknerf482dcc2023-03-15 09:09:06 +01004905run_test "Record Size Limit: TLS 1.3: Server-side parsing and debug output" \
Jan Bruckner151f6422023-02-10 12:45:19 +01004906 "$P_SRV debug_level=3 force_version=tls13" \
Jan Bruckneraa31b192023-02-06 12:54:29 +01004907 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -d 4" \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01004908 0 \
Jan Bruckner151f6422023-02-10 12:45:19 +01004909 -s "RecordSizeLimit: 16385 Bytes" \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01004910 -s "ClientHello: record_size_limit(28) extension exists." \
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004911 -s "Maximum outgoing record payload length is 16383" \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01004912 -s "bytes written in 1 fragments"
Jan Bruckner151f6422023-02-10 12:45:19 +01004913
4914requires_gnutls_tls1_3
4915requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02004916requires_config_enabled MBEDTLS_SSL_CLI_C
4917requires_config_enabled MBEDTLS_DEBUG_C
Jan Bruckner151f6422023-02-10 12:45:19 +01004918requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy9457e672024-01-08 15:40:12 +00004919requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jan Brucknerf482dcc2023-03-15 09:09:06 +01004920run_test "Record Size Limit: TLS 1.3: Client-side parsing and debug output" \
Waleed Elmelegy9457e672024-01-08 15:40:12 +00004921 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL --disable-client-cert -d 4" \
Jan Bruckner151f6422023-02-10 12:45:19 +01004922 "$P_CLI debug_level=4 force_version=tls13" \
Jan Bruckneraa31b192023-02-06 12:54:29 +01004923 0 \
Yanray Wang42017cd2023-11-08 11:15:23 +08004924 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy3a377562024-01-05 18:13:42 +00004925 -c "ClientHello: record_size_limit(28) extension exists." \
Waleed Elmelegy3a377562024-01-05 18:13:42 +00004926 -c "EncryptedExtensions: record_size_limit(28) extension received." \
Yanray Wang42017cd2023-11-08 11:15:23 +08004927 -c "RecordSizeLimit: 16385 Bytes" \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01004928
Waleed Elmelegyf5017902024-01-09 14:18:34 +00004929# In the following tests, --recordsize is the value used by the G_NEXT_CLI (3.7.2) to configure the
4930# maximum record size using gnutls_record_set_max_size()
4931# (https://gnutls.org/reference/gnutls-gnutls.html#gnutls-record-set-max-size).
4932# There is currently a lower limit of 512, caused by gnutls_record_set_max_size()
4933# not respecting the "%ALLOW_SMALL_RECORDS" priority string and not using the
4934# more recent function gnutls_record_set_max_recv_size()
4935# (https://gnutls.org/reference/gnutls-gnutls.html#gnutls-record-set-max-recv-size).
Jan Brucknerf482dcc2023-03-15 09:09:06 +01004936# There is currently an upper limit of 4096, caused by the cli arg parser:
4937# https://gitlab.com/gnutls/gnutls/-/blob/3.7.2/src/cli-args.def#L395.
Waleed Elmelegyf5017902024-01-09 14:18:34 +00004938# Thus, these tests are currently limited to the value range 512-4096.
4939# Also, the value sent in the extension will be one larger than the value
4940# set at the command line:
Jan Brucknerf482dcc2023-03-15 09:09:06 +01004941# https://gitlab.com/gnutls/gnutls/-/blob/3.7.2/lib/ext/record_size_limit.c#L142
Waleed Elmelegy9aec1c72023-12-05 20:08:51 +00004942
4943# Currently test certificates being used do not fit in 513 record size limit
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004944# so for 513 record size limit tests we use preshared key to avoid sending
4945# the certificate.
Waleed Elmelegy9aec1c72023-12-05 20:08:51 +00004946
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004947requires_gnutls_tls1_3
4948requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02004949requires_config_enabled MBEDTLS_SSL_SRV_C
4950requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004951requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
4952requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
4953run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (513), 1 fragment" \
4954 "$P_SRV debug_level=3 force_version=tls13 tls13_kex_modes=psk \
4955 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70 \
4956 response_size=256" \
Waleed Elmelegy9457e672024-01-08 15:40:12 +00004957 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+PSK --recordsize 512 \
4958 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70" \
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004959 0 \
4960 -s "RecordSizeLimit: 513 Bytes" \
Waleed Elmelegy9457e672024-01-08 15:40:12 +00004961 -s "ClientHello: record_size_limit(28) extension exists." \
4962 -s "Sent RecordSizeLimit: 16384 Bytes" \
4963 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004964 -s "Maximum outgoing record payload length is 511" \
4965 -s "256 bytes written in 1 fragments"
Waleed Elmelegy9aec1c72023-12-05 20:08:51 +00004966
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004967requires_gnutls_tls1_3
4968requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02004969requires_config_enabled MBEDTLS_SSL_SRV_C
4970requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004971requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
4972requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
4973run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (513), 2 fragments" \
4974 "$P_SRV debug_level=3 force_version=tls13 tls13_kex_modes=psk \
4975 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70 \
4976 response_size=768" \
4977 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+PSK --recordsize 512 \
4978 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70" \
4979 0 \
4980 -s "RecordSizeLimit: 513 Bytes" \
Waleed Elmelegy9457e672024-01-08 15:40:12 +00004981 -s "ClientHello: record_size_limit(28) extension exists." \
4982 -s "Sent RecordSizeLimit: 16384 Bytes" \
4983 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004984 -s "Maximum outgoing record payload length is 511" \
4985 -s "768 bytes written in 2 fragments"
Waleed Elmelegy9aec1c72023-12-05 20:08:51 +00004986
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004987requires_gnutls_tls1_3
4988requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02004989requires_config_enabled MBEDTLS_SSL_SRV_C
4990requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00004991requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
4992requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
4993run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (513), 3 fragments" \
4994 "$P_SRV debug_level=3 force_version=tls13 tls13_kex_modes=psk \
4995 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70 \
4996 response_size=1280" \
4997 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+PSK --recordsize 512 \
4998 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70" \
4999 0 \
5000 -s "RecordSizeLimit: 513 Bytes" \
Waleed Elmelegy9457e672024-01-08 15:40:12 +00005001 -s "ClientHello: record_size_limit(28) extension exists." \
5002 -s "Sent RecordSizeLimit: 16384 Bytes" \
5003 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Waleed Elmelegy87a373e2023-12-28 17:49:36 +00005004 -s "Maximum outgoing record payload length is 511" \
5005 -s "1280 bytes written in 3 fragments"
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005006
5007requires_gnutls_tls1_3
5008requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005009requires_config_enabled MBEDTLS_SSL_SRV_C
5010requires_config_enabled MBEDTLS_DEBUG_C
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005011requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy60f0f722024-01-04 14:57:31 +00005012requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005013run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (1024), 1 fragment" \
5014 "$P_SRV debug_level=3 force_version=tls13 response_size=512" \
5015 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -d 4 --recordsize 1023" \
5016 0 \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005017 -s "RecordSizeLimit: 1024 Bytes" \
5018 -s "ClientHello: record_size_limit(28) extension exists." \
Waleed Elmelegy47d29462024-01-03 17:31:52 +00005019 -s "Sent RecordSizeLimit: 16384 Bytes" \
5020 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005021 -s "Maximum outgoing record payload length is 1023" \
5022 -s "512 bytes written in 1 fragments"
5023
5024requires_gnutls_tls1_3
5025requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005026requires_config_enabled MBEDTLS_SSL_SRV_C
5027requires_config_enabled MBEDTLS_DEBUG_C
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005028requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy60f0f722024-01-04 14:57:31 +00005029requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005030run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (1024), 2 fragments" \
5031 "$P_SRV debug_level=3 force_version=tls13 response_size=1536" \
5032 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -d 4 --recordsize 1023" \
5033 0 \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005034 -s "RecordSizeLimit: 1024 Bytes" \
5035 -s "ClientHello: record_size_limit(28) extension exists." \
Waleed Elmelegy47d29462024-01-03 17:31:52 +00005036 -s "Sent RecordSizeLimit: 16384 Bytes" \
5037 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005038 -s "Maximum outgoing record payload length is 1023" \
5039 -s "1536 bytes written in 2 fragments"
5040
5041requires_gnutls_tls1_3
5042requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005043requires_config_enabled MBEDTLS_SSL_SRV_C
5044requires_config_enabled MBEDTLS_DEBUG_C
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005045requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy60f0f722024-01-04 14:57:31 +00005046requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005047run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (1024), 3 fragments" \
5048 "$P_SRV debug_level=3 force_version=tls13 response_size=2560" \
5049 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -d 4 --recordsize 1023" \
5050 0 \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005051 -s "RecordSizeLimit: 1024 Bytes" \
5052 -s "ClientHello: record_size_limit(28) extension exists." \
Waleed Elmelegy47d29462024-01-03 17:31:52 +00005053 -s "Sent RecordSizeLimit: 16384 Bytes" \
5054 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005055 -s "Maximum outgoing record payload length is 1023" \
5056 -s "2560 bytes written in 3 fragments"
5057
5058requires_gnutls_tls1_3
5059requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005060requires_config_enabled MBEDTLS_SSL_SRV_C
5061requires_config_enabled MBEDTLS_DEBUG_C
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005062requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy60f0f722024-01-04 14:57:31 +00005063requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005064run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (4096), 1 fragment" \
5065 "$P_SRV debug_level=3 force_version=tls13 response_size=2048" \
5066 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -d 4 --recordsize 4095" \
5067 0 \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005068 -s "RecordSizeLimit: 4096 Bytes" \
5069 -s "ClientHello: record_size_limit(28) extension exists." \
Waleed Elmelegy47d29462024-01-03 17:31:52 +00005070 -s "Sent RecordSizeLimit: 16384 Bytes" \
5071 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005072 -s "Maximum outgoing record payload length is 4095" \
5073 -s "2048 bytes written in 1 fragments"
5074
5075requires_gnutls_tls1_3
5076requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005077requires_config_enabled MBEDTLS_SSL_SRV_C
5078requires_config_enabled MBEDTLS_DEBUG_C
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005079requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy60f0f722024-01-04 14:57:31 +00005080requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005081run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (4096), 2 fragments" \
5082 "$P_SRV debug_level=3 force_version=tls13 response_size=6144" \
5083 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -d 4 --recordsize 4095" \
5084 0 \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005085 -s "RecordSizeLimit: 4096 Bytes" \
5086 -s "ClientHello: record_size_limit(28) extension exists." \
Waleed Elmelegy47d29462024-01-03 17:31:52 +00005087 -s "Sent RecordSizeLimit: 16384 Bytes" \
5088 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005089 -s "Maximum outgoing record payload length is 4095" \
5090 -s "6144 bytes written in 2 fragments"
5091
5092requires_gnutls_tls1_3
5093requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005094requires_config_enabled MBEDTLS_SSL_SRV_C
5095requires_config_enabled MBEDTLS_DEBUG_C
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005096requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy60f0f722024-01-04 14:57:31 +00005097requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005098run_test "Record Size Limit: TLS 1.3: Server complies with record size limit (4096), 3 fragments" \
5099 "$P_SRV debug_level=3 force_version=tls13 response_size=10240" \
5100 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -d 4 --recordsize 4095" \
5101 0 \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005102 -s "RecordSizeLimit: 4096 Bytes" \
5103 -s "ClientHello: record_size_limit(28) extension exists." \
Waleed Elmelegy598ea092024-01-03 17:34:03 +00005104 -s "Sent RecordSizeLimit: 16384 Bytes" \
5105 -s "EncryptedExtensions: record_size_limit(28) extension exists." \
Jan Brucknerf482dcc2023-03-15 09:09:06 +01005106 -s "Maximum outgoing record payload length is 4095" \
5107 -s "10240 bytes written in 3 fragments"
Jan Bruckneraa31b192023-02-06 12:54:29 +01005108
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005109requires_gnutls_tls1_3
5110requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005111requires_config_enabled MBEDTLS_SSL_CLI_C
5112requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005113requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5114requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5115run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (513), 1 fragment" \
5116 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --disable-client-cert --recordsize 512" \
5117 "$P_CLI debug_level=4 force_version=tls13 request_size=256" \
5118 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005119 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005120 -c "ClientHello: record_size_limit(28) extension exists." \
5121 -c "RecordSizeLimit: 513 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005122 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5123 -c "Maximum outgoing record payload length is 511" \
5124 -c "256 bytes written in 1 fragments"
5125
5126requires_gnutls_tls1_3
5127requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005128requires_config_enabled MBEDTLS_SSL_CLI_C
5129requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005130requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5131requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5132run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (513), 2 fragments" \
5133 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --disable-client-cert --recordsize 512" \
5134 "$P_CLI debug_level=4 force_version=tls13 request_size=768" \
5135 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005136 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005137 -c "ClientHello: record_size_limit(28) extension exists." \
5138 -c "RecordSizeLimit: 513 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005139 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5140 -c "Maximum outgoing record payload length is 511" \
5141 -c "768 bytes written in 2 fragments"
5142
5143requires_gnutls_tls1_3
5144requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005145requires_config_enabled MBEDTLS_SSL_CLI_C
5146requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005147requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5148requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5149run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (513), 3 fragments" \
5150 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --disable-client-cert --recordsize 512" \
5151 "$P_CLI debug_level=4 force_version=tls13 request_size=1280" \
5152 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005153 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005154 -c "ClientHello: record_size_limit(28) extension exists." \
5155 -c "RecordSizeLimit: 513 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005156 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5157 -c "Maximum outgoing record payload length is 511" \
5158 -c "1280 bytes written in 3 fragments"
5159
5160requires_gnutls_tls1_3
5161requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005162requires_config_enabled MBEDTLS_SSL_CLI_C
5163requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005164requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5165requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5166run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (1024), 1 fragment" \
5167 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --recordsize 1023" \
5168 "$P_CLI debug_level=4 force_version=tls13 request_size=512" \
5169 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005170 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005171 -c "ClientHello: record_size_limit(28) extension exists." \
5172 -c "RecordSizeLimit: 1024 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005173 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5174 -c "Maximum outgoing record payload length is 1023" \
5175 -c "512 bytes written in 1 fragments"
5176
5177requires_gnutls_tls1_3
5178requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005179requires_config_enabled MBEDTLS_SSL_CLI_C
5180requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005181requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5182requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5183run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (1024), 2 fragments" \
5184 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --recordsize 1023" \
5185 "$P_CLI debug_level=4 force_version=tls13 request_size=1536" \
5186 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005187 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005188 -c "ClientHello: record_size_limit(28) extension exists." \
5189 -c "RecordSizeLimit: 1024 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005190 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5191 -c "Maximum outgoing record payload length is 1023" \
5192 -c "1536 bytes written in 2 fragments"
5193
5194requires_gnutls_tls1_3
5195requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005196requires_config_enabled MBEDTLS_SSL_CLI_C
5197requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005198requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5199requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5200run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (1024), 3 fragments" \
5201 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --recordsize 1023" \
5202 "$P_CLI debug_level=4 force_version=tls13 request_size=2560" \
5203 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005204 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005205 -c "ClientHello: record_size_limit(28) extension exists." \
5206 -c "RecordSizeLimit: 1024 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005207 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5208 -c "Maximum outgoing record payload length is 1023" \
5209 -c "2560 bytes written in 3 fragments"
5210
5211requires_gnutls_tls1_3
5212requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005213requires_config_enabled MBEDTLS_SSL_CLI_C
5214requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005215requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5216requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5217run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (4096), 1 fragment" \
5218 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --recordsize 4095" \
5219 "$P_CLI debug_level=4 force_version=tls13 request_size=2048" \
5220 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005221 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005222 -c "ClientHello: record_size_limit(28) extension exists." \
5223 -c "RecordSizeLimit: 4096 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005224 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5225 -c "Maximum outgoing record payload length is 4095" \
5226 -c "2048 bytes written in 1 fragments"
5227
5228requires_gnutls_tls1_3
5229requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005230requires_config_enabled MBEDTLS_SSL_CLI_C
5231requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005232requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5233requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5234run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (4096), 2 fragments" \
5235 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --recordsize 4095" \
5236 "$P_CLI debug_level=4 force_version=tls13 request_size=6144" \
5237 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005238 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005239 -c "ClientHello: record_size_limit(28) extension exists." \
5240 -c "RecordSizeLimit: 4096 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005241 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5242 -c "Maximum outgoing record payload length is 4095" \
5243 -c "6144 bytes written in 2 fragments"
5244
5245requires_gnutls_tls1_3
5246requires_gnutls_record_size_limit
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005247requires_config_enabled MBEDTLS_SSL_CLI_C
5248requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005249requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
5250requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5251run_test "Record Size Limit: TLS 1.3: Client complies with record size limit (4096), 3 fragments" \
5252 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL -d 4 --recordsize 4095" \
5253 "$P_CLI debug_level=4 force_version=tls13 request_size=10240" \
5254 0 \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005255 -c "Sent RecordSizeLimit: 16384 Bytes" \
Waleed Elmelegy14877602024-01-10 16:15:08 +00005256 -c "ClientHello: record_size_limit(28) extension exists." \
5257 -c "RecordSizeLimit: 4096 Bytes" \
Waleed Elmelegy2fa99b22024-01-09 17:15:03 +00005258 -c "EncryptedExtensions: record_size_limit(28) extension exists." \
5259 -c "Maximum outgoing record payload length is 4095" \
5260 -c "10240 bytes written in 3 fragments"
5261
Waleed Elmelegy598ea092024-01-03 17:34:03 +00005262# TODO: For time being, we send fixed value of RecordSizeLimit defined by
5263# MBEDTLS_SSL_IN_CONTENT_LEN. Once we support variable buffer length of
5264# RecordSizeLimit, we need to modify value of RecordSizeLimit in below test.
Waleed Elmelegy3a377562024-01-05 18:13:42 +00005265requires_config_value_equals "MBEDTLS_SSL_IN_CONTENT_LEN" 16384
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02005266requires_config_enabled MBEDTLS_SSL_CLI_C
5267requires_config_enabled MBEDTLS_SSL_SRV_C
5268requires_config_enabled MBEDTLS_DEBUG_C
Waleed Elmelegy598ea092024-01-03 17:34:03 +00005269requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
Waleed Elmelegy3a377562024-01-05 18:13:42 +00005270requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5271run_test "Record Size Limit: TLS 1.3 m->m: both peer comply with record size limit (default)" \
Waleed Elmelegy598ea092024-01-03 17:34:03 +00005272 "$P_SRV debug_level=4 force_version=tls13" \
Waleed Elmelegy3a377562024-01-05 18:13:42 +00005273 "$P_CLI debug_level=4" \
Waleed Elmelegy598ea092024-01-03 17:34:03 +00005274 0 \
Waleed Elmelegy3a377562024-01-05 18:13:42 +00005275 -c "Sent RecordSizeLimit: $MAX_IN_LEN Bytes" \
5276 -c "RecordSizeLimit: $MAX_IN_LEN Bytes" \
Waleed Elmelegy3a377562024-01-05 18:13:42 +00005277 -s "RecordSizeLimit: $MAX_IN_LEN Bytes" \
5278 -s "Sent RecordSizeLimit: $MAX_IN_LEN Bytes" \
5279 -s "Maximum outgoing record payload length is 16383" \
Waleed Elmelegy598ea092024-01-03 17:34:03 +00005280 -s "Maximum incoming record payload length is 16384"
5281
Waleed Elmelegyf5017902024-01-09 14:18:34 +00005282# End of Record size limit tests
5283
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005284# Tests for renegotiation
5285
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005286# G_NEXT_SRV is used in renegotiation tests becuase of the increased
5287# extensions limit since we exceed the limit in G_SRV when we send
5288# TLS 1.3 extensions in the initial handshake.
5289
Hanno Becker6a243642017-10-12 15:18:45 +01005290# Renegotiation SCSV always added, regardless of SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005291run_test "Renegotiation: none, for reference" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005292 "$P_SRV debug_level=3 exchanges=2 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005293 "$P_CLI force_version=tls12 debug_level=3 exchanges=2" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005294 0 \
5295 -C "client hello, adding renegotiation extension" \
5296 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5297 -S "found renegotiation extension" \
5298 -s "server hello, secure renegotiation extension" \
5299 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01005300 -C "=> renegotiate" \
5301 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005302 -S "write hello request"
5303
Hanno Becker6a243642017-10-12 15:18:45 +01005304requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005305run_test "Renegotiation: client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005306 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005307 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005308 0 \
5309 -c "client hello, adding renegotiation extension" \
5310 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5311 -s "found renegotiation extension" \
5312 -s "server hello, secure renegotiation extension" \
5313 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01005314 -c "=> renegotiate" \
5315 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005316 -S "write hello request"
5317
Hanno Becker6a243642017-10-12 15:18:45 +01005318requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005319run_test "Renegotiation: server-initiated" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005320 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005321 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005322 0 \
5323 -c "client hello, adding renegotiation extension" \
5324 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5325 -s "found renegotiation extension" \
5326 -s "server hello, secure renegotiation extension" \
5327 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01005328 -c "=> renegotiate" \
5329 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005330 -s "write hello request"
5331
Janos Follathb0f148c2017-10-05 12:29:42 +01005332# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
5333# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +02005334# algorithm stronger than SHA-1 is enabled in mbedtls_config.h
Hanno Becker6a243642017-10-12 15:18:45 +01005335requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01005336run_test "Renegotiation: Signature Algorithms parsing, client-initiated" \
5337 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005338 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Janos Follathb0f148c2017-10-05 12:29:42 +01005339 0 \
5340 -c "client hello, adding renegotiation extension" \
5341 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5342 -s "found renegotiation extension" \
5343 -s "server hello, secure renegotiation extension" \
5344 -c "found renegotiation extension" \
5345 -c "=> renegotiate" \
5346 -s "=> renegotiate" \
5347 -S "write hello request" \
5348 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
5349
5350# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
5351# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +02005352# algorithm stronger than SHA-1 is enabled in mbedtls_config.h
Hanno Becker6a243642017-10-12 15:18:45 +01005353requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01005354run_test "Renegotiation: Signature Algorithms parsing, server-initiated" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005355 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Janos Follathb0f148c2017-10-05 12:29:42 +01005356 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
5357 0 \
5358 -c "client hello, adding renegotiation extension" \
5359 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5360 -s "found renegotiation extension" \
5361 -s "server hello, secure renegotiation extension" \
5362 -c "found renegotiation extension" \
5363 -c "=> renegotiate" \
5364 -s "=> renegotiate" \
5365 -s "write hello request" \
5366 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
5367
Hanno Becker6a243642017-10-12 15:18:45 +01005368requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005369run_test "Renegotiation: double" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005370 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005371 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005372 0 \
5373 -c "client hello, adding renegotiation extension" \
5374 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5375 -s "found renegotiation extension" \
5376 -s "server hello, secure renegotiation extension" \
5377 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01005378 -c "=> renegotiate" \
5379 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005380 -s "write hello request"
5381
Hanno Becker6a243642017-10-12 15:18:45 +01005382requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Andrzej Kurek8ea68722020-04-03 06:40:47 -04005383requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01005384requires_max_content_len 2048
Andrzej Kurek8ea68722020-04-03 06:40:47 -04005385run_test "Renegotiation with max fragment length: client 2048, server 512" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005386 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1 max_frag_len=512" \
Andrzej Kurek8ea68722020-04-03 06:40:47 -04005387 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 max_frag_len=2048 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
5388 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01005389 -c "Maximum incoming record payload length is 2048" \
5390 -c "Maximum outgoing record payload length is 2048" \
5391 -s "Maximum incoming record payload length is 2048" \
5392 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek8ea68722020-04-03 06:40:47 -04005393 -c "client hello, adding max_fragment_length extension" \
5394 -s "found max fragment length extension" \
5395 -s "server hello, max_fragment_length extension" \
5396 -c "found max_fragment_length extension" \
5397 -c "client hello, adding renegotiation extension" \
5398 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5399 -s "found renegotiation extension" \
5400 -s "server hello, secure renegotiation extension" \
5401 -c "found renegotiation extension" \
5402 -c "=> renegotiate" \
5403 -s "=> renegotiate" \
5404 -s "write hello request"
5405
5406requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005407run_test "Renegotiation: client-initiated, server-rejected" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005408 "$P_SRV debug_level=3 exchanges=2 renegotiation=0 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005409 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005410 1 \
5411 -c "client hello, adding renegotiation extension" \
5412 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5413 -S "found renegotiation extension" \
5414 -s "server hello, secure renegotiation extension" \
5415 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01005416 -c "=> renegotiate" \
5417 -S "=> renegotiate" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02005418 -S "write hello request" \
Manuel Pégourié-Gonnard65919622014-08-19 12:50:30 +02005419 -c "SSL - Unexpected message at ServerHello in renegotiation" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02005420 -c "failed"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005421
Hanno Becker6a243642017-10-12 15:18:45 +01005422requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005423run_test "Renegotiation: server-initiated, client-rejected, default" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005424 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005425 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005426 0 \
5427 -C "client hello, adding renegotiation extension" \
5428 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5429 -S "found renegotiation extension" \
5430 -s "server hello, secure renegotiation extension" \
5431 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01005432 -C "=> renegotiate" \
5433 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01005434 -s "write hello request" \
Manuel Pégourié-Gonnarda9964db2014-07-03 19:29:16 +02005435 -S "SSL - An unexpected message was received from our peer" \
5436 -S "failed"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01005437
Hanno Becker6a243642017-10-12 15:18:45 +01005438requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005439run_test "Renegotiation: server-initiated, client-rejected, not enforced" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005440 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005441 renego_delay=-1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005442 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02005443 0 \
5444 -C "client hello, adding renegotiation extension" \
5445 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5446 -S "found renegotiation extension" \
5447 -s "server hello, secure renegotiation extension" \
5448 -c "found renegotiation extension" \
5449 -C "=> renegotiate" \
5450 -S "=> renegotiate" \
5451 -s "write hello request" \
5452 -S "SSL - An unexpected message was received from our peer" \
5453 -S "failed"
5454
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02005455# delay 2 for 1 alert record + 1 application data record
Hanno Becker6a243642017-10-12 15:18:45 +01005456requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005457run_test "Renegotiation: server-initiated, client-rejected, delay 2" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005458 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005459 renego_delay=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005460 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02005461 0 \
5462 -C "client hello, adding renegotiation extension" \
5463 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5464 -S "found renegotiation extension" \
5465 -s "server hello, secure renegotiation extension" \
5466 -c "found renegotiation extension" \
5467 -C "=> renegotiate" \
5468 -S "=> renegotiate" \
5469 -s "write hello request" \
5470 -S "SSL - An unexpected message was received from our peer" \
5471 -S "failed"
5472
Hanno Becker6a243642017-10-12 15:18:45 +01005473requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005474run_test "Renegotiation: server-initiated, client-rejected, delay 0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005475 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005476 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005477 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02005478 0 \
5479 -C "client hello, adding renegotiation extension" \
5480 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5481 -S "found renegotiation extension" \
5482 -s "server hello, secure renegotiation extension" \
5483 -c "found renegotiation extension" \
5484 -C "=> renegotiate" \
5485 -S "=> renegotiate" \
5486 -s "write hello request" \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02005487 -s "SSL - An unexpected message was received from our peer"
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02005488
Hanno Becker6a243642017-10-12 15:18:45 +01005489requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005490run_test "Renegotiation: server-initiated, client-accepted, delay 0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005491 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005492 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005493 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02005494 0 \
5495 -c "client hello, adding renegotiation extension" \
5496 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5497 -s "found renegotiation extension" \
5498 -s "server hello, secure renegotiation extension" \
5499 -c "found renegotiation extension" \
5500 -c "=> renegotiate" \
5501 -s "=> renegotiate" \
5502 -s "write hello request" \
5503 -S "SSL - An unexpected message was received from our peer" \
5504 -S "failed"
5505
Hanno Becker6a243642017-10-12 15:18:45 +01005506requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005507run_test "Renegotiation: periodic, just below period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005508 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005509 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005510 0 \
5511 -C "client hello, adding renegotiation extension" \
5512 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5513 -S "found renegotiation extension" \
5514 -s "server hello, secure renegotiation extension" \
5515 -c "found renegotiation extension" \
5516 -S "record counter limit reached: renegotiate" \
5517 -C "=> renegotiate" \
5518 -S "=> renegotiate" \
5519 -S "write hello request" \
5520 -S "SSL - An unexpected message was received from our peer" \
5521 -S "failed"
5522
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01005523# one extra exchange to be able to complete renego
Hanno Becker6a243642017-10-12 15:18:45 +01005524requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005525run_test "Renegotiation: periodic, just above period" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005526 "$P_SRV force_version=tls12 debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01005527 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005528 0 \
5529 -c "client hello, adding renegotiation extension" \
5530 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5531 -s "found renegotiation extension" \
5532 -s "server hello, secure renegotiation extension" \
5533 -c "found renegotiation extension" \
5534 -s "record counter limit reached: renegotiate" \
5535 -c "=> renegotiate" \
5536 -s "=> renegotiate" \
5537 -s "write hello request" \
5538 -S "SSL - An unexpected message was received from our peer" \
5539 -S "failed"
5540
Hanno Becker6a243642017-10-12 15:18:45 +01005541requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005542run_test "Renegotiation: periodic, two times period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005543 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005544 "$P_CLI force_version=tls12 debug_level=3 exchanges=7 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005545 0 \
5546 -c "client hello, adding renegotiation extension" \
5547 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5548 -s "found renegotiation extension" \
5549 -s "server hello, secure renegotiation extension" \
5550 -c "found renegotiation extension" \
5551 -s "record counter limit reached: renegotiate" \
5552 -c "=> renegotiate" \
5553 -s "=> renegotiate" \
5554 -s "write hello request" \
5555 -S "SSL - An unexpected message was received from our peer" \
5556 -S "failed"
5557
Hanno Becker6a243642017-10-12 15:18:45 +01005558requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005559run_test "Renegotiation: periodic, above period, disabled" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005560 "$P_SRV force_version=tls12 debug_level=3 exchanges=9 renegotiation=0 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005561 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
5562 0 \
5563 -C "client hello, adding renegotiation extension" \
5564 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5565 -S "found renegotiation extension" \
5566 -s "server hello, secure renegotiation extension" \
5567 -c "found renegotiation extension" \
5568 -S "record counter limit reached: renegotiate" \
5569 -C "=> renegotiate" \
5570 -S "=> renegotiate" \
5571 -S "write hello request" \
5572 -S "SSL - An unexpected message was received from our peer" \
5573 -S "failed"
5574
Hanno Becker6a243642017-10-12 15:18:45 +01005575requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005576run_test "Renegotiation: nbio, client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005577 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005578 "$P_CLI force_version=tls12 debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02005579 0 \
5580 -c "client hello, adding renegotiation extension" \
5581 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5582 -s "found renegotiation extension" \
5583 -s "server hello, secure renegotiation extension" \
5584 -c "found renegotiation extension" \
5585 -c "=> renegotiate" \
5586 -s "=> renegotiate" \
5587 -S "write hello request"
5588
Hanno Becker6a243642017-10-12 15:18:45 +01005589requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005590run_test "Renegotiation: nbio, server-initiated" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005591 "$P_SRV force_version=tls12 debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005592 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02005593 0 \
5594 -c "client hello, adding renegotiation extension" \
5595 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5596 -s "found renegotiation extension" \
5597 -s "server hello, secure renegotiation extension" \
5598 -c "found renegotiation extension" \
5599 -c "=> renegotiate" \
5600 -s "=> renegotiate" \
5601 -s "write hello request"
5602
Hanno Becker6a243642017-10-12 15:18:45 +01005603requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005604requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005605run_test "Renegotiation: openssl server, client-initiated" \
Gilles Peskine56ee69d2024-09-06 13:52:14 +02005606 "$O_SRV -www $OPENSSL_S_SERVER_CLIENT_RENEGOTIATION -tls1_2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005607 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02005608 0 \
5609 -c "client hello, adding renegotiation extension" \
5610 -c "found renegotiation extension" \
5611 -c "=> renegotiate" \
Wenxing Houb4d03cc2024-06-19 11:04:13 +08005612 -C "ssl_handshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02005613 -C "error" \
5614 -c "HTTP/1.0 200 [Oo][Kk]"
5615
Paul Bakker539d9722015-02-08 16:18:35 +01005616requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005617requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005618requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005619run_test "Renegotiation: gnutls server strict, client-initiated" \
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005620 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005621 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02005622 0 \
5623 -c "client hello, adding renegotiation extension" \
5624 -c "found renegotiation extension" \
5625 -c "=> renegotiate" \
Wenxing Houb4d03cc2024-06-19 11:04:13 +08005626 -C "ssl_handshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02005627 -C "error" \
5628 -c "HTTP/1.0 200 [Oo][Kk]"
5629
Paul Bakker539d9722015-02-08 16:18:35 +01005630requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005631requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005632requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005633run_test "Renegotiation: gnutls server unsafe, client-initiated default" \
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005634 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005635 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
5636 1 \
5637 -c "client hello, adding renegotiation extension" \
5638 -C "found renegotiation extension" \
5639 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005640 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005641 -c "error" \
5642 -C "HTTP/1.0 200 [Oo][Kk]"
5643
Paul Bakker539d9722015-02-08 16:18:35 +01005644requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005645requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005646requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005647run_test "Renegotiation: gnutls server unsafe, client-inititated no legacy" \
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005648 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005649 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
5650 allow_legacy=0" \
5651 1 \
5652 -c "client hello, adding renegotiation extension" \
5653 -C "found renegotiation extension" \
5654 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005655 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005656 -c "error" \
5657 -C "HTTP/1.0 200 [Oo][Kk]"
5658
Paul Bakker539d9722015-02-08 16:18:35 +01005659requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005660requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005661requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005662run_test "Renegotiation: gnutls server unsafe, client-inititated legacy" \
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005663 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005664 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
5665 allow_legacy=1" \
5666 0 \
5667 -c "client hello, adding renegotiation extension" \
5668 -C "found renegotiation extension" \
5669 -c "=> renegotiate" \
Wenxing Houb4d03cc2024-06-19 11:04:13 +08005670 -C "ssl_handshake() returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005671 -C "error" \
5672 -c "HTTP/1.0 200 [Oo][Kk]"
5673
Hanno Becker6a243642017-10-12 15:18:45 +01005674requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005675requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard30d16eb2014-08-19 17:43:50 +02005676run_test "Renegotiation: DTLS, client-initiated" \
5677 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1" \
5678 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
5679 0 \
5680 -c "client hello, adding renegotiation extension" \
5681 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5682 -s "found renegotiation extension" \
5683 -s "server hello, secure renegotiation extension" \
5684 -c "found renegotiation extension" \
5685 -c "=> renegotiate" \
5686 -s "=> renegotiate" \
5687 -S "write hello request"
5688
Hanno Becker6a243642017-10-12 15:18:45 +01005689requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005690requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02005691run_test "Renegotiation: DTLS, server-initiated" \
5692 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnarddf9a0a82014-10-02 14:17:18 +02005693 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 \
5694 read_timeout=1000 max_resend=2" \
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02005695 0 \
5696 -c "client hello, adding renegotiation extension" \
5697 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5698 -s "found renegotiation extension" \
5699 -s "server hello, secure renegotiation extension" \
5700 -c "found renegotiation extension" \
5701 -c "=> renegotiate" \
5702 -s "=> renegotiate" \
5703 -s "write hello request"
5704
Hanno Becker6a243642017-10-12 15:18:45 +01005705requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005706requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres AG692ad842017-01-19 16:30:57 +00005707run_test "Renegotiation: DTLS, renego_period overflow" \
5708 "$P_SRV debug_level=3 dtls=1 exchanges=4 renegotiation=1 renego_period=18446462598732840962 auth_mode=optional" \
5709 "$P_CLI debug_level=3 dtls=1 exchanges=4 renegotiation=1" \
5710 0 \
5711 -c "client hello, adding renegotiation extension" \
5712 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5713 -s "found renegotiation extension" \
5714 -s "server hello, secure renegotiation extension" \
5715 -s "record counter limit reached: renegotiate" \
5716 -c "=> renegotiate" \
5717 -s "=> renegotiate" \
Hanno Becker6a243642017-10-12 15:18:45 +01005718 -s "write hello request"
Andres AG692ad842017-01-19 16:30:57 +00005719
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +00005720requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005721requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005722requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02005723run_test "Renegotiation: DTLS, gnutls server, client-initiated" \
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005724 "$G_NEXT_SRV -u --mtu 4096" \
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02005725 "$P_CLI debug_level=3 dtls=1 exchanges=1 renegotiation=1 renegotiate=1" \
5726 0 \
5727 -c "client hello, adding renegotiation extension" \
5728 -c "found renegotiation extension" \
5729 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005730 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02005731 -C "error" \
5732 -s "Extra-header:"
5733
Shaun Case8b0ecbc2021-12-20 21:14:10 -08005734# Test for the "secure renegotiation" extension only (no actual renegotiation)
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005735
Paul Bakker539d9722015-02-08 16:18:35 +01005736requires_gnutls
Gilles Peskine6191f4a2024-04-29 17:47:35 +02005737requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005738requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005739run_test "Renego ext: gnutls server strict, client default" \
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005740 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005741 "$P_CLI debug_level=3" \
5742 0 \
5743 -c "found renegotiation extension" \
5744 -C "error" \
5745 -c "HTTP/1.0 200 [Oo][Kk]"
5746
Paul Bakker539d9722015-02-08 16:18:35 +01005747requires_gnutls
Gilles Peskine6191f4a2024-04-29 17:47:35 +02005748requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005749requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005750run_test "Renego ext: gnutls server unsafe, client default" \
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005751 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005752 "$P_CLI debug_level=3" \
5753 0 \
5754 -C "found renegotiation extension" \
5755 -C "error" \
5756 -c "HTTP/1.0 200 [Oo][Kk]"
5757
Paul Bakker539d9722015-02-08 16:18:35 +01005758requires_gnutls
Gilles Peskine6191f4a2024-04-29 17:47:35 +02005759requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005760requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005761run_test "Renego ext: gnutls server unsafe, client break legacy" \
Waleed Elmelegy4b09dcd2024-01-12 10:50:25 +00005762 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005763 "$P_CLI debug_level=3 allow_legacy=-1" \
5764 1 \
5765 -C "found renegotiation extension" \
5766 -c "error" \
5767 -C "HTTP/1.0 200 [Oo][Kk]"
5768
Paul Bakker539d9722015-02-08 16:18:35 +01005769requires_gnutls
Gilles Peskine6191f4a2024-04-29 17:47:35 +02005770requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005771requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005772run_test "Renego ext: gnutls client strict, server default" \
5773 "$P_SRV debug_level=3" \
Gilles Peskine01fde2c2024-04-29 17:44:19 +02005774 "$G_CLI --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005775 0 \
5776 -s "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
5777 -s "server hello, secure renegotiation extension"
5778
Paul Bakker539d9722015-02-08 16:18:35 +01005779requires_gnutls
Gilles Peskine6191f4a2024-04-29 17:47:35 +02005780requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005781requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005782run_test "Renego ext: gnutls client unsafe, server default" \
5783 "$P_SRV debug_level=3" \
Gilles Peskine01fde2c2024-04-29 17:44:19 +02005784 "$G_CLI --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005785 0 \
5786 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
5787 -S "server hello, secure renegotiation extension"
5788
Paul Bakker539d9722015-02-08 16:18:35 +01005789requires_gnutls
Gilles Peskine6191f4a2024-04-29 17:47:35 +02005790requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005791requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005792run_test "Renego ext: gnutls client unsafe, server break legacy" \
5793 "$P_SRV debug_level=3 allow_legacy=-1" \
Gilles Peskine01fde2c2024-04-29 17:44:19 +02005794 "$G_CLI --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005795 1 \
5796 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
5797 -S "server hello, secure renegotiation extension"
5798
Janos Follath0b242342016-02-17 10:11:21 +00005799# Tests for silently dropping trailing extra bytes in .der certificates
5800
5801requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005802requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005803run_test "DER format: no trailing bytes" \
David Horstmann184c4f02024-07-01 17:01:28 +01005804 "$P_SRV crt_file=$DATA_FILES_PATH/server5-der0.crt \
5805 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005806 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005807 0 \
5808 -c "Handshake was completed" \
5809
5810requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005811requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005812run_test "DER format: with a trailing zero byte" \
David Horstmann184c4f02024-07-01 17:01:28 +01005813 "$P_SRV crt_file=$DATA_FILES_PATH/server5-der1a.crt \
5814 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005815 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005816 0 \
5817 -c "Handshake was completed" \
5818
5819requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005820requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005821run_test "DER format: with a trailing random byte" \
David Horstmann184c4f02024-07-01 17:01:28 +01005822 "$P_SRV crt_file=$DATA_FILES_PATH/server5-der1b.crt \
5823 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005824 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005825 0 \
5826 -c "Handshake was completed" \
5827
5828requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005829requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005830run_test "DER format: with 2 trailing random bytes" \
David Horstmann184c4f02024-07-01 17:01:28 +01005831 "$P_SRV crt_file=$DATA_FILES_PATH/server5-der2.crt \
5832 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005833 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005834 0 \
5835 -c "Handshake was completed" \
5836
5837requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005838requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005839run_test "DER format: with 4 trailing random bytes" \
David Horstmann184c4f02024-07-01 17:01:28 +01005840 "$P_SRV crt_file=$DATA_FILES_PATH/server5-der4.crt \
5841 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005842 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005843 0 \
5844 -c "Handshake was completed" \
5845
5846requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005847requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005848run_test "DER format: with 8 trailing random bytes" \
David Horstmann184c4f02024-07-01 17:01:28 +01005849 "$P_SRV crt_file=$DATA_FILES_PATH/server5-der8.crt \
5850 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005851 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005852 0 \
5853 -c "Handshake was completed" \
5854
5855requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005856requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005857run_test "DER format: with 9 trailing random bytes" \
David Horstmann184c4f02024-07-01 17:01:28 +01005858 "$P_SRV crt_file=$DATA_FILES_PATH/server5-der9.crt \
5859 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005860 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005861 0 \
5862 -c "Handshake was completed" \
5863
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03005864# Tests for auth_mode, there are duplicated tests using ca callback for authentication
5865# When updating these tests, modify the matching authentication tests accordingly
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005866
Manuel Pégourié-Gonnard02741752024-08-05 12:41:59 +02005867# The next 4 cases test the 3 auth modes with a badly signed server cert.
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005868run_test "Authentication: server badcert, client required" \
David Horstmann184c4f02024-07-01 17:01:28 +01005869 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
5870 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard02741752024-08-05 12:41:59 +02005871 "$P_CLI debug_level=3 auth_mode=required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005872 1 \
5873 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005874 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005875 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard02741752024-08-05 12:41:59 +02005876 -c "send alert level=2 message=48" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005877 -c "X509 - Certificate verification failed"
Manuel Pégourié-Gonnard02741752024-08-05 12:41:59 +02005878 # MBEDTLS_X509_BADCERT_NOT_TRUSTED -> MBEDTLS_SSL_ALERT_MSG_UNKNOWN_CA
5879# We don't check that the server receives the alert because it might
5880# detect that its write end of the connection is closed and abort
5881# before reading the alert message.
5882
5883run_test "Authentication: server badcert, client required (1.2)" \
5884 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
5885 key_file=$DATA_FILES_PATH/server5.key" \
5886 "$P_CLI force_version=tls12 debug_level=3 auth_mode=required" \
5887 1 \
5888 -c "x509_verify_cert() returned" \
5889 -c "! The certificate is not correctly signed by the trusted CA" \
5890 -c "! mbedtls_ssl_handshake returned" \
5891 -c "send alert level=2 message=48" \
5892 -c "X509 - Certificate verification failed"
5893 # MBEDTLS_X509_BADCERT_NOT_TRUSTED -> MBEDTLS_SSL_ALERT_MSG_UNKNOWN_CA
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005894
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005895run_test "Authentication: server badcert, client optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01005896 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
5897 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard58ab9ba2024-08-14 09:47:38 +02005898 "$P_CLI force_version=tls13 debug_level=3 auth_mode=optional" \
5899 0 \
5900 -c "x509_verify_cert() returned" \
5901 -c "! The certificate is not correctly signed by the trusted CA" \
5902 -C "! mbedtls_ssl_handshake returned" \
5903 -C "send alert level=2 message=48" \
5904 -C "X509 - Certificate verification failed"
5905
5906run_test "Authentication: server badcert, client optional (1.2)" \
5907 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
5908 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard02741752024-08-05 12:41:59 +02005909 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005910 0 \
5911 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005912 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005913 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard02741752024-08-05 12:41:59 +02005914 -C "send alert level=2 message=48" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005915 -C "X509 - Certificate verification failed"
5916
Manuel Pégourié-Gonnard946d14a2024-08-05 11:21:01 +02005917run_test "Authentication: server badcert, client none" \
5918 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
5919 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard69015042024-08-14 10:44:02 +02005920 "$P_CLI debug_level=3 auth_mode=none" \
5921 0 \
5922 -C "x509_verify_cert() returned" \
5923 -C "! The certificate is not correctly signed by the trusted CA" \
5924 -C "! mbedtls_ssl_handshake returned" \
5925 -C "send alert level=2 message=48" \
5926 -C "X509 - Certificate verification failed"
5927
5928run_test "Authentication: server badcert, client none (1.2)" \
5929 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
5930 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard02741752024-08-05 12:41:59 +02005931 "$P_CLI force_version=tls12 debug_level=3 auth_mode=none" \
Manuel Pégourié-Gonnard946d14a2024-08-05 11:21:01 +02005932 0 \
5933 -C "x509_verify_cert() returned" \
5934 -C "! The certificate is not correctly signed by the trusted CA" \
5935 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard02741752024-08-05 12:41:59 +02005936 -C "send alert level=2 message=48" \
Manuel Pégourié-Gonnard946d14a2024-08-05 11:21:01 +02005937 -C "X509 - Certificate verification failed"
5938
Manuel Pégourié-Gonnard18dd2132024-08-14 10:34:53 +02005939run_test "Authentication: server goodcert, client required, no trusted CA" \
5940 "$P_SRV" \
5941 "$P_CLI debug_level=3 auth_mode=required ca_file=none ca_path=none" \
5942 1 \
5943 -c "x509_verify_cert() returned" \
5944 -c "! The certificate is not correctly signed by the trusted CA" \
5945 -c "! Certificate verification flags"\
5946 -c "! mbedtls_ssl_handshake returned" \
5947 -c "SSL - No CA Chain is set, but required to operate"
5948
5949requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
5950run_test "Authentication: server goodcert, client required, no trusted CA (1.2)" \
5951 "$P_SRV force_version=tls12" \
5952 "$P_CLI debug_level=3 auth_mode=required ca_file=none ca_path=none" \
5953 1 \
5954 -c "x509_verify_cert() returned" \
5955 -c "! The certificate is not correctly signed by the trusted CA" \
5956 -c "! Certificate verification flags"\
5957 -c "! mbedtls_ssl_handshake returned" \
5958 -c "SSL - No CA Chain is set, but required to operate"
Manuel Pégourié-Gonnard58ab9ba2024-08-14 09:47:38 +02005959
Hanno Beckere6706e62017-05-15 16:05:15 +01005960run_test "Authentication: server goodcert, client optional, no trusted CA" \
5961 "$P_SRV" \
Manuel Pégourié-Gonnard58ab9ba2024-08-14 09:47:38 +02005962 "$P_CLI debug_level=3 auth_mode=optional ca_file=none ca_path=none" \
5963 0 \
5964 -c "x509_verify_cert() returned" \
5965 -c "! The certificate is not correctly signed by the trusted CA" \
5966 -c "! Certificate verification flags"\
5967 -C "! mbedtls_ssl_handshake returned" \
5968 -C "X509 - Certificate verification failed" \
5969 -C "SSL - No CA Chain is set, but required to operate"
5970
5971requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
5972run_test "Authentication: server goodcert, client optional, no trusted CA (1.2)" \
5973 "$P_SRV" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005974 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional ca_file=none ca_path=none" \
Hanno Beckere6706e62017-05-15 16:05:15 +01005975 0 \
5976 -c "x509_verify_cert() returned" \
5977 -c "! The certificate is not correctly signed by the trusted CA" \
5978 -c "! Certificate verification flags"\
5979 -C "! mbedtls_ssl_handshake returned" \
5980 -C "X509 - Certificate verification failed" \
5981 -C "SSL - No CA Chain is set, but required to operate"
5982
Manuel Pégourié-Gonnard69015042024-08-14 10:44:02 +02005983run_test "Authentication: server goodcert, client none, no trusted CA" \
5984 "$P_SRV" \
5985 "$P_CLI debug_level=3 auth_mode=none ca_file=none ca_path=none" \
5986 0 \
5987 -C "x509_verify_cert() returned" \
5988 -C "! The certificate is not correctly signed by the trusted CA" \
5989 -C "! Certificate verification flags"\
5990 -C "! mbedtls_ssl_handshake returned" \
5991 -C "X509 - Certificate verification failed" \
5992 -C "SSL - No CA Chain is set, but required to operate"
5993
5994requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
5995run_test "Authentication: server goodcert, client none, no trusted CA (1.2)" \
5996 "$P_SRV" \
5997 "$P_CLI force_version=tls12 debug_level=3 auth_mode=none ca_file=none ca_path=none" \
5998 0 \
5999 -C "x509_verify_cert() returned" \
6000 -C "! The certificate is not correctly signed by the trusted CA" \
6001 -C "! Certificate verification flags"\
6002 -C "! mbedtls_ssl_handshake returned" \
6003 -C "X509 - Certificate verification failed" \
6004 -C "SSL - No CA Chain is set, but required to operate"
Manuel Pégourié-Gonnarda6397f02024-08-05 11:10:47 +02006005
Hanno Beckere6706e62017-05-15 16:05:15 +01006006# The purpose of the next two tests is to test the client's behaviour when receiving a server
6007# certificate with an unsupported elliptic curve. This should usually not happen because
6008# the client informs the server about the supported curves - it does, though, in the
6009# corner case of a static ECDH suite, because the server doesn't check the curve on that
6010# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
6011# different means to have the server ignoring the client's supported curve list.
6012
Hanno Beckere6706e62017-05-15 16:05:15 +01006013run_test "Authentication: server ECDH p256v1, client required, p256v1 unsupported" \
David Horstmann184c4f02024-07-01 17:01:28 +01006014 "$P_SRV debug_level=1 key_file=$DATA_FILES_PATH/server5.key \
6015 crt_file=$DATA_FILES_PATH/server5.ku-ka.crt" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02006016 "$P_CLI force_version=tls12 debug_level=3 auth_mode=required groups=secp521r1" \
Hanno Beckere6706e62017-05-15 16:05:15 +01006017 1 \
6018 -c "bad certificate (EC key curve)"\
6019 -c "! Certificate verification flags"\
6020 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
6021
Hanno Beckere6706e62017-05-15 16:05:15 +01006022run_test "Authentication: server ECDH p256v1, client optional, p256v1 unsupported" \
David Horstmann184c4f02024-07-01 17:01:28 +01006023 "$P_SRV debug_level=1 key_file=$DATA_FILES_PATH/server5.key \
6024 crt_file=$DATA_FILES_PATH/server5.ku-ka.crt" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02006025 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional groups=secp521r1" \
Hanno Beckere6706e62017-05-15 16:05:15 +01006026 1 \
6027 -c "bad certificate (EC key curve)"\
6028 -c "! Certificate verification flags"\
6029 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
6030
Ronald Cron5de538c2022-10-20 14:47:56 +02006031requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Simon Butcher99000142016-10-13 17:21:01 +01006032run_test "Authentication: client SHA256, server required" \
6033 "$P_SRV auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006034 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server6.crt \
6035 key_file=$DATA_FILES_PATH/server6.key \
Simon Butcher99000142016-10-13 17:21:01 +01006036 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
6037 0 \
Andrzej Kurekec71b092022-11-15 10:21:50 -05006038 -c "Supported Signature Algorithm found: 04 " \
6039 -c "Supported Signature Algorithm found: 05 "
Simon Butcher99000142016-10-13 17:21:01 +01006040
Ronald Cron5de538c2022-10-20 14:47:56 +02006041requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Simon Butcher99000142016-10-13 17:21:01 +01006042run_test "Authentication: client SHA384, server required" \
6043 "$P_SRV auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006044 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server6.crt \
6045 key_file=$DATA_FILES_PATH/server6.key \
Simon Butcher99000142016-10-13 17:21:01 +01006046 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
6047 0 \
Andrzej Kurekec71b092022-11-15 10:21:50 -05006048 -c "Supported Signature Algorithm found: 04 " \
6049 -c "Supported Signature Algorithm found: 05 "
Simon Butcher99000142016-10-13 17:21:01 +01006050
Gilles Peskinefd8332e2017-05-03 16:25:07 +02006051run_test "Authentication: client has no cert, server required (TLS)" \
6052 "$P_SRV debug_level=3 auth_mode=required" \
6053 "$P_CLI debug_level=3 crt_file=none \
David Horstmann184c4f02024-07-01 17:01:28 +01006054 key_file=$DATA_FILES_PATH/server5.key" \
Gilles Peskinefd8332e2017-05-03 16:25:07 +02006055 1 \
6056 -S "skip write certificate request" \
6057 -C "skip parse certificate request" \
6058 -c "got a certificate request" \
6059 -c "= write certificate$" \
6060 -C "skip write certificate$" \
6061 -S "x509_verify_cert() returned" \
Ronald Cron19385882022-06-15 16:26:13 +02006062 -s "peer has no certificate" \
Gilles Peskinefd8332e2017-05-03 16:25:07 +02006063 -s "! mbedtls_ssl_handshake returned" \
Gilles Peskinefd8332e2017-05-03 16:25:07 +02006064 -s "No client certification received from the client, but required by the authentication mode"
6065
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006066run_test "Authentication: client badcert, server required" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006067 "$P_SRV debug_level=3 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006068 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
6069 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01006070 1 \
6071 -S "skip write certificate request" \
6072 -C "skip parse certificate request" \
6073 -c "got a certificate request" \
6074 -C "skip write certificate" \
6075 -C "skip write certificate verify" \
6076 -S "skip parse certificate verify" \
6077 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006078 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006079 -s "! mbedtls_ssl_handshake returned" \
Gilles Peskine1cc8e342017-05-03 16:28:34 +02006080 -s "send alert level=2 message=48" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01006081 -s "X509 - Certificate verification failed"
Gilles Peskine1cc8e342017-05-03 16:28:34 +02006082# We don't check that the client receives the alert because it might
6083# detect that its write end of the connection is closed and abort
6084# before reading the alert message.
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01006085
Gilles Peskinee1cc60e2022-01-07 23:10:56 +01006086run_test "Authentication: client cert self-signed and trusted, server required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006087 "$P_SRV debug_level=3 auth_mode=required ca_file=$DATA_FILES_PATH/server5-selfsigned.crt" \
6088 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-selfsigned.crt \
6089 key_file=$DATA_FILES_PATH/server5.key" \
Gilles Peskinee1cc60e2022-01-07 23:10:56 +01006090 0 \
6091 -S "skip write certificate request" \
6092 -C "skip parse certificate request" \
6093 -c "got a certificate request" \
6094 -C "skip write certificate" \
6095 -C "skip write certificate verify" \
6096 -S "skip parse certificate verify" \
6097 -S "x509_verify_cert() returned" \
6098 -S "! The certificate is not correctly signed" \
6099 -S "X509 - Certificate verification failed"
6100
Janos Follath89baba22017-04-10 14:34:35 +01006101run_test "Authentication: client cert not trusted, server required" \
6102 "$P_SRV debug_level=3 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006103 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-selfsigned.crt \
6104 key_file=$DATA_FILES_PATH/server5.key" \
Janos Follath89baba22017-04-10 14:34:35 +01006105 1 \
6106 -S "skip write certificate request" \
6107 -C "skip parse certificate request" \
6108 -c "got a certificate request" \
6109 -C "skip write certificate" \
6110 -C "skip write certificate verify" \
6111 -S "skip parse certificate verify" \
6112 -s "x509_verify_cert() returned" \
6113 -s "! The certificate is not correctly signed by the trusted CA" \
6114 -s "! mbedtls_ssl_handshake returned" \
Janos Follath89baba22017-04-10 14:34:35 +01006115 -s "X509 - Certificate verification failed"
6116
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006117run_test "Authentication: client badcert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006118 "$P_SRV debug_level=3 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01006119 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
6120 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01006121 0 \
6122 -S "skip write certificate request" \
6123 -C "skip parse certificate request" \
6124 -c "got a certificate request" \
6125 -C "skip write certificate" \
6126 -C "skip write certificate verify" \
6127 -S "skip parse certificate verify" \
6128 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01006129 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006130 -S "! mbedtls_ssl_handshake returned" \
6131 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01006132 -S "X509 - Certificate verification failed"
6133
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006134run_test "Authentication: client badcert, server none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006135 "$P_SRV debug_level=3 auth_mode=none" \
David Horstmann184c4f02024-07-01 17:01:28 +01006136 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
6137 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01006138 0 \
6139 -s "skip write certificate request" \
6140 -C "skip parse certificate request" \
6141 -c "got no certificate request" \
6142 -c "skip write certificate" \
6143 -c "skip write certificate verify" \
6144 -s "skip parse certificate verify" \
6145 -S "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01006146 -S "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006147 -S "! mbedtls_ssl_handshake returned" \
6148 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01006149 -S "X509 - Certificate verification failed"
6150
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006151run_test "Authentication: client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006152 "$P_SRV debug_level=3 auth_mode=optional" \
6153 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01006154 0 \
6155 -S "skip write certificate request" \
6156 -C "skip parse certificate request" \
6157 -c "got a certificate request" \
6158 -C "skip write certificate$" \
6159 -C "got no certificate to send" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01006160 -c "skip write certificate verify" \
6161 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01006162 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006163 -S "! mbedtls_ssl_handshake returned" \
6164 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01006165 -S "X509 - Certificate verification failed"
6166
Przemek Stekielc31a7982023-06-27 10:53:33 +02006167requires_openssl_tls1_3_with_compatible_ephemeral
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006168run_test "Authentication: openssl client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006169 "$P_SRV debug_level=3 auth_mode=optional" \
Ronald Cron92dca392023-03-10 16:11:15 +01006170 "$O_NEXT_CLI_NO_CERT -no_middlebox" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01006171 0 \
6172 -S "skip write certificate request" \
6173 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01006174 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006175 -S "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01006176 -S "X509 - Certificate verification failed"
6177
Jerry Yuab082902021-12-23 18:02:22 +08006178requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006179run_test "Authentication: client no cert, openssl server optional" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006180 "$O_SRV -verify 10 -tls1_2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006181 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01006182 0 \
6183 -C "skip parse certificate request" \
6184 -c "got a certificate request" \
6185 -C "skip write certificate$" \
6186 -c "skip write certificate verify" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006187 -C "! mbedtls_ssl_handshake returned"
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01006188
Jerry Yuab082902021-12-23 18:02:22 +08006189requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskinefd8332e2017-05-03 16:25:07 +02006190run_test "Authentication: client no cert, openssl server required" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006191 "$O_SRV -Verify 10 -tls1_2" \
Gilles Peskinefd8332e2017-05-03 16:25:07 +02006192 "$P_CLI debug_level=3 crt_file=none key_file=none" \
6193 1 \
6194 -C "skip parse certificate request" \
6195 -c "got a certificate request" \
6196 -C "skip write certificate$" \
6197 -c "skip write certificate verify" \
6198 -c "! mbedtls_ssl_handshake returned"
6199
Yuto Takano02485822021-07-02 13:05:15 +01006200# This script assumes that MBEDTLS_X509_MAX_INTERMEDIATE_CA has its default
6201# value, defined here as MAX_IM_CA. Some test cases will be skipped if the
6202# library is configured with a different value.
Hanno Beckera6bca9f2017-07-26 13:35:11 +01006203
Simon Butcherbcfa6f42017-07-28 15:59:35 +01006204MAX_IM_CA='8'
Hanno Beckera6bca9f2017-07-26 13:35:11 +01006205
Yuto Takano02485822021-07-02 13:05:15 +01006206# The tests for the max_int tests can pass with any number higher than MAX_IM_CA
6207# because only a chain of MAX_IM_CA length is tested. Equally, the max_int+1
6208# tests can pass with any number less than MAX_IM_CA. However, stricter preconditions
6209# are in place so that the semantics are consistent with the test description.
Yuto Takano6f657432021-07-02 13:10:41 +01006210requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10006211requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006212run_test "Authentication: server max_int chain, client default" \
David Horstmann184c4f02024-07-01 17:01:28 +01006213 "$P_SRV crt_file=$DATA_FILES_PATH/dir-maxpath/c09.pem \
6214 key_file=$DATA_FILES_PATH/dir-maxpath/09.key" \
6215 "$P_CLI server_name=CA09 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt" \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006216 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01006217 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006218
Yuto Takano6f657432021-07-02 13:10:41 +01006219requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10006220requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006221run_test "Authentication: server max_int+1 chain, client default" \
David Horstmann184c4f02024-07-01 17:01:28 +01006222 "$P_SRV crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6223 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
6224 "$P_CLI server_name=CA10 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt" \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006225 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01006226 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006227
Yuto Takano6f657432021-07-02 13:10:41 +01006228requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10006229requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006230run_test "Authentication: server max_int+1 chain, client optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01006231 "$P_SRV crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6232 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
Manuel Pégourié-Gonnard58ab9ba2024-08-14 09:47:38 +02006233 "$P_CLI server_name=CA10 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006234 auth_mode=optional" \
6235 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01006236 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006237
Yuto Takano6f657432021-07-02 13:10:41 +01006238requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10006239requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006240run_test "Authentication: server max_int+1 chain, client none" \
David Horstmann184c4f02024-07-01 17:01:28 +01006241 "$P_SRV crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6242 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
6243 "$P_CLI force_version=tls12 server_name=CA10 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006244 auth_mode=none" \
6245 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01006246 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006247
Yuto Takano6f657432021-07-02 13:10:41 +01006248requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10006249requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006250run_test "Authentication: client max_int+1 chain, server default" \
David Horstmann184c4f02024-07-01 17:01:28 +01006251 "$P_SRV ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt" \
6252 "$P_CLI crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6253 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006254 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01006255 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006256
Yuto Takano6f657432021-07-02 13:10:41 +01006257requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10006258requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006259run_test "Authentication: client max_int+1 chain, server optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01006260 "$P_SRV ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt auth_mode=optional" \
6261 "$P_CLI crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6262 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006263 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01006264 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006265
Yuto Takano6f657432021-07-02 13:10:41 +01006266requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10006267requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006268run_test "Authentication: client max_int+1 chain, server required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006269 "$P_SRV ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt auth_mode=required" \
6270 "$P_CLI crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6271 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006272 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01006273 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006274
Yuto Takano6f657432021-07-02 13:10:41 +01006275requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10006276requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006277run_test "Authentication: client max_int chain, server required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006278 "$P_SRV ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt auth_mode=required" \
6279 "$P_CLI crt_file=$DATA_FILES_PATH/dir-maxpath/c09.pem \
6280 key_file=$DATA_FILES_PATH/dir-maxpath/09.key" \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006281 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01006282 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02006283
Janos Follath89baba22017-04-10 14:34:35 +01006284# Tests for CA list in CertificateRequest messages
6285
Ronald Cron5de538c2022-10-20 14:47:56 +02006286requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Janos Follath89baba22017-04-10 14:34:35 +01006287run_test "Authentication: send CA list in CertificateRequest (default)" \
6288 "$P_SRV debug_level=3 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006289 "$P_CLI force_version=tls12 crt_file=$DATA_FILES_PATH/server6.crt \
6290 key_file=$DATA_FILES_PATH/server6.key" \
Janos Follath89baba22017-04-10 14:34:35 +01006291 0 \
6292 -s "requested DN"
6293
Ronald Cron5de538c2022-10-20 14:47:56 +02006294requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Janos Follath89baba22017-04-10 14:34:35 +01006295run_test "Authentication: do not send CA list in CertificateRequest" \
6296 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
David Horstmann184c4f02024-07-01 17:01:28 +01006297 "$P_CLI force_version=tls12 crt_file=$DATA_FILES_PATH/server6.crt \
6298 key_file=$DATA_FILES_PATH/server6.key" \
Janos Follath89baba22017-04-10 14:34:35 +01006299 0 \
6300 -S "requested DN"
6301
6302run_test "Authentication: send CA list in CertificateRequest, client self signed" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006303 "$P_SRV force_version=tls12 debug_level=3 auth_mode=required cert_req_ca_list=0" \
David Horstmann184c4f02024-07-01 17:01:28 +01006304 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-selfsigned.crt \
6305 key_file=$DATA_FILES_PATH/server5.key" \
Janos Follath89baba22017-04-10 14:34:35 +01006306 1 \
6307 -S "requested DN" \
6308 -s "x509_verify_cert() returned" \
6309 -s "! The certificate is not correctly signed by the trusted CA" \
6310 -s "! mbedtls_ssl_handshake returned" \
6311 -c "! mbedtls_ssl_handshake returned" \
6312 -s "X509 - Certificate verification failed"
6313
Ronald Cron5de538c2022-10-20 14:47:56 +02006314requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Glenn Straussbd10c4e2022-06-25 03:15:48 -04006315run_test "Authentication: send alt conf DN hints in CertificateRequest" \
6316 "$P_SRV debug_level=3 auth_mode=optional cert_req_ca_list=2 \
David Horstmann184c4f02024-07-01 17:01:28 +01006317 crt_file2=$DATA_FILES_PATH/server1.crt \
6318 key_file2=$DATA_FILES_PATH/server1.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006319 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006320 crt_file=$DATA_FILES_PATH/server6.crt \
6321 key_file=$DATA_FILES_PATH/server6.key" \
Glenn Straussbd10c4e2022-06-25 03:15:48 -04006322 0 \
6323 -c "DN hint: C=NL, O=PolarSSL, CN=PolarSSL Server 1"
6324
Ronald Cron5de538c2022-10-20 14:47:56 +02006325requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Glenn Straussbd10c4e2022-06-25 03:15:48 -04006326run_test "Authentication: send alt conf DN hints in CertificateRequest (2)" \
6327 "$P_SRV debug_level=3 auth_mode=optional cert_req_ca_list=2 \
David Horstmann184c4f02024-07-01 17:01:28 +01006328 crt_file2=$DATA_FILES_PATH/server2.crt \
6329 key_file2=$DATA_FILES_PATH/server2.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006330 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006331 crt_file=$DATA_FILES_PATH/server6.crt \
6332 key_file=$DATA_FILES_PATH/server6.key" \
Glenn Straussbd10c4e2022-06-25 03:15:48 -04006333 0 \
6334 -c "DN hint: C=NL, O=PolarSSL, CN=localhost"
6335
Ronald Cron5de538c2022-10-20 14:47:56 +02006336requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Glenn Straussbd10c4e2022-06-25 03:15:48 -04006337run_test "Authentication: send alt hs DN hints in CertificateRequest" \
6338 "$P_SRV debug_level=3 auth_mode=optional cert_req_ca_list=3 \
David Horstmann184c4f02024-07-01 17:01:28 +01006339 crt_file2=$DATA_FILES_PATH/server1.crt \
6340 key_file2=$DATA_FILES_PATH/server1.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006341 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006342 crt_file=$DATA_FILES_PATH/server6.crt \
6343 key_file=$DATA_FILES_PATH/server6.key" \
Glenn Straussbd10c4e2022-06-25 03:15:48 -04006344 0 \
6345 -c "DN hint: C=NL, O=PolarSSL, CN=PolarSSL Server 1"
6346
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03006347# Tests for auth_mode, using CA callback, these are duplicated from the authentication tests
6348# When updating these tests, modify the matching authentication tests accordingly
Hanno Becker746aaf32019-03-28 15:25:23 +00006349
6350requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6351run_test "Authentication, CA callback: server badcert, client required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006352 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
6353 key_file=$DATA_FILES_PATH/server5.key" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006354 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006355 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006356 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006357 -c "x509_verify_cert() returned" \
6358 -c "! The certificate is not correctly signed by the trusted CA" \
6359 -c "! mbedtls_ssl_handshake returned" \
6360 -c "X509 - Certificate verification failed"
6361
6362requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6363run_test "Authentication, CA callback: server badcert, client optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01006364 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
6365 key_file=$DATA_FILES_PATH/server5.key" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006366 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006367 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006368 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006369 -c "x509_verify_cert() returned" \
6370 -c "! The certificate is not correctly signed by the trusted CA" \
6371 -C "! mbedtls_ssl_handshake returned" \
6372 -C "X509 - Certificate verification failed"
6373
Ronald Cron95dd6f52024-04-03 09:10:02 +02006374requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6375run_test "Authentication, CA callback: server badcert, client none" \
6376 "$P_SRV crt_file=$DATA_FILES_PATH/server5-badsign.crt \
6377 key_file=$DATA_FILES_PATH/server5.key" \
6378 "$P_CLI ca_callback=1 debug_level=3 auth_mode=none" \
6379 0 \
6380 -C "use CA callback for X.509 CRT verification" \
6381 -C "x509_verify_cert() returned" \
6382 -C "! The certificate is not correctly signed by the trusted CA" \
6383 -C "! mbedtls_ssl_handshake returned" \
6384 -C "X509 - Certificate verification failed"
6385
Hanno Becker746aaf32019-03-28 15:25:23 +00006386# The purpose of the next two tests is to test the client's behaviour when receiving a server
6387# certificate with an unsupported elliptic curve. This should usually not happen because
6388# the client informs the server about the supported curves - it does, though, in the
6389# corner case of a static ECDH suite, because the server doesn't check the curve on that
6390# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
6391# different means to have the server ignoring the client's supported curve list.
6392
Hanno Becker746aaf32019-03-28 15:25:23 +00006393requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6394run_test "Authentication, CA callback: server ECDH p256v1, client required, p256v1 unsupported" \
David Horstmann184c4f02024-07-01 17:01:28 +01006395 "$P_SRV debug_level=1 key_file=$DATA_FILES_PATH/server5.key \
6396 crt_file=$DATA_FILES_PATH/server5.ku-ka.crt" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02006397 "$P_CLI force_version=tls12 ca_callback=1 debug_level=3 auth_mode=required groups=secp521r1" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006398 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006399 -c "use CA callback for X.509 CRT verification" \
6400 -c "bad certificate (EC key curve)" \
6401 -c "! Certificate verification flags" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006402 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
6403
Hanno Becker746aaf32019-03-28 15:25:23 +00006404requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6405run_test "Authentication, CA callback: server ECDH p256v1, client optional, p256v1 unsupported" \
David Horstmann184c4f02024-07-01 17:01:28 +01006406 "$P_SRV debug_level=1 key_file=$DATA_FILES_PATH/server5.key \
6407 crt_file=$DATA_FILES_PATH/server5.ku-ka.crt" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02006408 "$P_CLI force_version=tls12 ca_callback=1 debug_level=3 auth_mode=optional groups=secp521r1" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006409 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006410 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006411 -c "bad certificate (EC key curve)"\
6412 -c "! Certificate verification flags"\
6413 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
6414
6415requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
Ronald Cron5de538c2022-10-20 14:47:56 +02006416requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron7a442c92024-04-03 08:57:09 +02006417run_test "Authentication, CA callback: client SHA384, server required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006418 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006419 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server6.crt \
6420 key_file=$DATA_FILES_PATH/server6.key \
Hanno Becker746aaf32019-03-28 15:25:23 +00006421 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
6422 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006423 -s "use CA callback for X.509 CRT verification" \
Andrzej Kurekec71b092022-11-15 10:21:50 -05006424 -c "Supported Signature Algorithm found: 04 " \
6425 -c "Supported Signature Algorithm found: 05 "
Hanno Becker746aaf32019-03-28 15:25:23 +00006426
6427requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
Ronald Cron5de538c2022-10-20 14:47:56 +02006428requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron7a442c92024-04-03 08:57:09 +02006429run_test "Authentication, CA callback: client SHA256, server required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006430 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006431 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server6.crt \
6432 key_file=$DATA_FILES_PATH/server6.key \
Hanno Becker746aaf32019-03-28 15:25:23 +00006433 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
6434 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006435 -s "use CA callback for X.509 CRT verification" \
Andrzej Kurekec71b092022-11-15 10:21:50 -05006436 -c "Supported Signature Algorithm found: 04 " \
6437 -c "Supported Signature Algorithm found: 05 "
Hanno Becker746aaf32019-03-28 15:25:23 +00006438
6439requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6440run_test "Authentication, CA callback: client badcert, server required" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006441 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006442 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
6443 key_file=$DATA_FILES_PATH/server5.key" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006444 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006445 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006446 -S "skip write certificate request" \
6447 -C "skip parse certificate request" \
6448 -c "got a certificate request" \
6449 -C "skip write certificate" \
6450 -C "skip write certificate verify" \
6451 -S "skip parse certificate verify" \
6452 -s "x509_verify_cert() returned" \
6453 -s "! The certificate is not correctly signed by the trusted CA" \
6454 -s "! mbedtls_ssl_handshake returned" \
6455 -s "send alert level=2 message=48" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006456 -s "X509 - Certificate verification failed"
6457# We don't check that the client receives the alert because it might
6458# detect that its write end of the connection is closed and abort
6459# before reading the alert message.
6460
6461requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6462run_test "Authentication, CA callback: client cert not trusted, server required" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006463 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006464 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-selfsigned.crt \
6465 key_file=$DATA_FILES_PATH/server5.key" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006466 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006467 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006468 -S "skip write certificate request" \
6469 -C "skip parse certificate request" \
6470 -c "got a certificate request" \
6471 -C "skip write certificate" \
6472 -C "skip write certificate verify" \
6473 -S "skip parse certificate verify" \
6474 -s "x509_verify_cert() returned" \
6475 -s "! The certificate is not correctly signed by the trusted CA" \
6476 -s "! mbedtls_ssl_handshake returned" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006477 -s "X509 - Certificate verification failed"
6478
6479requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6480run_test "Authentication, CA callback: client badcert, server optional" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006481 "$P_SRV ca_callback=1 debug_level=3 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01006482 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
6483 key_file=$DATA_FILES_PATH/server5.key" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006484 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006485 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006486 -S "skip write certificate request" \
6487 -C "skip parse certificate request" \
6488 -c "got a certificate request" \
6489 -C "skip write certificate" \
6490 -C "skip write certificate verify" \
6491 -S "skip parse certificate verify" \
6492 -s "x509_verify_cert() returned" \
6493 -s "! The certificate is not correctly signed by the trusted CA" \
6494 -S "! mbedtls_ssl_handshake returned" \
6495 -C "! mbedtls_ssl_handshake returned" \
6496 -S "X509 - Certificate verification failed"
6497
Yuto Takano6f657432021-07-02 13:10:41 +01006498requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00006499requires_full_size_output_buffer
6500requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6501run_test "Authentication, CA callback: server max_int chain, client default" \
David Horstmann184c4f02024-07-01 17:01:28 +01006502 "$P_SRV crt_file=$DATA_FILES_PATH/dir-maxpath/c09.pem \
6503 key_file=$DATA_FILES_PATH/dir-maxpath/09.key" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006504 "$P_CLI ca_callback=1 debug_level=3 server_name=CA09 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006505 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006506 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006507 -C "X509 - A fatal error occurred"
6508
Yuto Takano6f657432021-07-02 13:10:41 +01006509requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00006510requires_full_size_output_buffer
6511requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6512run_test "Authentication, CA callback: server max_int+1 chain, client default" \
David Horstmann184c4f02024-07-01 17:01:28 +01006513 "$P_SRV crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6514 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006515 "$P_CLI debug_level=3 ca_callback=1 server_name=CA10 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006516 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006517 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006518 -c "X509 - A fatal error occurred"
6519
Yuto Takano6f657432021-07-02 13:10:41 +01006520requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00006521requires_full_size_output_buffer
6522requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6523run_test "Authentication, CA callback: server max_int+1 chain, client optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01006524 "$P_SRV crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6525 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006526 "$P_CLI ca_callback=1 server_name=CA10 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt \
Hanno Becker746aaf32019-03-28 15:25:23 +00006527 debug_level=3 auth_mode=optional" \
6528 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006529 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006530 -c "X509 - A fatal error occurred"
6531
Yuto Takano6f657432021-07-02 13:10:41 +01006532requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00006533requires_full_size_output_buffer
6534requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6535run_test "Authentication, CA callback: client max_int+1 chain, server optional" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006536 "$P_SRV ca_callback=1 debug_level=3 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01006537 "$P_CLI crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6538 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006539 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006540 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006541 -s "X509 - A fatal error occurred"
6542
Yuto Takano6f657432021-07-02 13:10:41 +01006543requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00006544requires_full_size_output_buffer
6545requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6546run_test "Authentication, CA callback: client max_int+1 chain, server required" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006547 "$P_SRV ca_callback=1 debug_level=3 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006548 "$P_CLI crt_file=$DATA_FILES_PATH/dir-maxpath/c10.pem \
6549 key_file=$DATA_FILES_PATH/dir-maxpath/10.key" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006550 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006551 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006552 -s "X509 - A fatal error occurred"
6553
Yuto Takano6f657432021-07-02 13:10:41 +01006554requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00006555requires_full_size_output_buffer
6556requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
6557run_test "Authentication, CA callback: client max_int chain, server required" \
Ronald Cron95dd6f52024-04-03 09:10:02 +02006558 "$P_SRV ca_callback=1 debug_level=3 ca_file=$DATA_FILES_PATH/dir-maxpath/00.crt auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01006559 "$P_CLI crt_file=$DATA_FILES_PATH/dir-maxpath/c09.pem \
6560 key_file=$DATA_FILES_PATH/dir-maxpath/09.key" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006561 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01006562 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00006563 -S "X509 - A fatal error occurred"
6564
Shaun Case8b0ecbc2021-12-20 21:14:10 -08006565# Tests for certificate selection based on SHA version
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01006566
Hanno Beckerc5722d12020-10-09 11:10:42 +01006567requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01006568run_test "Certificate hash: client TLS 1.2 -> SHA-2" \
David Horstmann184c4f02024-07-01 17:01:28 +01006569 "$P_SRV force_version=tls12 crt_file=$DATA_FILES_PATH/server5.crt \
6570 key_file=$DATA_FILES_PATH/server5.key \
6571 crt_file2=$DATA_FILES_PATH/server5-sha1.crt \
6572 key_file2=$DATA_FILES_PATH/server5.key" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01006573 "$P_CLI" \
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01006574 0 \
6575 -c "signed using.*ECDSA with SHA256" \
6576 -C "signed using.*ECDSA with SHA1"
6577
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006578# tests for SNI
6579
Hanno Beckerc5722d12020-10-09 11:10:42 +01006580requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006581run_test "SNI: no SNI callback" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006582 "$P_SRV debug_level=3 \
David Horstmann184c4f02024-07-01 17:01:28 +01006583 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006584 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006585 0 \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006586 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
6587 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006588
Hanno Beckerc5722d12020-10-09 11:10:42 +01006589requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006590run_test "SNI: matching cert 1" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006591 "$P_SRV debug_level=3 \
David Horstmann184c4f02024-07-01 17:01:28 +01006592 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6593 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006594 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006595 0 \
6596 -s "parse ServerName extension" \
6597 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6598 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006599
Hanno Beckerc5722d12020-10-09 11:10:42 +01006600requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006601run_test "SNI: matching cert 2" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006602 "$P_SRV debug_level=3 \
David Horstmann184c4f02024-07-01 17:01:28 +01006603 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6604 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006605 "$P_CLI server_name=polarssl.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006606 0 \
6607 -s "parse ServerName extension" \
6608 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6609 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006610
Hanno Beckerc5722d12020-10-09 11:10:42 +01006611requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006612run_test "SNI: no matching cert" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006613 "$P_SRV debug_level=3 \
David Horstmann184c4f02024-07-01 17:01:28 +01006614 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6615 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006616 "$P_CLI server_name=nonesuch.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006617 1 \
6618 -s "parse ServerName extension" \
6619 -s "ssl_sni_wrapper() returned" \
6620 -s "mbedtls_ssl_handshake returned" \
6621 -c "mbedtls_ssl_handshake returned" \
6622 -c "SSL - A fatal alert message was received from our peer"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006623
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006624run_test "SNI: client auth no override: optional" \
6625 "$P_SRV debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006626 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6627 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-" \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006628 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006629 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006630 -S "skip write certificate request" \
6631 -C "skip parse certificate request" \
6632 -c "got a certificate request" \
6633 -C "skip write certificate" \
6634 -C "skip write certificate verify" \
6635 -S "skip parse certificate verify"
6636
6637run_test "SNI: client auth override: none -> optional" \
6638 "$P_SRV debug_level=3 auth_mode=none \
David Horstmann184c4f02024-07-01 17:01:28 +01006639 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6640 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,optional" \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006641 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006642 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006643 -S "skip write certificate request" \
6644 -C "skip parse certificate request" \
6645 -c "got a certificate request" \
6646 -C "skip write certificate" \
6647 -C "skip write certificate verify" \
6648 -S "skip parse certificate verify"
6649
6650run_test "SNI: client auth override: optional -> none" \
6651 "$P_SRV debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006652 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6653 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,none" \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006654 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006655 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006656 -s "skip write certificate request" \
6657 -C "skip parse certificate request" \
6658 -c "got no certificate request" \
XiaokangQian23c5be62022-06-07 02:04:34 +00006659 -c "skip write certificate"
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006660
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006661run_test "SNI: CA no override" \
6662 "$P_SRV debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006663 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6664 ca_file=$DATA_FILES_PATH/test-ca.crt \
6665 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,required" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006666 "$P_CLI debug_level=3 server_name=localhost \
David Horstmann184c4f02024-07-01 17:01:28 +01006667 crt_file=$DATA_FILES_PATH/server6.crt key_file=$DATA_FILES_PATH/server6.key" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006668 1 \
6669 -S "skip write certificate request" \
6670 -C "skip parse certificate request" \
6671 -c "got a certificate request" \
6672 -C "skip write certificate" \
6673 -C "skip write certificate verify" \
6674 -S "skip parse certificate verify" \
6675 -s "x509_verify_cert() returned" \
6676 -s "! The certificate is not correctly signed by the trusted CA" \
6677 -S "The certificate has been revoked (is on a CRL)"
6678
6679run_test "SNI: CA override" \
6680 "$P_SRV debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006681 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6682 ca_file=$DATA_FILES_PATH/test-ca.crt \
6683 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,$DATA_FILES_PATH/test-ca2.crt,-,required" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006684 "$P_CLI debug_level=3 server_name=localhost \
David Horstmann184c4f02024-07-01 17:01:28 +01006685 crt_file=$DATA_FILES_PATH/server6.crt key_file=$DATA_FILES_PATH/server6.key" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006686 0 \
6687 -S "skip write certificate request" \
6688 -C "skip parse certificate request" \
6689 -c "got a certificate request" \
6690 -C "skip write certificate" \
6691 -C "skip write certificate verify" \
6692 -S "skip parse certificate verify" \
6693 -S "x509_verify_cert() returned" \
6694 -S "! The certificate is not correctly signed by the trusted CA" \
6695 -S "The certificate has been revoked (is on a CRL)"
6696
6697run_test "SNI: CA override with CRL" \
6698 "$P_SRV debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006699 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6700 ca_file=$DATA_FILES_PATH/test-ca.crt \
6701 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,$DATA_FILES_PATH/test-ca2.crt,$DATA_FILES_PATH/crl-ec-sha256.pem,required" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006702 "$P_CLI debug_level=3 server_name=localhost \
David Horstmann184c4f02024-07-01 17:01:28 +01006703 crt_file=$DATA_FILES_PATH/server6.crt key_file=$DATA_FILES_PATH/server6.key" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006704 1 \
6705 -S "skip write certificate request" \
6706 -C "skip parse certificate request" \
6707 -c "got a certificate request" \
6708 -C "skip write certificate" \
6709 -C "skip write certificate verify" \
6710 -S "skip parse certificate verify" \
6711 -s "x509_verify_cert() returned" \
6712 -S "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2ffa53a2024-08-05 12:44:57 +02006713 -s "send alert level=2 message=44" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006714 -s "The certificate has been revoked (is on a CRL)"
Manuel Pégourié-Gonnard2ffa53a2024-08-05 12:44:57 +02006715 # MBEDTLS_X509_BADCERT_REVOKED -> MBEDTLS_SSL_ALERT_MSG_CERT_REVOKED
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006716
Andres AG1a834452016-12-07 10:01:30 +00006717# Tests for SNI and DTLS
6718
Hanno Beckerc5722d12020-10-09 11:10:42 +01006719requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Jerry Yuab082902021-12-23 18:02:22 +08006720requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006721run_test "SNI: DTLS, no SNI callback" \
6722 "$P_SRV debug_level=3 dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006723 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key" \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006724 "$P_CLI server_name=localhost dtls=1" \
6725 0 \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006726 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
6727 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
6728
Hanno Beckerc5722d12020-10-09 11:10:42 +01006729requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Jerry Yuab082902021-12-23 18:02:22 +08006730requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01006731run_test "SNI: DTLS, matching cert 1" \
Andres AG1a834452016-12-07 10:01:30 +00006732 "$P_SRV debug_level=3 dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006733 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6734 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
Andres AG1a834452016-12-07 10:01:30 +00006735 "$P_CLI server_name=localhost dtls=1" \
6736 0 \
6737 -s "parse ServerName extension" \
6738 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6739 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
6740
Hanno Beckerc5722d12020-10-09 11:10:42 +01006741requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Jerry Yuab082902021-12-23 18:02:22 +08006742requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006743run_test "SNI: DTLS, matching cert 2" \
6744 "$P_SRV debug_level=3 dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006745 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6746 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006747 "$P_CLI server_name=polarssl.example dtls=1" \
6748 0 \
6749 -s "parse ServerName extension" \
6750 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6751 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
6752
Jerry Yuab082902021-12-23 18:02:22 +08006753requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006754run_test "SNI: DTLS, no matching cert" \
6755 "$P_SRV debug_level=3 dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006756 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6757 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006758 "$P_CLI server_name=nonesuch.example dtls=1" \
6759 1 \
6760 -s "parse ServerName extension" \
6761 -s "ssl_sni_wrapper() returned" \
6762 -s "mbedtls_ssl_handshake returned" \
6763 -c "mbedtls_ssl_handshake returned" \
6764 -c "SSL - A fatal alert message was received from our peer"
6765
Jerry Yuab082902021-12-23 18:02:22 +08006766requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006767run_test "SNI: DTLS, client auth no override: optional" \
6768 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006769 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6770 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-" \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006771 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
6772 0 \
6773 -S "skip write certificate request" \
6774 -C "skip parse certificate request" \
6775 -c "got a certificate request" \
6776 -C "skip write certificate" \
6777 -C "skip write certificate verify" \
6778 -S "skip parse certificate verify"
6779
Jerry Yuab082902021-12-23 18:02:22 +08006780requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006781run_test "SNI: DTLS, client auth override: none -> optional" \
6782 "$P_SRV debug_level=3 auth_mode=none dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006783 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6784 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,optional" \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006785 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
6786 0 \
6787 -S "skip write certificate request" \
6788 -C "skip parse certificate request" \
6789 -c "got a certificate request" \
6790 -C "skip write certificate" \
6791 -C "skip write certificate verify" \
6792 -S "skip parse certificate verify"
6793
Jerry Yuab082902021-12-23 18:02:22 +08006794requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006795run_test "SNI: DTLS, client auth override: optional -> none" \
6796 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006797 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6798 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,none" \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006799 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
6800 0 \
6801 -s "skip write certificate request" \
6802 -C "skip parse certificate request" \
6803 -c "got no certificate request" \
6804 -c "skip write certificate" \
6805 -c "skip write certificate verify" \
6806 -s "skip parse certificate verify"
6807
Jerry Yuab082902021-12-23 18:02:22 +08006808requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006809run_test "SNI: DTLS, CA no override" \
6810 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006811 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6812 ca_file=$DATA_FILES_PATH/test-ca.crt \
6813 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,required" \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006814 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006815 crt_file=$DATA_FILES_PATH/server6.crt key_file=$DATA_FILES_PATH/server6.key" \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006816 1 \
6817 -S "skip write certificate request" \
6818 -C "skip parse certificate request" \
6819 -c "got a certificate request" \
6820 -C "skip write certificate" \
6821 -C "skip write certificate verify" \
6822 -S "skip parse certificate verify" \
6823 -s "x509_verify_cert() returned" \
6824 -s "! The certificate is not correctly signed by the trusted CA" \
6825 -S "The certificate has been revoked (is on a CRL)"
6826
Jerry Yuab082902021-12-23 18:02:22 +08006827requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01006828run_test "SNI: DTLS, CA override" \
Andres AG1a834452016-12-07 10:01:30 +00006829 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006830 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
6831 ca_file=$DATA_FILES_PATH/test-ca.crt \
6832 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,$DATA_FILES_PATH/test-ca2.crt,-,required" \
Andres AG1a834452016-12-07 10:01:30 +00006833 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006834 crt_file=$DATA_FILES_PATH/server6.crt key_file=$DATA_FILES_PATH/server6.key" \
Andres AG1a834452016-12-07 10:01:30 +00006835 0 \
6836 -S "skip write certificate request" \
6837 -C "skip parse certificate request" \
6838 -c "got a certificate request" \
6839 -C "skip write certificate" \
6840 -C "skip write certificate verify" \
6841 -S "skip parse certificate verify" \
6842 -S "x509_verify_cert() returned" \
6843 -S "! The certificate is not correctly signed by the trusted CA" \
6844 -S "The certificate has been revoked (is on a CRL)"
6845
Jerry Yuab082902021-12-23 18:02:22 +08006846requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01006847run_test "SNI: DTLS, CA override with CRL" \
Andres AG1a834452016-12-07 10:01:30 +00006848 "$P_SRV debug_level=3 auth_mode=optional \
David Horstmann184c4f02024-07-01 17:01:28 +01006849 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key dtls=1 \
6850 ca_file=$DATA_FILES_PATH/test-ca.crt \
6851 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,$DATA_FILES_PATH/test-ca2.crt,$DATA_FILES_PATH/crl-ec-sha256.pem,required" \
Andres AG1a834452016-12-07 10:01:30 +00006852 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
David Horstmann184c4f02024-07-01 17:01:28 +01006853 crt_file=$DATA_FILES_PATH/server6.crt key_file=$DATA_FILES_PATH/server6.key" \
Andres AG1a834452016-12-07 10:01:30 +00006854 1 \
6855 -S "skip write certificate request" \
6856 -C "skip parse certificate request" \
6857 -c "got a certificate request" \
6858 -C "skip write certificate" \
6859 -C "skip write certificate verify" \
6860 -S "skip parse certificate verify" \
6861 -s "x509_verify_cert() returned" \
6862 -S "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2ffa53a2024-08-05 12:44:57 +02006863 -s "send alert level=2 message=44" \
Andres AG1a834452016-12-07 10:01:30 +00006864 -s "The certificate has been revoked (is on a CRL)"
Manuel Pégourié-Gonnard2ffa53a2024-08-05 12:44:57 +02006865 # MBEDTLS_X509_BADCERT_REVOKED -> MBEDTLS_SSL_ALERT_MSG_CERT_REVOKED
Andres AG1a834452016-12-07 10:01:30 +00006866
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006867# Tests for non-blocking I/O: exercise a variety of handshake flows
6868
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006869run_test "Non-blocking I/O: basic handshake" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006870 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
6871 "$P_CLI nbio=2 tickets=0" \
6872 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006873 -S "mbedtls_ssl_handshake returned" \
6874 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006875 -c "Read from server: .* bytes read"
6876
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006877run_test "Non-blocking I/O: client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006878 "$P_SRV nbio=2 tickets=0 auth_mode=required" \
6879 "$P_CLI nbio=2 tickets=0" \
6880 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006881 -S "mbedtls_ssl_handshake returned" \
6882 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006883 -c "Read from server: .* bytes read"
6884
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006885requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006886run_test "Non-blocking I/O: ticket" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006887 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
6888 "$P_CLI nbio=2 tickets=1" \
6889 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006890 -S "mbedtls_ssl_handshake returned" \
6891 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006892 -c "Read from server: .* bytes read"
6893
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006894requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006895run_test "Non-blocking I/O: ticket + client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006896 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
6897 "$P_CLI nbio=2 tickets=1" \
6898 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006899 -S "mbedtls_ssl_handshake returned" \
6900 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006901 -c "Read from server: .* bytes read"
6902
Ronald Cron5de538c2022-10-20 14:47:56 +02006903requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006904requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Ronald Cron92dca392023-03-10 16:11:15 +01006905run_test "Non-blocking I/O: TLS 1.2 + ticket + client auth + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006906 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
Ronald Cron92dca392023-03-10 16:11:15 +01006907 "$P_CLI force_version=tls12 nbio=2 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006908 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006909 -S "mbedtls_ssl_handshake returned" \
6910 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006911 -c "Read from server: .* bytes read"
6912
Ronald Cron92dca392023-03-10 16:11:15 +01006913requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6914requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6915requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006916requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Ronald Cron92dca392023-03-10 16:11:15 +01006917run_test "Non-blocking I/O: TLS 1.3 + ticket + client auth + resume" \
6918 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01006919 "$P_CLI nbio=2 tickets=1 reconnect=1" \
Ronald Cron92dca392023-03-10 16:11:15 +01006920 0 \
6921 -S "mbedtls_ssl_handshake returned" \
6922 -C "mbedtls_ssl_handshake returned" \
6923 -c "Read from server: .* bytes read"
6924
Ronald Cron5de538c2022-10-20 14:47:56 +02006925requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006926requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Ronald Cron92dca392023-03-10 16:11:15 +01006927run_test "Non-blocking I/O: TLS 1.2 + ticket + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006928 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
Ronald Cron92dca392023-03-10 16:11:15 +01006929 "$P_CLI force_version=tls12 nbio=2 tickets=1 reconnect=1" \
6930 0 \
6931 -S "mbedtls_ssl_handshake returned" \
6932 -C "mbedtls_ssl_handshake returned" \
6933 -c "Read from server: .* bytes read"
6934
6935requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6936requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6937requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006938requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Ronald Cron92dca392023-03-10 16:11:15 +01006939run_test "Non-blocking I/O: TLS 1.3 + ticket + resume" \
6940 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01006941 "$P_CLI nbio=2 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006942 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006943 -S "mbedtls_ssl_handshake returned" \
6944 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006945 -c "Read from server: .* bytes read"
6946
Ronald Cron5de538c2022-10-20 14:47:56 +02006947requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006948run_test "Non-blocking I/O: session-id resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006949 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006950 "$P_CLI force_version=tls12 nbio=2 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006951 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006952 -S "mbedtls_ssl_handshake returned" \
6953 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006954 -c "Read from server: .* bytes read"
6955
Hanno Becker00076712017-11-15 16:39:08 +00006956# Tests for event-driven I/O: exercise a variety of handshake flows
6957
6958run_test "Event-driven I/O: basic handshake" \
6959 "$P_SRV event=1 tickets=0 auth_mode=none" \
6960 "$P_CLI event=1 tickets=0" \
6961 0 \
6962 -S "mbedtls_ssl_handshake returned" \
6963 -C "mbedtls_ssl_handshake returned" \
6964 -c "Read from server: .* bytes read"
6965
6966run_test "Event-driven I/O: client auth" \
6967 "$P_SRV event=1 tickets=0 auth_mode=required" \
6968 "$P_CLI event=1 tickets=0" \
6969 0 \
6970 -S "mbedtls_ssl_handshake returned" \
6971 -C "mbedtls_ssl_handshake returned" \
6972 -c "Read from server: .* bytes read"
6973
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006974requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker00076712017-11-15 16:39:08 +00006975run_test "Event-driven I/O: ticket" \
6976 "$P_SRV event=1 tickets=1 auth_mode=none" \
6977 "$P_CLI event=1 tickets=1" \
6978 0 \
6979 -S "mbedtls_ssl_handshake returned" \
6980 -C "mbedtls_ssl_handshake returned" \
6981 -c "Read from server: .* bytes read"
6982
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006983requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker00076712017-11-15 16:39:08 +00006984run_test "Event-driven I/O: ticket + client auth" \
6985 "$P_SRV event=1 tickets=1 auth_mode=required" \
6986 "$P_CLI event=1 tickets=1" \
6987 0 \
6988 -S "mbedtls_ssl_handshake returned" \
6989 -C "mbedtls_ssl_handshake returned" \
6990 -c "Read from server: .* bytes read"
6991
Ronald Cron5de538c2022-10-20 14:47:56 +02006992requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02006993requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Ronald Cron92dca392023-03-10 16:11:15 +01006994run_test "Event-driven I/O: TLS 1.2 + ticket + client auth + resume" \
Hanno Becker00076712017-11-15 16:39:08 +00006995 "$P_SRV event=1 tickets=1 auth_mode=required" \
Ronald Cron92dca392023-03-10 16:11:15 +01006996 "$P_CLI force_version=tls12 event=1 tickets=1 reconnect=1" \
Hanno Becker00076712017-11-15 16:39:08 +00006997 0 \
6998 -S "mbedtls_ssl_handshake returned" \
6999 -C "mbedtls_ssl_handshake returned" \
7000 -c "Read from server: .* bytes read"
7001
Ronald Cron92dca392023-03-10 16:11:15 +01007002requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7003requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7004requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02007005requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Ronald Cron92dca392023-03-10 16:11:15 +01007006run_test "Event-driven I/O: TLS 1.3 + ticket + client auth + resume" \
7007 "$P_SRV event=1 tickets=1 auth_mode=required" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01007008 "$P_CLI event=1 tickets=1 reconnect=1" \
Ronald Cron92dca392023-03-10 16:11:15 +01007009 0 \
7010 -S "mbedtls_ssl_handshake returned" \
7011 -C "mbedtls_ssl_handshake returned" \
7012 -c "Read from server: .* bytes read"
7013
Ronald Cron5de538c2022-10-20 14:47:56 +02007014requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02007015requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Ronald Cron92dca392023-03-10 16:11:15 +01007016run_test "Event-driven I/O: TLS 1.2 + ticket + resume" \
Hanno Becker00076712017-11-15 16:39:08 +00007017 "$P_SRV event=1 tickets=1 auth_mode=none" \
Ronald Cron92dca392023-03-10 16:11:15 +01007018 "$P_CLI force_version=tls12 event=1 tickets=1 reconnect=1" \
7019 0 \
7020 -S "mbedtls_ssl_handshake returned" \
7021 -C "mbedtls_ssl_handshake returned" \
7022 -c "Read from server: .* bytes read"
7023
7024requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7025requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7026requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02007027requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Ronald Cron92dca392023-03-10 16:11:15 +01007028run_test "Event-driven I/O: TLS 1.3 + ticket + resume" \
7029 "$P_SRV event=1 tickets=1 auth_mode=none" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01007030 "$P_CLI event=1 tickets=1 reconnect=1" \
Hanno Becker00076712017-11-15 16:39:08 +00007031 0 \
7032 -S "mbedtls_ssl_handshake returned" \
7033 -C "mbedtls_ssl_handshake returned" \
7034 -c "Read from server: .* bytes read"
7035
Ronald Cron5de538c2022-10-20 14:47:56 +02007036requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Hanno Becker00076712017-11-15 16:39:08 +00007037run_test "Event-driven I/O: session-id resume" \
7038 "$P_SRV event=1 tickets=0 auth_mode=none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01007039 "$P_CLI force_version=tls12 event=1 tickets=0 reconnect=1" \
Hanno Becker00076712017-11-15 16:39:08 +00007040 0 \
7041 -S "mbedtls_ssl_handshake returned" \
7042 -C "mbedtls_ssl_handshake returned" \
7043 -c "Read from server: .* bytes read"
7044
Jerry Yuab082902021-12-23 18:02:22 +08007045requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00007046run_test "Event-driven I/O, DTLS: basic handshake" \
7047 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
7048 "$P_CLI dtls=1 event=1 tickets=0" \
7049 0 \
7050 -c "Read from server: .* bytes read"
7051
Jerry Yuab082902021-12-23 18:02:22 +08007052requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00007053run_test "Event-driven I/O, DTLS: client auth" \
7054 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
7055 "$P_CLI dtls=1 event=1 tickets=0" \
7056 0 \
7057 -c "Read from server: .* bytes read"
7058
Jerry Yuab082902021-12-23 18:02:22 +08007059requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02007060requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker6a33f592018-03-13 11:38:46 +00007061run_test "Event-driven I/O, DTLS: ticket" \
7062 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
7063 "$P_CLI dtls=1 event=1 tickets=1" \
7064 0 \
7065 -c "Read from server: .* bytes read"
7066
Jerry Yuab082902021-12-23 18:02:22 +08007067requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02007068requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker6a33f592018-03-13 11:38:46 +00007069run_test "Event-driven I/O, DTLS: ticket + client auth" \
7070 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
7071 "$P_CLI dtls=1 event=1 tickets=1" \
7072 0 \
7073 -c "Read from server: .* bytes read"
7074
Jerry Yuab082902021-12-23 18:02:22 +08007075requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02007076requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker6a33f592018-03-13 11:38:46 +00007077run_test "Event-driven I/O, DTLS: ticket + client auth + resume" \
7078 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01007079 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00007080 0 \
7081 -c "Read from server: .* bytes read"
7082
Jerry Yuab082902021-12-23 18:02:22 +08007083requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +02007084requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker6a33f592018-03-13 11:38:46 +00007085run_test "Event-driven I/O, DTLS: ticket + resume" \
7086 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01007087 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00007088 0 \
7089 -c "Read from server: .* bytes read"
7090
Jerry Yuab082902021-12-23 18:02:22 +08007091requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00007092run_test "Event-driven I/O, DTLS: session-id resume" \
7093 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01007094 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00007095 0 \
7096 -c "Read from server: .* bytes read"
Hanno Beckerbc6c1102018-03-13 11:39:40 +00007097
7098# This test demonstrates the need for the mbedtls_ssl_check_pending function.
7099# During session resumption, the client will send its ApplicationData record
7100# within the same datagram as the Finished messages. In this situation, the
7101# server MUST NOT idle on the underlying transport after handshake completion,
7102# because the ApplicationData request has already been queued internally.
Jerry Yuab082902021-12-23 18:02:22 +08007103requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerbc6c1102018-03-13 11:39:40 +00007104run_test "Event-driven I/O, DTLS: session-id resume, UDP packing" \
Hanno Becker8d832182018-03-15 10:14:19 +00007105 -p "$P_PXY pack=50" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00007106 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01007107 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00007108 0 \
7109 -c "Read from server: .* bytes read"
7110
Ronald Cron35884a42024-03-15 15:43:14 +01007111# Tests for version negotiation. Some information to ease the understanding
7112# of the version negotiation test titles below:
7113# . 1.2/1.3 means that only TLS 1.2/TLS 1.3 is enabled.
7114# . 1.2+1.3 means that both TLS 1.2 and TLS 1.3 are enabled.
7115# . 1.2+(1.3)/(1.2)+1.3 means that TLS 1.2/1.3 is enabled and that
7116# TLS 1.3/1.2 may be enabled or not.
7117# . max=1.2 means that both TLS 1.2 and TLS 1.3 are enabled at build time but
7118# TLS 1.3 is disabled at runtime (maximum negotiable version is TLS 1.2).
7119# . min=1.3 means that both TLS 1.2 and TLS 1.3 are enabled at build time but
7120# TLS 1.2 is disabled at runtime (minimum negotiable version is TLS 1.3).
7121
Ronald Cronfe18d8d2024-03-06 15:19:55 +01007122# Tests for version negotiation, MbedTLS client and server
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007123
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007124requires_config_enabled MBEDTLS_SSL_CLI_C
7125requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron114c5f02024-03-06 15:24:41 +01007126requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_3
7127requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007128run_test "Version nego m->m: cli 1.2, srv 1.2 -> 1.2" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01007129 "$P_SRV" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007130 "$P_CLI" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01007131 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02007132 -S "mbedtls_ssl_handshake returned" \
7133 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01007134 -s "Protocol is TLSv1.2" \
7135 -c "Protocol is TLSv1.2"
7136
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007137requires_config_enabled MBEDTLS_SSL_CLI_C
7138requires_config_enabled MBEDTLS_SSL_SRV_C
7139requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7140requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron114c5f02024-03-06 15:24:41 +01007141requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007142run_test "Version nego m->m: cli max=1.2, srv max=1.2 -> 1.2" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007143 "$P_SRV max_version=tls12" \
7144 "$P_CLI max_version=tls12" \
7145 0 \
7146 -S "mbedtls_ssl_handshake returned" \
7147 -C "mbedtls_ssl_handshake returned" \
7148 -s "Protocol is TLSv1.2" \
7149 -c "Protocol is TLSv1.2"
7150
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007151requires_config_enabled MBEDTLS_SSL_CLI_C
7152requires_config_enabled MBEDTLS_SSL_SRV_C
7153requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron114c5f02024-03-06 15:24:41 +01007154requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_2
Ronald Cron35884a42024-03-15 15:43:14 +01007155run_test "Version nego m->m: cli 1.3, srv 1.3 -> 1.3" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007156 "$P_SRV" \
7157 "$P_CLI" \
7158 0 \
7159 -S "mbedtls_ssl_handshake returned" \
7160 -C "mbedtls_ssl_handshake returned" \
7161 -s "Protocol is TLSv1.3" \
7162 -c "Protocol is TLSv1.3"
7163
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007164requires_config_enabled MBEDTLS_SSL_CLI_C
7165requires_config_enabled MBEDTLS_SSL_SRV_C
7166requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7167requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7168requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007169run_test "Version nego m->m: cli min=1.3, srv min=1.3 -> 1.3" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007170 "$P_SRV min_version=tls13" \
7171 "$P_CLI min_version=tls13" \
7172 0 \
7173 -S "mbedtls_ssl_handshake returned" \
7174 -C "mbedtls_ssl_handshake returned" \
7175 -s "Protocol is TLSv1.3" \
7176 -c "Protocol is TLSv1.3"
7177
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007178requires_config_enabled MBEDTLS_SSL_CLI_C
7179requires_config_enabled MBEDTLS_SSL_SRV_C
7180requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7181requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7182requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007183run_test "Version nego m->m: cli 1.2+1.3, srv 1.2+1.3 -> 1.3" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007184 "$P_SRV" \
7185 "$P_CLI" \
7186 0 \
7187 -S "mbedtls_ssl_handshake returned" \
7188 -C "mbedtls_ssl_handshake returned" \
7189 -s "Protocol is TLSv1.3" \
7190 -c "Protocol is TLSv1.3"
7191
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007192requires_config_enabled MBEDTLS_SSL_CLI_C
7193requires_config_enabled MBEDTLS_SSL_SRV_C
7194requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7195requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7196requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007197run_test "Version nego m->m: cli 1.2+1.3, srv min=1.3 -> 1.3" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007198 "$P_SRV min_version=tls13" \
7199 "$P_CLI" \
7200 0 \
7201 -S "mbedtls_ssl_handshake returned" \
7202 -C "mbedtls_ssl_handshake returned" \
7203 -s "Protocol is TLSv1.3" \
7204 -c "Protocol is TLSv1.3"
7205
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007206requires_config_enabled MBEDTLS_SSL_CLI_C
7207requires_config_enabled MBEDTLS_SSL_SRV_C
7208requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7209requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron114c5f02024-03-06 15:24:41 +01007210requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007211run_test "Version nego m->m: cli 1.2+1.3, srv max=1.2 -> 1.2" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007212 "$P_SRV max_version=tls12" \
7213 "$P_CLI" \
7214 0 \
7215 -S "mbedtls_ssl_handshake returned" \
7216 -C "mbedtls_ssl_handshake returned" \
7217 -s "Protocol is TLSv1.2" \
7218 -c "Protocol is TLSv1.2"
7219
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007220requires_config_enabled MBEDTLS_SSL_CLI_C
7221requires_config_enabled MBEDTLS_SSL_SRV_C
7222requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7223requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron114c5f02024-03-06 15:24:41 +01007224requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007225run_test "Version nego m->m: cli max=1.2, srv 1.2+1.3 -> 1.2" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01007226 "$P_SRV" \
Ronald Crondcfd00c2024-03-06 15:58:50 +01007227 "$P_CLI max_version=tls12" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01007228 0 \
7229 -S "mbedtls_ssl_handshake returned" \
7230 -C "mbedtls_ssl_handshake returned" \
7231 -s "Protocol is TLSv1.2" \
7232 -c "Protocol is TLSv1.2"
7233
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007234requires_config_enabled MBEDTLS_SSL_CLI_C
7235requires_config_enabled MBEDTLS_SSL_SRV_C
7236requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7237requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7238requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007239run_test "Version nego m->m: cli min=1.3, srv 1.2+1.3 -> 1.3" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007240 "$P_SRV" \
7241 "$P_CLI min_version=tls13" \
7242 0 \
7243 -S "mbedtls_ssl_handshake returned" \
7244 -C "mbedtls_ssl_handshake returned" \
7245 -s "Protocol is TLSv1.3" \
7246 -c "Protocol is TLSv1.3"
7247
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007248requires_config_enabled MBEDTLS_SSL_CLI_C
7249requires_config_enabled MBEDTLS_SSL_SRV_C
7250requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7251requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007252run_test "Not supported version m->m: cli max=1.2, srv min=1.3" \
Ronald Crondcfd00c2024-03-06 15:58:50 +01007253 "$P_SRV min_version=tls13" \
7254 "$P_CLI max_version=tls12" \
7255 1 \
7256 -s "Handshake protocol not within min/max boundaries" \
7257 -S "Protocol is TLSv1.2" \
7258 -C "Protocol is TLSv1.2" \
7259 -S "Protocol is TLSv1.3" \
7260 -C "Protocol is TLSv1.3"
Ronald Cronfe18d8d2024-03-06 15:19:55 +01007261
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007262requires_config_enabled MBEDTLS_SSL_CLI_C
7263requires_config_enabled MBEDTLS_SSL_SRV_C
7264requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7265requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007266run_test "Not supported version m->m: cli min=1.3, srv max=1.2" \
Ronald Cron114c5f02024-03-06 15:24:41 +01007267 "$P_SRV max_version=tls12" \
7268 "$P_CLI min_version=tls13" \
7269 1 \
7270 -s "The handshake negotiation failed" \
7271 -S "Protocol is TLSv1.2" \
7272 -C "Protocol is TLSv1.2" \
7273 -S "Protocol is TLSv1.3" \
7274 -C "Protocol is TLSv1.3"
7275
Ronald Croncd1370e2024-03-12 16:07:48 +01007276# Tests of version negotiation on server side against GnuTLS client
7277
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007278requires_config_enabled MBEDTLS_SSL_SRV_C
7279requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ronald Cron98bdcc42024-03-06 15:00:42 +01007280requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007281run_test "Server version nego G->m: cli 1.2, srv 1.2+(1.3) -> 1.2" \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007282 "$P_SRV" \
Ronald Crondfad4932024-03-06 15:05:14 +01007283 "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2" \
Ronald Croncd1370e2024-03-12 16:07:48 +01007284 0 \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007285 -S "mbedtls_ssl_handshake returned" \
7286 -s "Protocol is TLSv1.2"
Ronald Croncd1370e2024-03-12 16:07:48 +01007287
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007288requires_config_enabled MBEDTLS_SSL_SRV_C
7289requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7290requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Crondfad4932024-03-06 15:05:14 +01007291requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007292run_test "Server version nego G->m: cli 1.2, srv max=1.2 -> 1.2" \
Ronald Crondfad4932024-03-06 15:05:14 +01007293 "$P_SRV max_version=tls12" \
7294 "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2" \
7295 0 \
7296 -S "mbedtls_ssl_handshake returned" \
7297 -s "Protocol is TLSv1.2"
7298
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007299requires_config_enabled MBEDTLS_SSL_SRV_C
7300requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7301requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007302run_test "Server version nego G->m: cli 1.3, srv (1.2)+1.3 -> 1.3" \
Ronald Crondfad4932024-03-06 15:05:14 +01007303 "$P_SRV" \
7304 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3" \
7305 0 \
7306 -S "mbedtls_ssl_handshake returned" \
7307 -s "Protocol is TLSv1.3"
7308
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007309requires_config_enabled MBEDTLS_SSL_SRV_C
7310requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7311requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7312requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007313run_test "Server version nego G->m: cli 1.3, srv min=1.3 -> 1.3" \
Ronald Crondfad4932024-03-06 15:05:14 +01007314 "$P_SRV min_version=tls13" \
7315 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3" \
7316 0 \
7317 -S "mbedtls_ssl_handshake returned" \
7318 -s "Protocol is TLSv1.3"
7319
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007320requires_config_enabled MBEDTLS_SSL_SRV_C
7321requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7322requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007323run_test "Server version nego G->m: cli 1.2+1.3, srv (1.2)+1.3 -> 1.3" \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007324 "$P_SRV" \
7325 "$G_NEXT_CLI localhost --priority=NORMAL" \
Ronald Croncd1370e2024-03-12 16:07:48 +01007326 0 \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007327 -S "mbedtls_ssl_handshake returned" \
7328 -s "Protocol is TLSv1.3"
Ronald Croncd1370e2024-03-12 16:07:48 +01007329
Ronald Cron98bdcc42024-03-06 15:00:42 +01007330requires_gnutls_next_disable_tls13_compat
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007331requires_config_enabled MBEDTLS_SSL_SRV_C
7332requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7333requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007334run_test "Server version nego G->m (no compat): cli 1.2+1.3, srv (1.2)+1.3 -> 1.3" \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007335 "$P_SRV" \
7336 "$G_NEXT_CLI localhost --priority=NORMAL:%DISABLE_TLS13_COMPAT_MODE" \
Ronald Croncd1370e2024-03-12 16:07:48 +01007337 0 \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007338 -S "mbedtls_ssl_handshake returned" \
7339 -s "Protocol is TLSv1.3"
Ronald Croncd1370e2024-03-12 16:07:48 +01007340
7341# GnuTLS can be setup to send a ClientHello containing a supported versions
7342# extension proposing TLS 1.2 (preferred) and then TLS 1.3. In that case,
7343# a TLS 1.3 and TLS 1.2 capable server is supposed to negotiate TLS 1.2 and
7344# to indicate in the ServerHello that it downgrades from TLS 1.3. The GnuTLS
7345# client then detects the downgrade indication and aborts the handshake even
7346# if TLS 1.2 was its preferred version. Keeping the test even if the
7347# handshake fails eventually as it exercices parts of the Mbed TLS
7348# implementation that are otherwise not exercised.
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007349requires_config_enabled MBEDTLS_SSL_SRV_C
7350requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7351requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007352run_test "Server version nego G->m: cli 1.2+1.3 (1.2 preferred!), srv 1.2+1.3 -> 1.2" \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007353 "$P_SRV" \
Ronald Croncd1370e2024-03-12 16:07:48 +01007354 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:+VERS-TLS1.3" \
7355 1 \
7356 -c "Detected downgrade to TLS 1.2 from TLS 1.3"
7357
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007358requires_config_enabled MBEDTLS_SSL_SRV_C
7359requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7360requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7361requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007362run_test "Server version nego G->m: cli 1.2+1.3, srv min=1.3 -> 1.3" \
Ronald Crondfad4932024-03-06 15:05:14 +01007363 "$P_SRV min_version=tls13" \
7364 "$G_NEXT_CLI localhost --priority=NORMAL" \
7365 0 \
7366 -S "mbedtls_ssl_handshake returned" \
7367 -s "Protocol is TLSv1.3"
7368
7369requires_config_enabled MBEDTLS_SSL_SRV_C
7370requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_3
7371requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007372run_test "Server version nego G->m: cli 1.2+1.3, srv 1.2 -> 1.2" \
Ronald Crondfad4932024-03-06 15:05:14 +01007373 "$P_SRV" \
7374 "$G_NEXT_CLI localhost --priority=NORMAL" \
7375 0 \
7376 -S "mbedtls_ssl_handshake returned" \
7377 -s "Protocol is TLSv1.2"
7378
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007379requires_config_enabled MBEDTLS_SSL_SRV_C
7380requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7381requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Crondfad4932024-03-06 15:05:14 +01007382requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007383run_test "Server version nego G->m: cli 1.2+1.3, max=1.2 -> 1.2" \
Ronald Crondfad4932024-03-06 15:05:14 +01007384 "$P_SRV max_version=tls12" \
7385 "$G_NEXT_CLI localhost --priority=NORMAL" \
7386 0 \
7387 -S "mbedtls_ssl_handshake returned" \
7388 -s "Protocol is TLSv1.2"
7389
Ronald Cron98bdcc42024-03-06 15:00:42 +01007390requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron35884a42024-03-15 15:43:14 +01007391run_test "Not supported version G->m: cli 1.0, (1.2)+(1.3)" \
TRodziewicz2abf03c2021-06-25 14:40:09 +02007392 "$P_SRV" \
7393 "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.0" \
7394 1 \
7395 -s "Handshake protocol not within min/max boundaries" \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007396 -S "Protocol is TLSv1.0"
TRodziewicz2abf03c2021-06-25 14:40:09 +02007397
Ronald Cron98bdcc42024-03-06 15:00:42 +01007398requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron35884a42024-03-15 15:43:14 +01007399run_test "Not supported version G->m: cli 1.1, (1.2)+(1.3)" \
TRodziewicz2abf03c2021-06-25 14:40:09 +02007400 "$P_SRV" \
7401 "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.1" \
7402 1 \
7403 -s "Handshake protocol not within min/max boundaries" \
Ronald Cron98bdcc42024-03-06 15:00:42 +01007404 -S "Protocol is TLSv1.1"
TRodziewicz2abf03c2021-06-25 14:40:09 +02007405
Ronald Crondfad4932024-03-06 15:05:14 +01007406requires_config_enabled MBEDTLS_SSL_SRV_C
7407requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_2
Ronald Cron35884a42024-03-15 15:43:14 +01007408run_test "Not supported version G->m: cli 1.2, srv 1.3" \
Ronald Crondfad4932024-03-06 15:05:14 +01007409 "$P_SRV" \
7410 "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2" \
7411 1 \
7412 -s "Handshake protocol not within min/max boundaries" \
7413 -S "Protocol is TLSv1.2"
7414
7415requires_config_enabled MBEDTLS_SSL_SRV_C
7416requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007417run_test "Not supported version G->m: cli 1.3, srv 1.2" \
Ronald Crondfad4932024-03-06 15:05:14 +01007418 "$P_SRV" \
7419 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3" \
7420 1 \
7421 -S "Handshake protocol not within min/max boundaries" \
7422 -s "The handshake negotiation failed" \
7423 -S "Protocol is TLSv1.3"
7424
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007425requires_config_enabled MBEDTLS_SSL_SRV_C
7426requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7427requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007428run_test "Not supported version G->m: cli 1.2, srv min=1.3" \
Ronald Crondfad4932024-03-06 15:05:14 +01007429 "$P_SRV min_version=tls13" \
7430 "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2" \
7431 1 \
7432 -s "Handshake protocol not within min/max boundaries" \
7433 -S "Protocol is TLSv1.2"
7434
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007435requires_config_enabled MBEDTLS_SSL_SRV_C
7436requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7437requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007438run_test "Not supported version G->m: cli 1.3, srv max=1.2" \
Ronald Crondfad4932024-03-06 15:05:14 +01007439 "$P_SRV max_version=tls12" \
7440 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3" \
7441 1 \
7442 -S "Handshake protocol not within min/max boundaries" \
7443 -s "The handshake negotiation failed" \
7444 -S "Protocol is TLSv1.3"
7445
Ronald Cron10797e32024-03-07 08:27:24 +01007446# Tests of version negotiation on server side against OpenSSL client
7447
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007448requires_config_enabled MBEDTLS_SSL_SRV_C
7449requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ronald Cron10797e32024-03-07 08:27:24 +01007450requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007451run_test "Server version nego O->m: cli 1.2, srv 1.2+(1.3) -> 1.2" \
Ronald Cron10797e32024-03-07 08:27:24 +01007452 "$P_SRV" \
7453 "$O_NEXT_CLI -tls1_2" \
7454 0 \
7455 -S "mbedtls_ssl_handshake returned" \
7456 -s "Protocol is TLSv1.2"
7457
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007458requires_config_enabled MBEDTLS_SSL_SRV_C
7459requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7460requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron10797e32024-03-07 08:27:24 +01007461requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007462run_test "Server version nego O->m: cli 1.2, srv max=1.2 -> 1.2" \
Ronald Cron10797e32024-03-07 08:27:24 +01007463 "$P_SRV max_version=tls12" \
7464 "$O_NEXT_CLI -tls1_2" \
7465 0 \
7466 -S "mbedtls_ssl_handshake returned" \
7467 -s "Protocol is TLSv1.2"
7468
7469requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007470requires_config_enabled MBEDTLS_SSL_SRV_C
7471requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7472requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007473run_test "Server version nego O->m: cli 1.3, srv (1.2)+1.3 -> 1.3" \
Ronald Cron10797e32024-03-07 08:27:24 +01007474 "$P_SRV" \
7475 "$O_NEXT_CLI -tls1_3" \
7476 0 \
7477 -S "mbedtls_ssl_handshake returned" \
7478 -s "Protocol is TLSv1.3"
7479
7480requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007481requires_config_enabled MBEDTLS_SSL_SRV_C
7482requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7483requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7484requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007485run_test "Server version nego O->m: cli 1.3, srv min=1.3 -> 1.3" \
Ronald Cron10797e32024-03-07 08:27:24 +01007486 "$P_SRV min_version=tls13" \
7487 "$O_NEXT_CLI -tls1_3" \
7488 0 \
7489 -S "mbedtls_ssl_handshake returned" \
7490 -s "Protocol is TLSv1.3"
7491
7492requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007493requires_config_enabled MBEDTLS_SSL_SRV_C
7494requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7495requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007496run_test "Server version nego O->m: cli 1.2+1.3, srv (1.2)+1.3 -> 1.3" \
Ronald Cron10797e32024-03-07 08:27:24 +01007497 "$P_SRV" \
7498 "$O_NEXT_CLI" \
7499 0 \
7500 -S "mbedtls_ssl_handshake returned" \
7501 -s "Protocol is TLSv1.3"
7502
7503requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007504requires_config_enabled MBEDTLS_SSL_SRV_C
7505requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7506requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007507run_test "Server version nego O->m (no compat): cli 1.2+1.3, srv (1.2)+1.3 -> 1.3" \
Ronald Cron10797e32024-03-07 08:27:24 +01007508 "$P_SRV" \
7509 "$O_NEXT_CLI -no_middlebox" \
7510 0 \
7511 -S "mbedtls_ssl_handshake returned" \
7512 -s "Protocol is TLSv1.3"
7513
7514requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007515requires_config_enabled MBEDTLS_SSL_SRV_C
7516requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7517requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7518requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron35884a42024-03-15 15:43:14 +01007519run_test "Server version nego O->m: cli 1.2+1.3, srv min=1.3 -> 1.3" \
Ronald Cron10797e32024-03-07 08:27:24 +01007520 "$P_SRV min_version=tls13" \
7521 "$O_NEXT_CLI" \
7522 0 \
7523 -S "mbedtls_ssl_handshake returned" \
7524 -s "Protocol is TLSv1.3"
7525
7526requires_config_enabled MBEDTLS_SSL_SRV_C
7527requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_3
7528requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007529run_test "Server version nego O->m: cli 1.2+1.3, srv 1.2 -> 1.2" \
Ronald Cron10797e32024-03-07 08:27:24 +01007530 "$P_SRV" \
7531 "$O_NEXT_CLI" \
7532 0 \
7533 -S "mbedtls_ssl_handshake returned" \
7534 -s "Protocol is TLSv1.2"
7535
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007536requires_config_enabled MBEDTLS_SSL_SRV_C
7537requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7538requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron10797e32024-03-07 08:27:24 +01007539requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron35884a42024-03-15 15:43:14 +01007540run_test "Server version nego O->m: cli 1.2+1.3, srv max=1.2 -> 1.2" \
Ronald Cron10797e32024-03-07 08:27:24 +01007541 "$P_SRV max_version=tls12" \
7542 "$O_NEXT_CLI" \
7543 0 \
7544 -S "mbedtls_ssl_handshake returned" \
7545 -s "Protocol is TLSv1.2"
7546
7547requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron35884a42024-03-15 15:43:14 +01007548run_test "Not supported version O->m: cli 1.0, srv (1.2)+(1.3)" \
Ronald Cron10797e32024-03-07 08:27:24 +01007549 "$P_SRV" \
7550 "$O_CLI -tls1" \
7551 1 \
7552 -s "Handshake protocol not within min/max boundaries" \
7553 -S "Protocol is TLSv1.0"
7554
7555requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron35884a42024-03-15 15:43:14 +01007556run_test "Not supported version O->m: cli 1.1, srv (1.2)+(1.3)" \
Ronald Cron10797e32024-03-07 08:27:24 +01007557 "$P_SRV" \
7558 "$O_CLI -tls1_1" \
7559 1 \
7560 -s "Handshake protocol not within min/max boundaries" \
7561 -S "Protocol is TLSv1.1"
7562
7563requires_config_enabled MBEDTLS_SSL_SRV_C
7564requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_2
Ronald Cron35884a42024-03-15 15:43:14 +01007565run_test "Not supported version O->m: cli 1.2, srv 1.3" \
Ronald Cron10797e32024-03-07 08:27:24 +01007566 "$P_SRV" \
7567 "$O_NEXT_CLI -tls1_2" \
7568 1 \
7569 -s "Handshake protocol not within min/max boundaries" \
7570 -S "Protocol is TLSv1.2"
7571
7572requires_config_enabled MBEDTLS_SSL_SRV_C
7573requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007574run_test "Not supported version O->m: cli 1.3, srv 1.2" \
Ronald Cron10797e32024-03-07 08:27:24 +01007575 "$P_SRV" \
7576 "$O_NEXT_CLI -tls1_3" \
7577 1 \
7578 -S "Handshake protocol not within min/max boundaries" \
7579 -s "The handshake negotiation failed" \
7580 -S "Protocol is TLSv1.3"
7581
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007582requires_config_enabled MBEDTLS_SSL_SRV_C
7583requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7584requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007585run_test "Not supported version O->m: cli 1.2, srv min=1.3" \
Ronald Cron10797e32024-03-07 08:27:24 +01007586 "$P_SRV min_version=tls13" \
7587 "$O_NEXT_CLI -tls1_2" \
7588 1 \
7589 -s "Handshake protocol not within min/max boundaries" \
7590 -S "Protocol is TLSv1.2"
7591
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007592requires_config_enabled MBEDTLS_SSL_SRV_C
7593requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7594requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007595run_test "Not supported version O->m: cli 1.3, srv max=1.2" \
Ronald Cron10797e32024-03-07 08:27:24 +01007596 "$P_SRV max_version=tls12" \
7597 "$O_NEXT_CLI -tls1_3" \
7598 1 \
7599 -S "Handshake protocol not within min/max boundaries" \
7600 -s "The handshake negotiation failed" \
7601 -S "Protocol is TLSv1.3"
7602
Ronald Crona1e7b6a2024-03-06 15:13:49 +01007603# Tests of version negotiation on client side against GnuTLS and OpenSSL server
TRodziewicz2abf03c2021-06-25 14:40:09 +02007604
Jerry Yuab082902021-12-23 18:02:22 +08007605requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ronald Cron35884a42024-03-15 15:43:14 +01007606run_test "Not supported version: srv max TLS 1.0" \
TRodziewicz2abf03c2021-06-25 14:40:09 +02007607 "$G_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.0" \
7608 "$P_CLI" \
7609 1 \
7610 -s "Error in protocol version" \
7611 -c "Handshake protocol not within min/max boundaries" \
7612 -S "Version: TLS1.0" \
7613 -C "Protocol is TLSv1.0"
7614
Jerry Yuab082902021-12-23 18:02:22 +08007615requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ronald Cron35884a42024-03-15 15:43:14 +01007616run_test "Not supported version: srv max TLS 1.1" \
TRodziewicz2abf03c2021-06-25 14:40:09 +02007617 "$G_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.1" \
7618 "$P_CLI" \
7619 1 \
7620 -s "Error in protocol version" \
7621 -c "Handshake protocol not within min/max boundaries" \
7622 -S "Version: TLS1.1" \
7623 -C "Protocol is TLSv1.1"
7624
Ronald Crona1e7b6a2024-03-06 15:13:49 +01007625requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7626requires_config_enabled MBEDTLS_DEBUG_C
7627requires_config_enabled MBEDTLS_SSL_CLI_C
7628skip_handshake_stage_check
7629requires_gnutls_tls1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007630run_test "TLS 1.3: Not supported version:gnutls: srv max TLS 1.0" \
Ronald Crona1e7b6a2024-03-06 15:13:49 +01007631 "$G_NEXT_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.0 -d 4" \
7632 "$P_CLI debug_level=4" \
7633 1 \
7634 -s "Client's version: 3.3" \
7635 -S "Version: TLS1.0" \
7636 -C "Protocol is TLSv1.0"
7637
7638requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7639requires_config_enabled MBEDTLS_DEBUG_C
7640requires_config_enabled MBEDTLS_SSL_CLI_C
7641skip_handshake_stage_check
7642requires_gnutls_tls1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007643run_test "TLS 1.3: Not supported version:gnutls: srv max TLS 1.1" \
Ronald Crona1e7b6a2024-03-06 15:13:49 +01007644 "$G_NEXT_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.1 -d 4" \
7645 "$P_CLI debug_level=4" \
7646 1 \
7647 -s "Client's version: 3.3" \
7648 -S "Version: TLS1.1" \
7649 -C "Protocol is TLSv1.1"
7650
7651requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7652requires_config_enabled MBEDTLS_DEBUG_C
7653requires_config_enabled MBEDTLS_SSL_CLI_C
7654skip_handshake_stage_check
7655requires_gnutls_tls1_3
Ronald Cron35884a42024-03-15 15:43:14 +01007656run_test "TLS 1.3: Not supported version:gnutls: srv max TLS 1.2" \
Ronald Crona1e7b6a2024-03-06 15:13:49 +01007657 "$G_NEXT_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.2 -d 4" \
7658 "$P_CLI force_version=tls13 debug_level=4" \
7659 1 \
7660 -s "Client's version: 3.3" \
7661 -c "is a fatal alert message (msg 40)" \
7662 -S "Version: TLS1.2" \
7663 -C "Protocol is TLSv1.2"
7664
7665requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7666requires_config_enabled MBEDTLS_DEBUG_C
7667requires_config_enabled MBEDTLS_SSL_CLI_C
7668skip_handshake_stage_check
7669requires_openssl_next
Ronald Cron35884a42024-03-15 15:43:14 +01007670run_test "TLS 1.3: Not supported version:openssl: srv max TLS 1.0" \
Ronald Crona1e7b6a2024-03-06 15:13:49 +01007671 "$O_NEXT_SRV -msg -tls1" \
7672 "$P_CLI debug_level=4" \
7673 1 \
7674 -s "fatal protocol_version" \
7675 -c "is a fatal alert message (msg 70)" \
7676 -S "Version: TLS1.0" \
7677 -C "Protocol : TLSv1.0"
7678
7679requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7680requires_config_enabled MBEDTLS_DEBUG_C
7681requires_config_enabled MBEDTLS_SSL_CLI_C
7682skip_handshake_stage_check
7683requires_openssl_next
Ronald Cron35884a42024-03-15 15:43:14 +01007684run_test "TLS 1.3: Not supported version:openssl: srv max TLS 1.1" \
Ronald Crona1e7b6a2024-03-06 15:13:49 +01007685 "$O_NEXT_SRV -msg -tls1_1" \
7686 "$P_CLI debug_level=4" \
7687 1 \
7688 -s "fatal protocol_version" \
7689 -c "is a fatal alert message (msg 70)" \
7690 -S "Version: TLS1.1" \
7691 -C "Protocol : TLSv1.1"
7692
7693requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
7694requires_config_enabled MBEDTLS_DEBUG_C
7695requires_config_enabled MBEDTLS_SSL_CLI_C
7696skip_handshake_stage_check
7697requires_openssl_next
Ronald Cron35884a42024-03-15 15:43:14 +01007698run_test "TLS 1.3: Not supported version:openssl: srv max TLS 1.2" \
Ronald Crona1e7b6a2024-03-06 15:13:49 +01007699 "$O_NEXT_SRV -msg -tls1_2" \
7700 "$P_CLI force_version=tls13 debug_level=4" \
7701 1 \
7702 -s "fatal protocol_version" \
7703 -c "is a fatal alert message (msg 70)" \
7704 -S "Version: TLS1.2" \
7705 -C "Protocol : TLSv1.2"
7706
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007707# Tests for ALPN extension
7708
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007709run_test "ALPN: none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007710 "$P_SRV debug_level=3" \
7711 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007712 0 \
7713 -C "client hello, adding alpn extension" \
7714 -S "found alpn extension" \
7715 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00007716 -S "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007717 -C "found alpn extension " \
7718 -C "Application Layer Protocol is" \
7719 -S "Application Layer Protocol is"
7720
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007721run_test "ALPN: client only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007722 "$P_SRV debug_level=3" \
7723 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007724 0 \
7725 -c "client hello, adding alpn extension" \
7726 -s "found alpn extension" \
7727 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00007728 -S "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007729 -C "found alpn extension " \
7730 -c "Application Layer Protocol is (none)" \
7731 -S "Application Layer Protocol is"
7732
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007733run_test "ALPN: server only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007734 "$P_SRV debug_level=3 alpn=abc,1234" \
7735 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007736 0 \
7737 -C "client hello, adding alpn extension" \
7738 -S "found alpn extension" \
7739 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00007740 -S "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007741 -C "found alpn extension " \
7742 -C "Application Layer Protocol is" \
7743 -s "Application Layer Protocol is (none)"
7744
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007745run_test "ALPN: both, common cli1-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007746 "$P_SRV debug_level=3 alpn=abc,1234" \
7747 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007748 0 \
7749 -c "client hello, adding alpn extension" \
7750 -s "found alpn extension" \
7751 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00007752 -s "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007753 -c "found alpn extension" \
7754 -c "Application Layer Protocol is abc" \
7755 -s "Application Layer Protocol is abc"
7756
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007757run_test "ALPN: both, common cli2-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007758 "$P_SRV debug_level=3 alpn=abc,1234" \
7759 "$P_CLI debug_level=3 alpn=1234,abc" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007760 0 \
7761 -c "client hello, adding alpn extension" \
7762 -s "found alpn extension" \
7763 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00007764 -s "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007765 -c "found alpn extension" \
7766 -c "Application Layer Protocol is abc" \
7767 -s "Application Layer Protocol is abc"
7768
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007769run_test "ALPN: both, common cli1-srv2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007770 "$P_SRV debug_level=3 alpn=abc,1234" \
7771 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007772 0 \
7773 -c "client hello, adding alpn extension" \
7774 -s "found alpn extension" \
7775 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00007776 -s "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007777 -c "found alpn extension" \
7778 -c "Application Layer Protocol is 1234" \
7779 -s "Application Layer Protocol is 1234"
7780
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007781run_test "ALPN: both, no common" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007782 "$P_SRV debug_level=3 alpn=abc,123" \
7783 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007784 1 \
7785 -c "client hello, adding alpn extension" \
7786 -s "found alpn extension" \
7787 -c "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00007788 -S "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02007789 -C "found alpn extension" \
7790 -C "Application Layer Protocol is 1234" \
7791 -S "Application Layer Protocol is 1234"
7792
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +02007793
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007794# Tests for keyUsage in leaf certificates, part 1:
7795# server-side certificate/suite selection
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007796#
7797# This is only about 1.2 (for 1.3, all key exchanges use signatures).
7798# In 4.0 this will probably go away as all TLS 1.2 key exchanges will use
7799# signatures too, following the removal of RSA #8170 and static ECDH #9201.
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007800
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007801run_test "keyUsage srv 1.2: RSA, digitalSignature -> (EC)DHE-RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01007802 "$P_SRV force_version=tls12 key_file=$DATA_FILES_PATH/server2.key \
7803 crt_file=$DATA_FILES_PATH/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007804 "$P_CLI" \
7805 0 \
Manuel Pégourié-Gonnard17cde5f2014-05-22 14:42:39 +02007806 -c "Ciphersuite is TLS-[EC]*DHE-RSA-WITH-"
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007807
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007808run_test "keyUsage srv 1.2: RSA, keyEncipherment -> RSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01007809 "$P_SRV force_version=tls12 key_file=$DATA_FILES_PATH/server2.key \
7810 crt_file=$DATA_FILES_PATH/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007811 "$P_CLI" \
7812 0 \
7813 -c "Ciphersuite is TLS-RSA-WITH-"
7814
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007815run_test "keyUsage srv 1.2: RSA, keyAgreement -> fail" \
David Horstmann184c4f02024-07-01 17:01:28 +01007816 "$P_SRV force_version=tls12 key_file=$DATA_FILES_PATH/server2.key \
7817 crt_file=$DATA_FILES_PATH/server2.ku-ka.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02007818 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007819 1 \
7820 -C "Ciphersuite is "
7821
Valerio Settid1f991c2023-02-22 12:54:13 +01007822requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007823run_test "keyUsage srv 1.2: ECC, digitalSignature -> ECDHE-ECDSA" \
David Horstmann184c4f02024-07-01 17:01:28 +01007824 "$P_SRV force_version=tls12 key_file=$DATA_FILES_PATH/server5.key \
7825 crt_file=$DATA_FILES_PATH/server5.ku-ds.crt" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007826 "$P_CLI" \
7827 0 \
7828 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-"
7829
7830
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007831run_test "keyUsage srv 1.2: ECC, keyAgreement -> ECDH-" \
David Horstmann184c4f02024-07-01 17:01:28 +01007832 "$P_SRV force_version=tls12 key_file=$DATA_FILES_PATH/server5.key \
7833 crt_file=$DATA_FILES_PATH/server5.ku-ka.crt" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007834 "$P_CLI" \
7835 0 \
7836 -c "Ciphersuite is TLS-ECDH-"
7837
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007838run_test "keyUsage srv 1.2: ECC, keyEncipherment -> fail" \
David Horstmann184c4f02024-07-01 17:01:28 +01007839 "$P_SRV force_version=tls12 key_file=$DATA_FILES_PATH/server5.key \
7840 crt_file=$DATA_FILES_PATH/server5.ku-ke.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02007841 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007842 1 \
7843 -C "Ciphersuite is "
7844
7845# Tests for keyUsage in leaf certificates, part 2:
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02007846# client-side checking of server cert
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007847#
7848# TLS 1.3 uses only signature, but for 1.2 it depends on the key exchange.
7849# In 4.0 this will probably change as all TLS 1.2 key exchanges will use
7850# signatures too, following the removal of RSA #8170 and static ECDH #9201.
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007851
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007852run_test "keyUsage cli 1.2: DigitalSignature+KeyEncipherment, RSA: OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01007853 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server2.key \
7854 -cert $DATA_FILES_PATH/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007855 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007856 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7857 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02007858 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007859 -C "Processing of the Certificate handshake message failed" \
7860 -c "Ciphersuite is TLS-"
7861
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007862run_test "keyUsage cli 1.2: DigitalSignature+KeyEncipherment, DHE-RSA: OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01007863 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server2.key \
7864 -cert $DATA_FILES_PATH/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007865 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007866 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
7867 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02007868 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007869 -C "Processing of the Certificate handshake message failed" \
7870 -c "Ciphersuite is TLS-"
7871
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007872run_test "keyUsage cli 1.2: KeyEncipherment, RSA: OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01007873 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server2.key \
7874 -cert $DATA_FILES_PATH/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007875 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007876 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7877 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02007878 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007879 -C "Processing of the Certificate handshake message failed" \
7880 -c "Ciphersuite is TLS-"
7881
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02007882run_test "keyUsage cli 1.2: KeyEncipherment, DHE-RSA: fail (hard)" \
David Horstmann184c4f02024-07-01 17:01:28 +01007883 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server2.key \
7884 -cert $DATA_FILES_PATH/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007885 "$P_CLI debug_level=3 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007886 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
7887 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02007888 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007889 -c "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007890 -C "Ciphersuite is TLS-" \
7891 -c "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02007892 -c "! Usage does not match the keyUsage extension"
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007893 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007894
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02007895run_test "keyUsage cli 1.2: KeyEncipherment, DHE-RSA: fail (soft)" \
David Horstmann184c4f02024-07-01 17:01:28 +01007896 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server2.key \
7897 -cert $DATA_FILES_PATH/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007898 "$P_CLI debug_level=3 auth_mode=optional \
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01007899 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
7900 0 \
7901 -c "bad certificate (usage extensions)" \
7902 -C "Processing of the Certificate handshake message failed" \
7903 -c "Ciphersuite is TLS-" \
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007904 -C "send alert level=2 message=43" \
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01007905 -c "! Usage does not match the keyUsage extension"
7906
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007907run_test "keyUsage cli 1.2: DigitalSignature, DHE-RSA: OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01007908 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server2.key \
7909 -cert $DATA_FILES_PATH/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007910 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007911 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
7912 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02007913 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007914 -C "Processing of the Certificate handshake message failed" \
7915 -c "Ciphersuite is TLS-"
7916
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02007917run_test "keyUsage cli 1.2: DigitalSignature, RSA: fail (hard)" \
David Horstmann184c4f02024-07-01 17:01:28 +01007918 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server2.key \
7919 -cert $DATA_FILES_PATH/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007920 "$P_CLI debug_level=3 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007921 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7922 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02007923 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007924 -c "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007925 -C "Ciphersuite is TLS-" \
7926 -c "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02007927 -c "! Usage does not match the keyUsage extension"
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007928 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02007929
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02007930run_test "keyUsage cli 1.2: DigitalSignature, RSA: fail (soft)" \
David Horstmann184c4f02024-07-01 17:01:28 +01007931 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server2.key \
7932 -cert $DATA_FILES_PATH/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007933 "$P_CLI debug_level=3 auth_mode=optional \
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01007934 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7935 0 \
7936 -c "bad certificate (usage extensions)" \
7937 -C "Processing of the Certificate handshake message failed" \
7938 -c "Ciphersuite is TLS-" \
Manuel Pégourié-Gonnard8e70c2b2024-08-05 12:49:57 +02007939 -C "send alert level=2 message=43" \
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01007940 -c "! Usage does not match the keyUsage extension"
7941
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007942requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007943requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007944run_test "keyUsage cli 1.3: DigitalSignature, RSA: OK" \
7945 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server2.key \
7946 -cert $DATA_FILES_PATH/server2-sha256.ku-ds.crt" \
7947 "$P_CLI debug_level=3" \
7948 0 \
7949 -C "bad certificate (usage extensions)" \
7950 -C "Processing of the Certificate handshake message failed" \
7951 -c "Ciphersuite is"
7952
7953requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007954requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007955run_test "keyUsage cli 1.3: DigitalSignature+KeyEncipherment, RSA: OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01007956 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server2.key \
7957 -cert $DATA_FILES_PATH/server2-sha256.ku-ds_ke.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02007958 "$P_CLI debug_level=3" \
7959 0 \
7960 -C "bad certificate (usage extensions)" \
7961 -C "Processing of the Certificate handshake message failed" \
7962 -c "Ciphersuite is"
7963
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007964requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007965requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02007966run_test "keyUsage cli 1.3: KeyEncipherment, RSA: fail (hard)" \
David Horstmann184c4f02024-07-01 17:01:28 +01007967 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server2.key \
7968 -cert $DATA_FILES_PATH/server2-sha256.ku-ke.crt" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02007969 "$P_CLI debug_level=3" \
Ronald Crond28f5a92022-06-16 19:27:25 +02007970 1 \
7971 -c "bad certificate (usage extensions)" \
7972 -c "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02007973 -C "Ciphersuite is" \
7974 -c "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02007975 -c "! Usage does not match the keyUsage extension"
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007976 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Ronald Crond28f5a92022-06-16 19:27:25 +02007977
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007978requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007979requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02007980run_test "keyUsage cli 1.3: KeyAgreement, RSA: fail (hard)" \
David Horstmann184c4f02024-07-01 17:01:28 +01007981 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server2.key \
7982 -cert $DATA_FILES_PATH/server2-sha256.ku-ka.crt" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02007983 "$P_CLI debug_level=3" \
Ronald Crond28f5a92022-06-16 19:27:25 +02007984 1 \
7985 -c "bad certificate (usage extensions)" \
7986 -c "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02007987 -C "Ciphersuite is" \
7988 -c "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02007989 -c "! Usage does not match the keyUsage extension"
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02007990 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Ronald Crond28f5a92022-06-16 19:27:25 +02007991
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007992requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02007993requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007994run_test "keyUsage cli 1.3: DigitalSignature, ECDSA: OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01007995 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server5.key \
7996 -cert $DATA_FILES_PATH/server5.ku-ds.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02007997 "$P_CLI debug_level=3" \
7998 0 \
7999 -C "bad certificate (usage extensions)" \
8000 -C "Processing of the Certificate handshake message failed" \
8001 -c "Ciphersuite is"
8002
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008003requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008004requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02008005run_test "keyUsage cli 1.3: KeyEncipherment, ECDSA: fail (hard)" \
David Horstmann184c4f02024-07-01 17:01:28 +01008006 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server5.key \
8007 -cert $DATA_FILES_PATH/server5.ku-ke.crt" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008008 "$P_CLI debug_level=3" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008009 1 \
8010 -c "bad certificate (usage extensions)" \
8011 -c "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008012 -C "Ciphersuite is" \
8013 -c "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02008014 -c "! Usage does not match the keyUsage extension"
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008015 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Ronald Crond28f5a92022-06-16 19:27:25 +02008016
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008017requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008018requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02008019run_test "keyUsage cli 1.3: KeyAgreement, ECDSA: fail (hard)" \
David Horstmann184c4f02024-07-01 17:01:28 +01008020 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server5.key \
8021 -cert $DATA_FILES_PATH/server5.ku-ka.crt" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008022 "$P_CLI debug_level=3" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008023 1 \
8024 -c "bad certificate (usage extensions)" \
8025 -c "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008026 -C "Ciphersuite is" \
8027 -c "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02008028 -c "! Usage does not match the keyUsage extension"
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008029 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Ronald Crond28f5a92022-06-16 19:27:25 +02008030
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008031# Tests for keyUsage in leaf certificates, part 3:
8032# server-side checking of client cert
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008033#
8034# Here, both 1.2 and 1.3 only use signatures.
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008035
Jerry Yuab082902021-12-23 18:02:22 +08008036requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008037run_test "keyUsage cli-auth 1.2: RSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008038 "$P_SRV debug_level=1 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008039 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server2.key \
8040 -cert $DATA_FILES_PATH/server2.ku-ds.crt" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008041 0 \
Ronald Cronf9c13fe2022-06-22 14:35:17 +02008042 -s "Verifying peer X.509 certificate... ok" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008043 -S "bad certificate (usage extensions)" \
8044 -S "Processing of the Certificate handshake message failed"
8045
Jerry Yuab082902021-12-23 18:02:22 +08008046requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02008047run_test "keyUsage cli-auth 1.2: RSA, DigitalSignature+KeyEncipherment: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008048 "$P_SRV debug_level=1 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008049 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server2.key \
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02008050 -cert $DATA_FILES_PATH/server2.ku-ds_ke.crt" \
8051 0 \
8052 -s "Verifying peer X.509 certificate... ok" \
8053 -S "bad certificate (usage extensions)" \
8054 -S "Processing of the Certificate handshake message failed"
8055
8056requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008057run_test "keyUsage cli-auth 1.2: RSA, KeyEncipherment: fail (soft)" \
8058 "$P_SRV debug_level=3 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008059 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server2.key \
8060 -cert $DATA_FILES_PATH/server2.ku-ke.crt" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008061 0 \
8062 -s "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008063 -S "send alert level=2 message=43" \
8064 -s "! Usage does not match the keyUsage extension" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008065 -S "Processing of the Certificate handshake message failed"
8066
Jerry Yuab082902021-12-23 18:02:22 +08008067requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008068run_test "keyUsage cli-auth 1.2: RSA, KeyEncipherment: fail (hard)" \
8069 "$P_SRV debug_level=3 force_version=tls12 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01008070 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server2.key \
8071 -cert $DATA_FILES_PATH/server2.ku-ke.crt" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008072 1 \
8073 -s "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008074 -s "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02008075 -s "! Usage does not match the keyUsage extension" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008076 -s "Processing of the Certificate handshake message failed"
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008077 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008078
Jerry Yuab082902021-12-23 18:02:22 +08008079requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008080run_test "keyUsage cli-auth 1.2: ECDSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008081 "$P_SRV debug_level=1 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008082 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server5.key \
8083 -cert $DATA_FILES_PATH/server5.ku-ds.crt" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008084 0 \
Ronald Cronf9c13fe2022-06-22 14:35:17 +02008085 -s "Verifying peer X.509 certificate... ok" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008086 -S "bad certificate (usage extensions)" \
8087 -S "Processing of the Certificate handshake message failed"
8088
Jerry Yuab082902021-12-23 18:02:22 +08008089requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008090run_test "keyUsage cli-auth 1.2: ECDSA, KeyAgreement: fail (soft)" \
8091 "$P_SRV debug_level=3 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008092 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server5.key \
8093 -cert $DATA_FILES_PATH/server5.ku-ka.crt" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008094 0 \
8095 -s "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008096 -S "send alert level=2 message=43" \
8097 -s "! Usage does not match the keyUsage extension" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02008098 -S "Processing of the Certificate handshake message failed"
8099
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008100requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
8101run_test "keyUsage cli-auth 1.2: ECDSA, KeyAgreement: fail (hard)" \
8102 "$P_SRV debug_level=3 auth_mode=required" \
8103 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server5.key \
8104 -cert $DATA_FILES_PATH/server5.ku-ka.crt" \
8105 1 \
8106 -s "bad certificate (usage extensions)" \
8107 -s "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02008108 -s "! Usage does not match the keyUsage extension" \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008109 -s "Processing of the Certificate handshake message failed"
8110 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
8111
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008112requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008113requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008114run_test "keyUsage cli-auth 1.3: RSA, DigitalSignature: OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02008115 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008116 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server2.key \
8117 -cert $DATA_FILES_PATH/server2-sha256.ku-ds.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008118 0 \
Ronald Cronf9c13fe2022-06-22 14:35:17 +02008119 -s "Verifying peer X.509 certificate... ok" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008120 -S "bad certificate (usage extensions)" \
8121 -S "Processing of the Certificate handshake message failed"
8122
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008123requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008124requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard19d6d342024-08-08 12:19:46 +02008125run_test "keyUsage cli-auth 1.3: RSA, DigitalSignature+KeyEncipherment: OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02008126 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008127 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server2.key \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008128 -cert $DATA_FILES_PATH/server2-sha256.ku-ds_ke.crt" \
8129 0 \
8130 -s "Verifying peer X.509 certificate... ok" \
8131 -S "bad certificate (usage extensions)" \
8132 -S "Processing of the Certificate handshake message failed"
8133
8134requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008135requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008136run_test "keyUsage cli-auth 1.3: RSA, KeyEncipherment: fail (soft)" \
8137 "$P_SRV debug_level=3 force_version=tls13 auth_mode=optional" \
8138 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server2.key \
David Horstmann184c4f02024-07-01 17:01:28 +01008139 -cert $DATA_FILES_PATH/server2-sha256.ku-ke.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008140 0 \
8141 -s "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008142 -S "send alert level=2 message=43" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008143 -s "! Usage does not match the keyUsage extension" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008144 -S "Processing of the Certificate handshake message failed"
8145
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008146requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008147requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008148run_test "keyUsage cli-auth 1.3: RSA, KeyEncipherment: fail (hard)" \
8149 "$P_SRV debug_level=3 force_version=tls13 auth_mode=required" \
Manuel Pégourié-Gonnardaeda1fd2024-08-12 09:50:18 +02008150 "$P_CLI key_file=$DATA_FILES_PATH/server2.key \
8151 crt_file=$DATA_FILES_PATH/server2-sha256.ku-ke.crt" \
8152 1 \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008153 -s "bad certificate (usage extensions)" \
8154 -s "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008155 -s "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02008156 -s "! Usage does not match the keyUsage extension" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008157 -s "! mbedtls_ssl_handshake returned"
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008158 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Ronald Crond28f5a92022-06-16 19:27:25 +02008159
Ronald Crond28f5a92022-06-16 19:27:25 +02008160requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008161requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008162run_test "keyUsage cli-auth 1.3: ECDSA, DigitalSignature: OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02008163 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008164 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server5.key \
8165 -cert $DATA_FILES_PATH/server5.ku-ds.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008166 0 \
Ronald Cronf9c13fe2022-06-22 14:35:17 +02008167 -s "Verifying peer X.509 certificate... ok" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008168 -S "bad certificate (usage extensions)" \
8169 -S "Processing of the Certificate handshake message failed"
8170
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008171requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008172requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008173run_test "keyUsage cli-auth 1.3: ECDSA, KeyAgreement: fail (soft)" \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008174 "$P_SRV debug_level=3 force_version=tls13 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008175 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server5.key \
8176 -cert $DATA_FILES_PATH/server5.ku-ka.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008177 0 \
8178 -s "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008179 -s "! Usage does not match the keyUsage extension" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008180 -S "Processing of the Certificate handshake message failed"
8181
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008182requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008183requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008184run_test "keyUsage cli-auth 1.3: ECDSA, KeyAgreement: fail (hard)" \
8185 "$P_SRV debug_level=3 force_version=tls13 auth_mode=required" \
Manuel Pégourié-Gonnardaeda1fd2024-08-12 09:50:18 +02008186 "$P_CLI key_file=$DATA_FILES_PATH/server5.key \
8187 crt_file=$DATA_FILES_PATH/server5.ku-ka.crt" \
8188 1 \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008189 -s "bad certificate (usage extensions)" \
8190 -s "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard4956e322024-08-08 10:28:56 +02008191 -s "send alert level=2 message=43" \
Manuel Pégourié-Gonnard92a391e2024-08-08 10:56:41 +02008192 -s "! Usage does not match the keyUsage extension" \
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008193 -s "! mbedtls_ssl_handshake returned"
Manuel Pégourié-Gonnard5a4c8f02024-08-06 12:14:04 +02008194 # MBEDTLS_X509_BADCERT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01008195
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008196# Tests for extendedKeyUsage, part 1: server-side certificate/suite selection
8197
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02008198run_test "extKeyUsage srv: serverAuth -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008199 "$P_SRV key_file=$DATA_FILES_PATH/server5.key \
8200 crt_file=$DATA_FILES_PATH/server5.eku-srv.crt" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008201 "$P_CLI" \
8202 0
8203
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02008204run_test "extKeyUsage srv: serverAuth,clientAuth -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008205 "$P_SRV key_file=$DATA_FILES_PATH/server5.key \
8206 crt_file=$DATA_FILES_PATH/server5.eku-srv.crt" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008207 "$P_CLI" \
8208 0
8209
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02008210run_test "extKeyUsage srv: codeSign,anyEKU -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008211 "$P_SRV key_file=$DATA_FILES_PATH/server5.key \
8212 crt_file=$DATA_FILES_PATH/server5.eku-cs_any.crt" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008213 "$P_CLI" \
8214 0
8215
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02008216run_test "extKeyUsage srv: codeSign -> fail" \
David Horstmann184c4f02024-07-01 17:01:28 +01008217 "$P_SRV key_file=$DATA_FILES_PATH/server5.key \
8218 crt_file=$DATA_FILES_PATH/server5.eku-cli.crt" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02008219 "$P_CLI" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008220 1
8221
8222# Tests for extendedKeyUsage, part 2: client-side checking of server cert
8223
Jerry Yuab082902021-12-23 18:02:22 +08008224requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008225run_test "extKeyUsage cli 1.2: serverAuth -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008226 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server5.key \
8227 -cert $DATA_FILES_PATH/server5.eku-srv.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008228 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008229 0 \
8230 -C "bad certificate (usage extensions)" \
8231 -C "Processing of the Certificate handshake message failed" \
8232 -c "Ciphersuite is TLS-"
8233
Jerry Yuab082902021-12-23 18:02:22 +08008234requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008235run_test "extKeyUsage cli 1.2: serverAuth,clientAuth -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008236 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server5.key \
8237 -cert $DATA_FILES_PATH/server5.eku-srv_cli.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008238 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008239 0 \
8240 -C "bad certificate (usage extensions)" \
8241 -C "Processing of the Certificate handshake message failed" \
8242 -c "Ciphersuite is TLS-"
8243
Jerry Yuab082902021-12-23 18:02:22 +08008244requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008245run_test "extKeyUsage cli 1.2: codeSign,anyEKU -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008246 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server5.key \
8247 -cert $DATA_FILES_PATH/server5.eku-cs_any.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008248 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008249 0 \
8250 -C "bad certificate (usage extensions)" \
8251 -C "Processing of the Certificate handshake message failed" \
8252 -c "Ciphersuite is TLS-"
8253
Jerry Yuab082902021-12-23 18:02:22 +08008254requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaitef48bfb02024-08-16 17:18:28 +01008255run_test "extKeyUsage cli 1.2: codeSign -> fail (soft)" \
David Horstmann184c4f02024-07-01 17:01:28 +01008256 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server5.key \
8257 -cert $DATA_FILES_PATH/server5.eku-cs.crt" \
Elena Uziunaitef48bfb02024-08-16 17:18:28 +01008258 "$P_CLI debug_level=3 auth_mode=optional" \
8259 0 \
8260 -c "bad certificate (usage extensions)" \
8261 -C "Processing of the Certificate handshake message failed" \
8262 -c "Ciphersuite is TLS-" \
8263 -C "send alert level=2 message=43" \
8264 -c "! Usage does not match the extendedKeyUsage extension"
8265 # MBEDTLS_X509_BADCERT_EXT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
8266
8267requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008268run_test "extKeyUsage cli 1.2: codeSign -> fail (hard)" \
David Horstmanndcf18dd2024-06-11 17:44:00 +01008269 "$O_SRV -tls1_2 -key $DATA_FILES_PATH/server5.key \
8270 -cert $DATA_FILES_PATH/server5.eku-cs.crt" \
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008271 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008272 1 \
8273 -c "bad certificate (usage extensions)" \
8274 -c "Processing of the Certificate handshake message failed" \
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008275 -C "Ciphersuite is TLS-" \
8276 -c "send alert level=2 message=43" \
8277 -c "! Usage does not match the extendedKeyUsage extension"
8278 # MBEDTLS_X509_BADCERT_EXT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008279
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008280requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008281requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008282run_test "extKeyUsage cli 1.3: serverAuth -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008283 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server5.key \
8284 -cert $DATA_FILES_PATH/server5.eku-srv.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008285 "$P_CLI debug_level=1" \
8286 0 \
8287 -C "bad certificate (usage extensions)" \
8288 -C "Processing of the Certificate handshake message failed" \
8289 -c "Ciphersuite is"
8290
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008291requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008292requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008293run_test "extKeyUsage cli 1.3: serverAuth,clientAuth -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008294 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server5.key \
8295 -cert $DATA_FILES_PATH/server5.eku-srv_cli.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008296 "$P_CLI debug_level=1" \
8297 0 \
8298 -C "bad certificate (usage extensions)" \
8299 -C "Processing of the Certificate handshake message failed" \
8300 -c "Ciphersuite is"
8301
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008302requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008303requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008304run_test "extKeyUsage cli 1.3: codeSign,anyEKU -> OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008305 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server5.key \
8306 -cert $DATA_FILES_PATH/server5.eku-cs_any.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008307 "$P_CLI debug_level=1" \
8308 0 \
8309 -C "bad certificate (usage extensions)" \
8310 -C "Processing of the Certificate handshake message failed" \
8311 -c "Ciphersuite is"
8312
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008313requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008314requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008315run_test "extKeyUsage cli 1.3: codeSign -> fail (hard)" \
David Horstmann184c4f02024-07-01 17:01:28 +01008316 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key $DATA_FILES_PATH/server5.key \
8317 -cert $DATA_FILES_PATH/server5.eku-cs.crt" \
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008318 "$P_CLI debug_level=3" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008319 1 \
8320 -c "bad certificate (usage extensions)" \
8321 -c "Processing of the Certificate handshake message failed" \
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008322 -C "Ciphersuite is" \
8323 -c "send alert level=2 message=43" \
8324 -c "! Usage does not match the extendedKeyUsage extension"
8325 # MBEDTLS_X509_BADCERT_EXT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Ronald Crond28f5a92022-06-16 19:27:25 +02008326
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008327# Tests for extendedKeyUsage, part 3: server-side checking of client cert
8328
Jerry Yuab082902021-12-23 18:02:22 +08008329requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008330run_test "extKeyUsage cli-auth 1.2: clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008331 "$P_SRV debug_level=1 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008332 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server5.key \
8333 -cert $DATA_FILES_PATH/server5.eku-cli.crt" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008334 0 \
8335 -S "bad certificate (usage extensions)" \
8336 -S "Processing of the Certificate handshake message failed"
8337
Jerry Yuab082902021-12-23 18:02:22 +08008338requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008339run_test "extKeyUsage cli-auth 1.2: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008340 "$P_SRV debug_level=1 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008341 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server5.key \
8342 -cert $DATA_FILES_PATH/server5.eku-srv_cli.crt" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008343 0 \
8344 -S "bad certificate (usage extensions)" \
8345 -S "Processing of the Certificate handshake message failed"
8346
Jerry Yuab082902021-12-23 18:02:22 +08008347requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008348run_test "extKeyUsage cli-auth 1.2: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02008349 "$P_SRV debug_level=1 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008350 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server5.key \
8351 -cert $DATA_FILES_PATH/server5.eku-cs_any.crt" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008352 0 \
8353 -S "bad certificate (usage extensions)" \
8354 -S "Processing of the Certificate handshake message failed"
8355
Jerry Yuab082902021-12-23 18:02:22 +08008356requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008357run_test "extKeyUsage cli-auth 1.2: codeSign -> fail (soft)" \
8358 "$P_SRV debug_level=3 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008359 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server5.key \
8360 -cert $DATA_FILES_PATH/server5.eku-cs.crt" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008361 0 \
8362 -s "bad certificate (usage extensions)" \
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008363 -S "send alert level=2 message=43" \
8364 -s "! Usage does not match the extendedKeyUsage extension" \
8365 -S "Processing of the Certificate handshake message failed" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008366
Jerry Yuab082902021-12-23 18:02:22 +08008367requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008368run_test "extKeyUsage cli-auth 1.2: codeSign -> fail (hard)" \
8369 "$P_SRV debug_level=3 auth_mode=required" \
David Horstmann184c4f02024-07-01 17:01:28 +01008370 "$O_CLI -tls1_2 -key $DATA_FILES_PATH/server5.key \
8371 -cert $DATA_FILES_PATH/server5.eku-cs.crt" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008372 1 \
8373 -s "bad certificate (usage extensions)" \
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008374 -s "send alert level=2 message=43" \
8375 -s "! Usage does not match the extendedKeyUsage extension" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008376 -s "Processing of the Certificate handshake message failed"
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008377 # MBEDTLS_X509_BADCERT_EXT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02008378
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008379requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008380requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008381run_test "extKeyUsage cli-auth 1.3: clientAuth -> OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02008382 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008383 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server5.key \
8384 -cert $DATA_FILES_PATH/server5.eku-cli.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008385 0 \
8386 -S "bad certificate (usage extensions)" \
8387 -S "Processing of the Certificate handshake message failed"
8388
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008389requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008390requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008391run_test "extKeyUsage cli-auth 1.3: serverAuth,clientAuth -> OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02008392 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008393 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server5.key \
8394 -cert $DATA_FILES_PATH/server5.eku-srv_cli.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008395 0 \
8396 -S "bad certificate (usage extensions)" \
8397 -S "Processing of the Certificate handshake message failed"
8398
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008399requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008400requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008401run_test "extKeyUsage cli-auth 1.3: codeSign,anyEKU -> OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02008402 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008403 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server5.key \
8404 -cert $DATA_FILES_PATH/server5.eku-cs_any.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008405 0 \
8406 -S "bad certificate (usage extensions)" \
8407 -S "Processing of the Certificate handshake message failed"
8408
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02008409requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008410requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02008411run_test "extKeyUsage cli-auth 1.3: codeSign -> fail (soft)" \
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008412 "$P_SRV debug_level=3 force_version=tls13 auth_mode=optional" \
David Horstmann184c4f02024-07-01 17:01:28 +01008413 "$O_NEXT_CLI_NO_CERT -key $DATA_FILES_PATH/server5.key \
8414 -cert $DATA_FILES_PATH/server5.eku-cs.crt" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008415 0 \
8416 -s "bad certificate (usage extensions)" \
Elena Uziunaite6a04b162024-08-15 15:24:09 +01008417 -S "send alert level=2 message=43" \
8418 -s "! Usage does not match the extendedKeyUsage extension" \
Ronald Crond28f5a92022-06-16 19:27:25 +02008419 -S "Processing of the Certificate handshake message failed"
8420
Elena Uziunaitef48bfb02024-08-16 17:18:28 +01008421requires_openssl_tls1_3_with_compatible_ephemeral
Gilles Peskine7b02c1f2024-09-13 14:15:46 +02008422requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Elena Uziunaitef48bfb02024-08-16 17:18:28 +01008423run_test "extKeyUsage cli-auth 1.3: codeSign -> fail (hard)" \
8424 "$P_SRV debug_level=3 force_version=tls13 auth_mode=required" \
8425 "$P_CLI key_file=$DATA_FILES_PATH/server5.key \
8426 crt_file=$DATA_FILES_PATH/server5.eku-cs.crt" \
8427 1 \
8428 -s "bad certificate (usage extensions)" \
8429 -s "send alert level=2 message=43" \
8430 -s "! Usage does not match the extendedKeyUsage extension" \
8431 -s "Processing of the Certificate handshake message failed"
8432 # MBEDTLS_X509_BADCERT_EXT_KEY_USAGE -> MBEDTLS_SSL_ALERT_MSG_UNSUPPORTED_CERT
8433
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02008434# Tests for DHM parameters loading
8435
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02008436run_test "DHM parameters: reference" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02008437 "$P_SRV" \
8438 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8439 debug_level=3" \
8440 0 \
8441 -c "value of 'DHM: P ' (2048 bits)" \
Hanno Becker13be9902017-09-27 17:17:30 +01008442 -c "value of 'DHM: G ' (2 bits)"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02008443
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02008444run_test "DHM parameters: other parameters" \
David Horstmann184c4f02024-07-01 17:01:28 +01008445 "$P_SRV dhm_file=$DATA_FILES_PATH/dhparams.pem" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02008446 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8447 debug_level=3" \
8448 0 \
8449 -c "value of 'DHM: P ' (1024 bits)" \
8450 -c "value of 'DHM: G ' (2 bits)"
8451
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02008452# Tests for DHM client-side size checking
8453
8454run_test "DHM size: server default, client default, OK" \
8455 "$P_SRV" \
8456 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8457 debug_level=1" \
8458 0 \
8459 -C "DHM prime too short:"
8460
8461run_test "DHM size: server default, client 2048, OK" \
8462 "$P_SRV" \
8463 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8464 debug_level=1 dhmlen=2048" \
8465 0 \
8466 -C "DHM prime too short:"
8467
8468run_test "DHM size: server 1024, client default, OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008469 "$P_SRV dhm_file=$DATA_FILES_PATH/dhparams.pem" \
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02008470 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8471 debug_level=1" \
8472 0 \
8473 -C "DHM prime too short:"
8474
Gilles Peskinec6b0d962020-12-08 22:31:52 +01008475run_test "DHM size: server 999, client 999, OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008476 "$P_SRV dhm_file=$DATA_FILES_PATH/dh.999.pem" \
Gilles Peskinec6b0d962020-12-08 22:31:52 +01008477 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8478 debug_level=1 dhmlen=999" \
8479 0 \
8480 -C "DHM prime too short:"
8481
8482run_test "DHM size: server 1000, client 1000, OK" \
David Horstmann184c4f02024-07-01 17:01:28 +01008483 "$P_SRV dhm_file=$DATA_FILES_PATH/dh.1000.pem" \
Gilles Peskinec6b0d962020-12-08 22:31:52 +01008484 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8485 debug_level=1 dhmlen=1000" \
8486 0 \
8487 -C "DHM prime too short:"
8488
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02008489run_test "DHM size: server 1000, client default, rejected" \
David Horstmann184c4f02024-07-01 17:01:28 +01008490 "$P_SRV dhm_file=$DATA_FILES_PATH/dh.1000.pem" \
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02008491 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8492 debug_level=1" \
8493 1 \
8494 -c "DHM prime too short:"
8495
Gilles Peskinec6b0d962020-12-08 22:31:52 +01008496run_test "DHM size: server 1000, client 1001, rejected" \
David Horstmann184c4f02024-07-01 17:01:28 +01008497 "$P_SRV dhm_file=$DATA_FILES_PATH/dh.1000.pem" \
Gilles Peskinec6b0d962020-12-08 22:31:52 +01008498 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8499 debug_level=1 dhmlen=1001" \
8500 1 \
8501 -c "DHM prime too short:"
8502
8503run_test "DHM size: server 999, client 1000, rejected" \
David Horstmann184c4f02024-07-01 17:01:28 +01008504 "$P_SRV dhm_file=$DATA_FILES_PATH/dh.999.pem" \
Gilles Peskinec6b0d962020-12-08 22:31:52 +01008505 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8506 debug_level=1 dhmlen=1000" \
8507 1 \
8508 -c "DHM prime too short:"
8509
8510run_test "DHM size: server 998, client 999, rejected" \
David Horstmann184c4f02024-07-01 17:01:28 +01008511 "$P_SRV dhm_file=$DATA_FILES_PATH/dh.998.pem" \
Gilles Peskinec6b0d962020-12-08 22:31:52 +01008512 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8513 debug_level=1 dhmlen=999" \
8514 1 \
8515 -c "DHM prime too short:"
8516
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02008517run_test "DHM size: server default, client 2049, rejected" \
8518 "$P_SRV" \
8519 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
8520 debug_level=1 dhmlen=2049" \
8521 1 \
8522 -c "DHM prime too short:"
8523
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02008524# Tests for PSK callback
8525
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02008526run_test "PSK callback: psk, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008527 "$P_SRV psk=73776f726466697368 psk_identity=foo" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02008528 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008529 psk_identity=foo psk=73776f726466697368" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02008530 0 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008531 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02008532 -S "SSL - Unknown identity received" \
8533 -S "SSL - Verification of the message MAC failed"
8534
Hanno Beckerf7027512018-10-23 15:27:39 +01008535run_test "PSK callback: opaque psk on client, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008536 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008537 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008538 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01008539 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008540 -C "session hash for extended master secret"\
8541 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008542 -S "SSL - The handshake negotiation failed" \
Hanno Beckerf7027512018-10-23 15:27:39 +01008543 -S "SSL - Unknown identity received" \
8544 -S "SSL - Verification of the message MAC failed"
8545
Hanno Beckerf7027512018-10-23 15:27:39 +01008546run_test "PSK callback: opaque psk on client, no callback, SHA-384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008547 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008548 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008549 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01008550 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008551 -C "session hash for extended master secret"\
8552 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008553 -S "SSL - The handshake negotiation failed" \
Hanno Beckerf7027512018-10-23 15:27:39 +01008554 -S "SSL - Unknown identity received" \
8555 -S "SSL - Verification of the message MAC failed"
8556
Hanno Beckerf7027512018-10-23 15:27:39 +01008557run_test "PSK callback: opaque psk on client, no callback, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008558 "$P_SRV extended_ms=1 debug_level=3 psk=73776f726466697368 psk_identity=foo" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008559 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008560 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01008561 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008562 -c "session hash for extended master secret"\
8563 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008564 -S "SSL - The handshake negotiation failed" \
Hanno Beckerf7027512018-10-23 15:27:39 +01008565 -S "SSL - Unknown identity received" \
8566 -S "SSL - Verification of the message MAC failed"
8567
Hanno Beckerf7027512018-10-23 15:27:39 +01008568run_test "PSK callback: opaque psk on client, no callback, SHA-384, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008569 "$P_SRV extended_ms=1 debug_level=3 psk=73776f726466697368 psk_identity=foo" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008570 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008571 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01008572 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008573 -c "session hash for extended master secret"\
8574 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008575 -S "SSL - The handshake negotiation failed" \
Hanno Beckerf7027512018-10-23 15:27:39 +01008576 -S "SSL - Unknown identity received" \
8577 -S "SSL - Verification of the message MAC failed"
8578
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008579run_test "PSK callback: opaque rsa-psk on client, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008580 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008581 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008582 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008583 0 \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008584 -C "session hash for extended master secret"\
8585 -S "session hash for extended master secret"\
8586 -S "SSL - The handshake negotiation failed" \
8587 -S "SSL - Unknown identity received" \
8588 -S "SSL - Verification of the message MAC failed"
8589
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008590run_test "PSK callback: opaque rsa-psk on client, no callback, SHA-384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008591 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008592 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008593 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008594 0 \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008595 -C "session hash for extended master secret"\
8596 -S "session hash for extended master secret"\
8597 -S "SSL - The handshake negotiation failed" \
8598 -S "SSL - Unknown identity received" \
8599 -S "SSL - Verification of the message MAC failed"
8600
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008601run_test "PSK callback: opaque rsa-psk on client, no callback, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008602 "$P_SRV extended_ms=1 debug_level=3 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008603 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008604 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008605 0 \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008606 -c "session hash for extended master secret"\
8607 -s "session hash for extended master secret"\
8608 -S "SSL - The handshake negotiation failed" \
8609 -S "SSL - Unknown identity received" \
8610 -S "SSL - Verification of the message MAC failed"
8611
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008612run_test "PSK callback: opaque rsa-psk on client, no callback, SHA-384, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008613 "$P_SRV extended_ms=1 debug_level=3 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008614 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008615 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008616 0 \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02008617 -c "session hash for extended master secret"\
8618 -s "session hash for extended master secret"\
8619 -S "SSL - The handshake negotiation failed" \
8620 -S "SSL - Unknown identity received" \
8621 -S "SSL - Verification of the message MAC failed"
8622
Przemek Stekielb6a05032022-04-14 10:22:18 +02008623run_test "PSK callback: opaque ecdhe-psk on client, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008624 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008625 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008626 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008627 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008628 -C "session hash for extended master secret"\
8629 -S "session hash for extended master secret"\
8630 -S "SSL - The handshake negotiation failed" \
8631 -S "SSL - Unknown identity received" \
8632 -S "SSL - Verification of the message MAC failed"
8633
Przemek Stekielb6a05032022-04-14 10:22:18 +02008634run_test "PSK callback: opaque ecdhe-psk on client, no callback, SHA-384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008635 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008636 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008637 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008638 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008639 -C "session hash for extended master secret"\
8640 -S "session hash for extended master secret"\
8641 -S "SSL - The handshake negotiation failed" \
8642 -S "SSL - Unknown identity received" \
8643 -S "SSL - Verification of the message MAC failed"
8644
Przemek Stekielb6a05032022-04-14 10:22:18 +02008645run_test "PSK callback: opaque ecdhe-psk on client, no callback, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008646 "$P_SRV extended_ms=1 debug_level=3 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008647 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008648 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008649 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008650 -c "session hash for extended master secret"\
8651 -s "session hash for extended master secret"\
8652 -S "SSL - The handshake negotiation failed" \
8653 -S "SSL - Unknown identity received" \
8654 -S "SSL - Verification of the message MAC failed"
8655
Przemek Stekielb6a05032022-04-14 10:22:18 +02008656run_test "PSK callback: opaque ecdhe-psk on client, no callback, SHA-384, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008657 "$P_SRV extended_ms=1 debug_level=3 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008658 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008659 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008660 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008661 -c "session hash for extended master secret"\
8662 -s "session hash for extended master secret"\
8663 -S "SSL - The handshake negotiation failed" \
8664 -S "SSL - Unknown identity received" \
8665 -S "SSL - Verification of the message MAC failed"
8666
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008667run_test "PSK callback: opaque dhe-psk on client, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008668 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008669 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA256 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008670 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008671 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008672 -C "session hash for extended master secret"\
8673 -S "session hash for extended master secret"\
8674 -S "SSL - The handshake negotiation failed" \
8675 -S "SSL - Unknown identity received" \
8676 -S "SSL - Verification of the message MAC failed"
8677
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008678run_test "PSK callback: opaque dhe-psk on client, no callback, SHA-384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008679 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008680 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008681 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008682 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008683 -C "session hash for extended master secret"\
8684 -S "session hash for extended master secret"\
8685 -S "SSL - The handshake negotiation failed" \
8686 -S "SSL - Unknown identity received" \
8687 -S "SSL - Verification of the message MAC failed"
8688
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008689run_test "PSK callback: opaque dhe-psk on client, no callback, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008690 "$P_SRV extended_ms=1 debug_level=3 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008691 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008692 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008693 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008694 -c "session hash for extended master secret"\
8695 -s "session hash for extended master secret"\
8696 -S "SSL - The handshake negotiation failed" \
8697 -S "SSL - Unknown identity received" \
8698 -S "SSL - Verification of the message MAC failed"
8699
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008700run_test "PSK callback: opaque dhe-psk on client, no callback, SHA-384, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008701 "$P_SRV extended_ms=1 debug_level=3 psk=73776f726466697368 psk_identity=foo" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008702 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008703 psk_identity=foo psk=73776f726466697368 psk_opaque=1" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008704 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008705 -c "session hash for extended master secret"\
8706 -s "session hash for extended master secret"\
8707 -S "SSL - The handshake negotiation failed" \
8708 -S "SSL - Unknown identity received" \
8709 -S "SSL - Verification of the message MAC failed"
Przemek Stekielb6a05032022-04-14 10:22:18 +02008710
Hanno Becker28c79dc2018-10-26 13:15:08 +01008711run_test "PSK callback: raw psk on client, static opaque on server, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008712 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008713 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008714 psk_identity=foo psk=73776f726466697368" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008715 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008716 -C "session hash for extended master secret"\
8717 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008718 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008719 -S "SSL - Unknown identity received" \
8720 -S "SSL - Verification of the message MAC failed"
8721
Hanno Becker28c79dc2018-10-26 13:15:08 +01008722run_test "PSK callback: raw psk on client, static opaque on server, no callback, SHA-384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008723 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008724 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008725 psk_identity=foo psk=73776f726466697368" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008726 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008727 -C "session hash for extended master secret"\
8728 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008729 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008730 -S "SSL - Unknown identity received" \
8731 -S "SSL - Verification of the message MAC failed"
8732
Hanno Becker28c79dc2018-10-26 13:15:08 +01008733run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008734 "$P_SRV debug_level=3 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008735 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008736 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008737 psk_identity=foo psk=73776f726466697368 extended_ms=1" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008738 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008739 -c "session hash for extended master secret"\
8740 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008741 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008742 -S "SSL - Unknown identity received" \
8743 -S "SSL - Verification of the message MAC failed"
8744
Hanno Becker28c79dc2018-10-26 13:15:08 +01008745run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS, SHA384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008746 "$P_SRV debug_level=3 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008747 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008748 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008749 psk_identity=foo psk=73776f726466697368 extended_ms=1" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008750 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008751 -c "session hash for extended master secret"\
8752 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008753 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008754 -S "SSL - Unknown identity received" \
8755 -S "SSL - Verification of the message MAC failed"
8756
Przemek Stekielb270b562022-04-06 13:12:48 +02008757run_test "PSK callback: raw rsa-psk on client, static opaque on server, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008758 "$P_SRV extended_ms=0 debug_level=5 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA" \
Przemek Stekielb270b562022-04-06 13:12:48 +02008759 "$P_CLI extended_ms=0 debug_level=5 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008760 psk_identity=foo psk=73776f726466697368" \
Przemek Stekielb270b562022-04-06 13:12:48 +02008761 0 \
Przemek Stekielb270b562022-04-06 13:12:48 +02008762 -C "session hash for extended master secret"\
8763 -S "session hash for extended master secret"\
8764 -S "SSL - The handshake negotiation failed" \
8765 -S "SSL - Unknown identity received" \
8766 -S "SSL - Verification of the message MAC failed"
8767
Przemek Stekielb270b562022-04-06 13:12:48 +02008768run_test "PSK callback: raw rsa-psk on client, static opaque on server, no callback, SHA-384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008769 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384" \
Przemek Stekielb270b562022-04-06 13:12:48 +02008770 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008771 psk_identity=foo psk=73776f726466697368" \
Przemek Stekielb270b562022-04-06 13:12:48 +02008772 0 \
Przemek Stekielb270b562022-04-06 13:12:48 +02008773 -C "session hash for extended master secret"\
8774 -S "session hash for extended master secret"\
8775 -S "SSL - The handshake negotiation failed" \
8776 -S "SSL - Unknown identity received" \
8777 -S "SSL - Verification of the message MAC failed"
8778
Przemek Stekielb270b562022-04-06 13:12:48 +02008779run_test "PSK callback: raw rsa-psk on client, static opaque on server, no callback, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008780 "$P_SRV debug_level=3 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 \
Przemek Stekielb270b562022-04-06 13:12:48 +02008781 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
8782 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008783 psk_identity=foo psk=73776f726466697368 extended_ms=1" \
Przemek Stekielb270b562022-04-06 13:12:48 +02008784 0 \
8785 -c "session hash for extended master secret"\
8786 -s "session hash for extended master secret"\
Przemek Stekielb270b562022-04-06 13:12:48 +02008787 -S "SSL - The handshake negotiation failed" \
8788 -S "SSL - Unknown identity received" \
8789 -S "SSL - Verification of the message MAC failed"
8790
Przemek Stekielb270b562022-04-06 13:12:48 +02008791run_test "PSK callback: raw rsa-psk on client, static opaque on server, no callback, EMS, SHA384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008792 "$P_SRV debug_level=3 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 \
Przemek Stekielb270b562022-04-06 13:12:48 +02008793 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
8794 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008795 psk_identity=foo psk=73776f726466697368 extended_ms=1" \
Przemek Stekielb270b562022-04-06 13:12:48 +02008796 0 \
8797 -c "session hash for extended master secret"\
8798 -s "session hash for extended master secret"\
Przemek Stekielb270b562022-04-06 13:12:48 +02008799 -S "SSL - The handshake negotiation failed" \
8800 -S "SSL - Unknown identity received" \
8801 -S "SSL - Verification of the message MAC failed"
8802
Przemek Stekielb6a05032022-04-14 10:22:18 +02008803run_test "PSK callback: raw ecdhe-psk on client, static opaque on server, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008804 "$P_SRV extended_ms=0 debug_level=5 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008805 "$P_CLI extended_ms=0 debug_level=5 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008806 psk_identity=foo psk=73776f726466697368" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008807 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008808 -C "session hash for extended master secret"\
8809 -S "session hash for extended master secret"\
8810 -S "SSL - The handshake negotiation failed" \
8811 -S "SSL - Unknown identity received" \
8812 -S "SSL - Verification of the message MAC failed"
8813
Przemek Stekielb6a05032022-04-14 10:22:18 +02008814run_test "PSK callback: raw ecdhe-psk on client, static opaque on server, no callback, SHA-384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008815 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008816 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008817 psk_identity=foo psk=73776f726466697368" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008818 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008819 -C "session hash for extended master secret"\
8820 -S "session hash for extended master secret"\
8821 -S "SSL - The handshake negotiation failed" \
8822 -S "SSL - Unknown identity received" \
8823 -S "SSL - Verification of the message MAC failed"
8824
Przemek Stekielb6a05032022-04-14 10:22:18 +02008825run_test "PSK callback: raw ecdhe-psk on client, static opaque on server, no callback, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008826 "$P_SRV debug_level=3 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008827 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
8828 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008829 psk_identity=foo psk=73776f726466697368 extended_ms=1" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008830 0 \
8831 -c "session hash for extended master secret"\
8832 -s "session hash for extended master secret"\
Przemek Stekielb6a05032022-04-14 10:22:18 +02008833 -S "SSL - The handshake negotiation failed" \
8834 -S "SSL - Unknown identity received" \
8835 -S "SSL - Verification of the message MAC failed"
8836
Przemek Stekielb6a05032022-04-14 10:22:18 +02008837run_test "PSK callback: raw ecdhe-psk on client, static opaque on server, no callback, EMS, SHA384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008838 "$P_SRV debug_level=3 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008839 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
8840 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008841 psk_identity=foo psk=73776f726466697368 extended_ms=1" \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008842 0 \
8843 -c "session hash for extended master secret"\
8844 -s "session hash for extended master secret"\
Przemek Stekielb6a05032022-04-14 10:22:18 +02008845 -S "SSL - The handshake negotiation failed" \
8846 -S "SSL - Unknown identity received" \
8847 -S "SSL - Verification of the message MAC failed"
8848
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008849run_test "PSK callback: raw dhe-psk on client, static opaque on server, no callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008850 "$P_SRV extended_ms=0 debug_level=5 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008851 "$P_CLI extended_ms=0 debug_level=5 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008852 psk_identity=foo psk=73776f726466697368" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008853 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008854 -C "session hash for extended master secret"\
8855 -S "session hash for extended master secret"\
8856 -S "SSL - The handshake negotiation failed" \
8857 -S "SSL - Unknown identity received" \
8858 -S "SSL - Verification of the message MAC failed"
8859
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008860run_test "PSK callback: raw dhe-psk on client, static opaque on server, no callback, SHA-384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008861 "$P_SRV extended_ms=0 debug_level=1 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008862 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008863 psk_identity=foo psk=73776f726466697368" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008864 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008865 -C "session hash for extended master secret"\
8866 -S "session hash for extended master secret"\
8867 -S "SSL - The handshake negotiation failed" \
8868 -S "SSL - Unknown identity received" \
8869 -S "SSL - Verification of the message MAC failed"
8870
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008871run_test "PSK callback: raw dhe-psk on client, static opaque on server, no callback, EMS" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008872 "$P_SRV debug_level=3 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008873 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
8874 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008875 psk_identity=foo psk=73776f726466697368 extended_ms=1" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008876 0 \
8877 -c "session hash for extended master secret"\
8878 -s "session hash for extended master secret"\
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008879 -S "SSL - The handshake negotiation failed" \
8880 -S "SSL - Unknown identity received" \
8881 -S "SSL - Verification of the message MAC failed"
8882
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008883run_test "PSK callback: raw dhe-psk on client, static opaque on server, no callback, EMS, SHA384" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008884 "$P_SRV debug_level=3 psk=73776f726466697368 psk_identity=foo psk_opaque=1 min_version=tls12 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008885 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
8886 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
Gilles Peskine77c13e62024-04-29 16:09:52 +02008887 psk_identity=foo psk=73776f726466697368 extended_ms=1" \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008888 0 \
8889 -c "session hash for extended master secret"\
8890 -s "session hash for extended master secret"\
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02008891 -S "SSL - The handshake negotiation failed" \
8892 -S "SSL - Unknown identity received" \
8893 -S "SSL - Verification of the message MAC failed"
8894
Hanno Becker28c79dc2018-10-26 13:15:08 +01008895run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008896 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
8897 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008898 psk_identity=def psk=beef" \
8899 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008900 -C "session hash for extended master secret"\
8901 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008902 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008903 -S "SSL - Unknown identity received" \
8904 -S "SSL - Verification of the message MAC failed"
8905
Hanno Becker28c79dc2018-10-26 13:15:08 +01008906run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, SHA-384" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008907 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
8908 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008909 psk_identity=def psk=beef" \
8910 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008911 -C "session hash for extended master secret"\
8912 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008913 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008914 -S "SSL - Unknown identity received" \
8915 -S "SSL - Verification of the message MAC failed"
8916
Hanno Becker28c79dc2018-10-26 13:15:08 +01008917run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008918 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008919 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008920 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008921 psk_identity=abc psk=dead extended_ms=1" \
8922 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008923 -c "session hash for extended master secret"\
8924 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008925 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008926 -S "SSL - Unknown identity received" \
8927 -S "SSL - Verification of the message MAC failed"
8928
Hanno Becker28c79dc2018-10-26 13:15:08 +01008929run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS, SHA384" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008930 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008931 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008932 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008933 psk_identity=abc psk=dead extended_ms=1" \
8934 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02008935 -c "session hash for extended master secret"\
8936 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01008937 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01008938 -S "SSL - Unknown identity received" \
8939 -S "SSL - Verification of the message MAC failed"
8940
Przemek Stekielb270b562022-04-06 13:12:48 +02008941run_test "PSK callback: raw rsa-psk on client, no static RSA-PSK on server, opaque RSA-PSK from callback" \
8942 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA" \
8943 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
8944 psk_identity=def psk=beef" \
8945 0 \
Przemek Stekielb270b562022-04-06 13:12:48 +02008946 -C "session hash for extended master secret"\
8947 -S "session hash for extended master secret"\
8948 -S "SSL - The handshake negotiation failed" \
8949 -S "SSL - Unknown identity received" \
8950 -S "SSL - Verification of the message MAC failed"
8951
Przemek Stekielb270b562022-04-06 13:12:48 +02008952run_test "PSK callback: raw rsa-psk on client, no static RSA-PSK on server, opaque RSA-PSK from callback, SHA-384" \
8953 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384" \
8954 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
8955 psk_identity=def psk=beef" \
8956 0 \
Przemek Stekielb270b562022-04-06 13:12:48 +02008957 -C "session hash for extended master secret"\
8958 -S "session hash for extended master secret"\
8959 -S "SSL - The handshake negotiation failed" \
8960 -S "SSL - Unknown identity received" \
8961 -S "SSL - Verification of the message MAC failed"
8962
Przemek Stekielb270b562022-04-06 13:12:48 +02008963run_test "PSK callback: raw rsa-psk on client, no static RSA-PSK on server, opaque RSA-PSK from callback, EMS" \
8964 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
8965 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
8966 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
8967 psk_identity=abc psk=dead extended_ms=1" \
8968 0 \
8969 -c "session hash for extended master secret"\
8970 -s "session hash for extended master secret"\
Przemek Stekielb270b562022-04-06 13:12:48 +02008971 -S "SSL - The handshake negotiation failed" \
8972 -S "SSL - Unknown identity received" \
8973 -S "SSL - Verification of the message MAC failed"
8974
Przemek Stekielb270b562022-04-06 13:12:48 +02008975run_test "PSK callback: raw rsa-psk on client, no static RSA-PSK on server, opaque RSA-PSK from callback, EMS, SHA384" \
8976 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
8977 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
8978 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
8979 psk_identity=abc psk=dead extended_ms=1" \
8980 0 \
8981 -c "session hash for extended master secret"\
8982 -s "session hash for extended master secret"\
Przemek Stekielb270b562022-04-06 13:12:48 +02008983 -S "SSL - The handshake negotiation failed" \
8984 -S "SSL - Unknown identity received" \
8985 -S "SSL - Verification of the message MAC failed"
8986
Przemek Stekielb6a05032022-04-14 10:22:18 +02008987run_test "PSK callback: raw ecdhe-psk on client, no static ECDHE-PSK on server, opaque ECDHE-PSK from callback" \
8988 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA" \
8989 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
8990 psk_identity=def psk=beef" \
8991 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02008992 -C "session hash for extended master secret"\
8993 -S "session hash for extended master secret"\
8994 -S "SSL - The handshake negotiation failed" \
8995 -S "SSL - Unknown identity received" \
8996 -S "SSL - Verification of the message MAC failed"
8997
Przemek Stekielb6a05032022-04-14 10:22:18 +02008998run_test "PSK callback: raw ecdhe-psk on client, no static ECDHE-PSK on server, opaque ECDHE-PSK from callback, SHA-384" \
8999 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384" \
9000 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
9001 psk_identity=def psk=beef" \
9002 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02009003 -C "session hash for extended master secret"\
9004 -S "session hash for extended master secret"\
9005 -S "SSL - The handshake negotiation failed" \
9006 -S "SSL - Unknown identity received" \
9007 -S "SSL - Verification of the message MAC failed"
9008
Przemek Stekielb6a05032022-04-14 10:22:18 +02009009run_test "PSK callback: raw ecdhe-psk on client, no static ECDHE-PSK on server, opaque ECDHE-PSK from callback, EMS" \
9010 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
9011 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
9012 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
9013 psk_identity=abc psk=dead extended_ms=1" \
9014 0 \
9015 -c "session hash for extended master secret"\
9016 -s "session hash for extended master secret"\
Przemek Stekielb6a05032022-04-14 10:22:18 +02009017 -S "SSL - The handshake negotiation failed" \
9018 -S "SSL - Unknown identity received" \
9019 -S "SSL - Verification of the message MAC failed"
9020
Przemek Stekielb6a05032022-04-14 10:22:18 +02009021run_test "PSK callback: raw ecdhe-psk on client, no static ECDHE-PSK on server, opaque ECDHE-PSK from callback, EMS, SHA384" \
9022 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
9023 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
9024 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
9025 psk_identity=abc psk=dead extended_ms=1" \
9026 0 \
9027 -c "session hash for extended master secret"\
9028 -s "session hash for extended master secret"\
Przemek Stekielb6a05032022-04-14 10:22:18 +02009029 -S "SSL - The handshake negotiation failed" \
9030 -S "SSL - Unknown identity received" \
9031 -S "SSL - Verification of the message MAC failed"
9032
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02009033run_test "PSK callback: raw dhe-psk on client, no static DHE-PSK on server, opaque DHE-PSK from callback" \
9034 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA" \
9035 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
9036 psk_identity=def psk=beef" \
9037 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02009038 -C "session hash for extended master secret"\
9039 -S "session hash for extended master secret"\
9040 -S "SSL - The handshake negotiation failed" \
9041 -S "SSL - Unknown identity received" \
9042 -S "SSL - Verification of the message MAC failed"
9043
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02009044run_test "PSK callback: raw dhe-psk on client, no static DHE-PSK on server, opaque DHE-PSK from callback, SHA-384" \
9045 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384" \
9046 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
9047 psk_identity=def psk=beef" \
9048 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02009049 -C "session hash for extended master secret"\
9050 -S "session hash for extended master secret"\
9051 -S "SSL - The handshake negotiation failed" \
9052 -S "SSL - Unknown identity received" \
9053 -S "SSL - Verification of the message MAC failed"
9054
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02009055run_test "PSK callback: raw dhe-psk on client, no static DHE-PSK on server, opaque DHE-PSK from callback, EMS" \
9056 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
9057 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
9058 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
9059 psk_identity=abc psk=dead extended_ms=1" \
9060 0 \
9061 -c "session hash for extended master secret"\
9062 -s "session hash for extended master secret"\
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02009063 -S "SSL - The handshake negotiation failed" \
9064 -S "SSL - Unknown identity received" \
9065 -S "SSL - Verification of the message MAC failed"
9066
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02009067run_test "PSK callback: raw dhe-psk on client, no static DHE-PSK on server, opaque DHE-PSK from callback, EMS, SHA384" \
9068 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
9069 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
9070 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
9071 psk_identity=abc psk=dead extended_ms=1" \
9072 0 \
9073 -c "session hash for extended master secret"\
9074 -s "session hash for extended master secret"\
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02009075 -S "SSL - The handshake negotiation failed" \
9076 -S "SSL - Unknown identity received" \
9077 -S "SSL - Verification of the message MAC failed"
9078
Hanno Becker28c79dc2018-10-26 13:15:08 +01009079run_test "PSK callback: raw psk on client, mismatching static raw PSK on server, opaque PSK from callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009080 "$P_SRV extended_ms=0 psk_identity=foo psk=73776f726466697368 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009081 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009082 psk_identity=def psk=beef" \
9083 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02009084 -C "session hash for extended master secret"\
9085 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009086 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009087 -S "SSL - Unknown identity received" \
9088 -S "SSL - Verification of the message MAC failed"
9089
Hanno Becker28c79dc2018-10-26 13:15:08 +01009090run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, opaque PSK from callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009091 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=73776f726466697368 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009092 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009093 psk_identity=def psk=beef" \
9094 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02009095 -C "session hash for extended master secret"\
9096 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009097 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009098 -S "SSL - Unknown identity received" \
9099 -S "SSL - Verification of the message MAC failed"
9100
Hanno Becker28c79dc2018-10-26 13:15:08 +01009101run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, raw PSK from callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009102 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=73776f726466697368 debug_level=3 psk_list=abc,dead,def,beef min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009103 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009104 psk_identity=def psk=beef" \
9105 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02009106 -C "session hash for extended master secret"\
9107 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009108 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009109 -S "SSL - Unknown identity received" \
9110 -S "SSL - Verification of the message MAC failed"
9111
Hanno Becker28c79dc2018-10-26 13:15:08 +01009112run_test "PSK callback: raw psk on client, id-matching but wrong raw PSK on server, opaque PSK from callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009113 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=73776f726466697368 debug_level=3 psk_list=abc,dead,def,beef min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009114 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009115 psk_identity=def psk=beef" \
9116 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02009117 -C "session hash for extended master secret"\
9118 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009119 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009120 -S "SSL - Unknown identity received" \
9121 -S "SSL - Verification of the message MAC failed"
9122
Hanno Becker28c79dc2018-10-26 13:15:08 +01009123run_test "PSK callback: raw psk on client, matching opaque PSK on server, wrong opaque PSK from callback" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009124 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=beef debug_level=3 psk_list=abc,dead,def,73776f726466697368 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009125 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01009126 psk_identity=def psk=beef" \
9127 1 \
9128 -s "SSL - Verification of the message MAC failed"
9129
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02009130run_test "PSK callback: no psk, no callback" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02009131 "$P_SRV" \
9132 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009133 psk_identity=foo psk=73776f726466697368" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02009134 1 \
Dave Rodgman6ce10be2021-06-29 14:20:31 +01009135 -s "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009136 -S "SSL - Unknown identity received" \
9137 -S "SSL - Verification of the message MAC failed"
9138
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02009139run_test "PSK callback: callback overrides other settings" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009140 "$P_SRV psk=73776f726466697368 psk_identity=foo psk_list=abc,dead,def,beef" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009141 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009142 psk_identity=foo psk=73776f726466697368" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009143 1 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009144 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009145 -s "SSL - Unknown identity received" \
9146 -S "SSL - Verification of the message MAC failed"
9147
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02009148run_test "PSK callback: first id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009149 "$P_SRV psk_list=abc,dead,def,beef" \
9150 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
9151 psk_identity=abc psk=dead" \
9152 0 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009153 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009154 -S "SSL - Unknown identity received" \
9155 -S "SSL - Verification of the message MAC failed"
9156
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02009157run_test "PSK callback: second id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009158 "$P_SRV psk_list=abc,dead,def,beef" \
9159 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
9160 psk_identity=def psk=beef" \
9161 0 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009162 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009163 -S "SSL - Unknown identity received" \
9164 -S "SSL - Verification of the message MAC failed"
9165
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02009166run_test "PSK callback: no match" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009167 "$P_SRV psk_list=abc,dead,def,beef" \
9168 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
9169 psk_identity=ghi psk=beef" \
9170 1 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009171 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009172 -s "SSL - Unknown identity received" \
9173 -S "SSL - Verification of the message MAC failed"
9174
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02009175run_test "PSK callback: wrong key" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009176 "$P_SRV psk_list=abc,dead,def,beef" \
9177 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
9178 psk_identity=abc psk=beef" \
9179 1 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01009180 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02009181 -S "SSL - Unknown identity received" \
9182 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02009183
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009184# Tests for EC J-PAKE
9185
Hanno Beckerfa452c42020-08-14 15:42:49 +01009186requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Jerry Yuab082902021-12-23 18:02:22 +08009187requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009188run_test "ECJPAKE: client not configured" \
9189 "$P_SRV debug_level=3" \
9190 "$P_CLI debug_level=3" \
9191 0 \
Hanno Beckeree63af62020-08-14 15:41:23 +01009192 -C "add ciphersuite: 0xc0ff" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009193 -C "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02009194 -S "found ecjpake kkpp extension" \
9195 -S "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009196 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02009197 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02009198 -C "found ecjpake_kkpp extension" \
Dave Rodgman737237f2021-06-29 19:07:57 +01009199 -S "SSL - The handshake negotiation failed"
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009200
Hanno Beckerfa452c42020-08-14 15:42:49 +01009201requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009202run_test "ECJPAKE: server not configured" \
9203 "$P_SRV debug_level=3" \
9204 "$P_CLI debug_level=3 ecjpake_pw=bla \
9205 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9206 1 \
Ronald Cron7320e642022-03-08 13:34:49 +01009207 -c "add ciphersuite: c0ff" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009208 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02009209 -s "found ecjpake kkpp extension" \
9210 -s "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009211 -s "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02009212 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02009213 -C "found ecjpake_kkpp extension" \
Dave Rodgman737237f2021-06-29 19:07:57 +01009214 -s "SSL - The handshake negotiation failed"
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02009215
Valerio Settif11e05a2022-12-07 15:41:05 +01009216# Note: if the name of this test is changed, then please adjust the corresponding
9217# filtering label in "test_tls1_2_ecjpake_compatibility" (in "all.sh")
Hanno Beckerfa452c42020-08-14 15:42:49 +01009218requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02009219run_test "ECJPAKE: working, TLS" \
9220 "$P_SRV debug_level=3 ecjpake_pw=bla" \
9221 "$P_CLI debug_level=3 ecjpake_pw=bla \
9222 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
Manuel Pégourié-Gonnard0f1660a2015-09-16 22:41:06 +02009223 0 \
Ronald Cron7320e642022-03-08 13:34:49 +01009224 -c "add ciphersuite: c0ff" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02009225 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02009226 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02009227 -s "found ecjpake kkpp extension" \
9228 -S "skip ecjpake kkpp extension" \
9229 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02009230 -s "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02009231 -c "found ecjpake_kkpp extension" \
Dave Rodgman737237f2021-06-29 19:07:57 +01009232 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02009233 -S "SSL - Verification of the message MAC failed"
9234
Valerio Settid572a822022-11-28 18:27:51 +01009235requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Valerio Setti70e02902022-12-02 16:21:56 +01009236run_test "ECJPAKE: opaque password client+server, working, TLS" \
Valerio Settid572a822022-11-28 18:27:51 +01009237 "$P_SRV debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1" \
9238 "$P_CLI debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1\
9239 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9240 0 \
9241 -c "add ciphersuite: c0ff" \
9242 -c "adding ecjpake_kkpp extension" \
Valerio Setti661b9bc2022-11-29 17:19:25 +01009243 -c "using opaque password" \
9244 -s "using opaque password" \
Valerio Settid572a822022-11-28 18:27:51 +01009245 -C "re-using cached ecjpake parameters" \
9246 -s "found ecjpake kkpp extension" \
9247 -S "skip ecjpake kkpp extension" \
9248 -S "ciphersuite mismatch: ecjpake not configured" \
9249 -s "server hello, ecjpake kkpp extension" \
9250 -c "found ecjpake_kkpp extension" \
9251 -S "SSL - The handshake negotiation failed" \
9252 -S "SSL - Verification of the message MAC failed"
9253
Valerio Settif11e05a2022-12-07 15:41:05 +01009254# Note: if the name of this test is changed, then please adjust the corresponding
9255# filtering label in "test_tls1_2_ecjpake_compatibility" (in "all.sh")
Valerio Settib287ddf2022-12-01 16:18:12 +01009256requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Valerio Setti70e02902022-12-02 16:21:56 +01009257run_test "ECJPAKE: opaque password client only, working, TLS" \
Valerio Settib287ddf2022-12-01 16:18:12 +01009258 "$P_SRV debug_level=3 ecjpake_pw=bla" \
9259 "$P_CLI debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1\
9260 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9261 0 \
9262 -c "add ciphersuite: c0ff" \
9263 -c "adding ecjpake_kkpp extension" \
9264 -c "using opaque password" \
9265 -S "using opaque password" \
9266 -C "re-using cached ecjpake parameters" \
9267 -s "found ecjpake kkpp extension" \
9268 -S "skip ecjpake kkpp extension" \
9269 -S "ciphersuite mismatch: ecjpake not configured" \
9270 -s "server hello, ecjpake kkpp extension" \
9271 -c "found ecjpake_kkpp extension" \
9272 -S "SSL - The handshake negotiation failed" \
9273 -S "SSL - Verification of the message MAC failed"
9274
Valerio Settif11e05a2022-12-07 15:41:05 +01009275# Note: if the name of this test is changed, then please adjust the corresponding
9276# filtering label in "test_tls1_2_ecjpake_compatibility" (in "all.sh")
Valerio Settib287ddf2022-12-01 16:18:12 +01009277requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Valerio Setti70e02902022-12-02 16:21:56 +01009278run_test "ECJPAKE: opaque password server only, working, TLS" \
Valerio Settib287ddf2022-12-01 16:18:12 +01009279 "$P_SRV debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1" \
9280 "$P_CLI debug_level=3 ecjpake_pw=bla\
9281 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9282 0 \
9283 -c "add ciphersuite: c0ff" \
9284 -c "adding ecjpake_kkpp extension" \
9285 -C "using opaque password" \
9286 -s "using opaque password" \
9287 -C "re-using cached ecjpake parameters" \
9288 -s "found ecjpake kkpp extension" \
9289 -S "skip ecjpake kkpp extension" \
9290 -S "ciphersuite mismatch: ecjpake not configured" \
9291 -s "server hello, ecjpake kkpp extension" \
9292 -c "found ecjpake_kkpp extension" \
9293 -S "SSL - The handshake negotiation failed" \
9294 -S "SSL - Verification of the message MAC failed"
9295
Janos Follath74537a62016-09-02 13:45:28 +01009296server_needs_more_time 1
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01009297requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02009298run_test "ECJPAKE: password mismatch, TLS" \
9299 "$P_SRV debug_level=3 ecjpake_pw=bla" \
9300 "$P_CLI debug_level=3 ecjpake_pw=bad \
9301 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9302 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02009303 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02009304 -s "SSL - Verification of the message MAC failed"
9305
Valerio Settib287ddf2022-12-01 16:18:12 +01009306server_needs_more_time 1
9307requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Valerio Settib287ddf2022-12-01 16:18:12 +01009308run_test "ECJPAKE_OPAQUE_PW: opaque password mismatch, TLS" \
9309 "$P_SRV debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1" \
9310 "$P_CLI debug_level=3 ecjpake_pw=bad ecjpake_pw_opaque=1 \
9311 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9312 1 \
9313 -c "using opaque password" \
9314 -s "using opaque password" \
9315 -C "re-using cached ecjpake parameters" \
9316 -s "SSL - Verification of the message MAC failed"
9317
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01009318requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02009319run_test "ECJPAKE: working, DTLS" \
9320 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
9321 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
9322 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9323 0 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02009324 -c "re-using cached ecjpake parameters" \
9325 -S "SSL - Verification of the message MAC failed"
9326
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01009327requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02009328run_test "ECJPAKE: working, DTLS, no cookie" \
9329 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla cookies=0" \
9330 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
9331 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9332 0 \
9333 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02009334 -S "SSL - Verification of the message MAC failed"
9335
Janos Follath74537a62016-09-02 13:45:28 +01009336server_needs_more_time 1
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01009337requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02009338run_test "ECJPAKE: password mismatch, DTLS" \
9339 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
9340 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bad \
9341 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9342 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02009343 -c "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02009344 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02009345
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02009346# for tests with configs/config-thread.h
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01009347requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02009348run_test "ECJPAKE: working, DTLS, nolog" \
9349 "$P_SRV dtls=1 ecjpake_pw=bla" \
9350 "$P_CLI dtls=1 ecjpake_pw=bla \
9351 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
9352 0
9353
Manuel Pégourié-Gonnard4cc8c632015-07-23 12:24:03 +02009354# Test for ClientHello without extensions
9355
Gilles Peskine3b81ea12024-04-29 17:42:52 +02009356# Without extensions, ECC is impossible (no curve negotiation).
9357requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnardd55bc202015-08-04 16:22:30 +02009358requires_gnutls
Gilles Peskine3b81ea12024-04-29 17:42:52 +02009359run_test "ClientHello without extensions: RSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01009360 "$P_SRV force_version=tls12 debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02009361 "$G_CLI --priority=NORMAL:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION localhost" \
Gilles Peskine5d2511c2017-05-12 13:16:40 +02009362 0 \
Gilles Peskine3b81ea12024-04-29 17:42:52 +02009363 -s "Ciphersuite is .*-RSA-WITH-.*" \
9364 -S "Ciphersuite is .*-EC.*" \
9365 -s "dumping 'client hello extensions' (0 bytes)"
9366
Gilles Peskinefc73aa02024-05-13 21:18:41 +02009367requires_config_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
Gilles Peskine3b81ea12024-04-29 17:42:52 +02009368requires_gnutls
9369run_test "ClientHello without extensions: PSK" \
9370 "$P_SRV force_version=tls12 debug_level=3 psk=73776f726466697368" \
9371 "$G_CLI --priority=NORMAL:+PSK:-RSA:-DHE-RSA:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION --pskusername=Client_identity --pskkey=73776f726466697368 localhost" \
9372 0 \
9373 -s "Ciphersuite is .*-PSK-.*" \
9374 -S "Ciphersuite is .*-EC.*" \
Gilles Peskine5d2511c2017-05-12 13:16:40 +02009375 -s "dumping 'client hello extensions' (0 bytes)"
9376
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02009377# Tests for mbedtls_ssl_get_bytes_avail()
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02009378
Gilles Peskined2d90af2022-04-06 23:35:56 +02009379# The server first reads buffer_size-1 bytes, then reads the remainder.
Jerry Yuab082902021-12-23 18:02:22 +08009380requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02009381run_test "mbedtls_ssl_get_bytes_avail: no extra data" \
Gilles Peskined2d90af2022-04-06 23:35:56 +02009382 "$P_SRV buffer_size=100" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02009383 "$P_CLI request_size=100" \
9384 0 \
9385 -s "Read from client: 100 bytes read$"
9386
Jerry Yuab082902021-12-23 18:02:22 +08009387requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskined2d90af2022-04-06 23:35:56 +02009388run_test "mbedtls_ssl_get_bytes_avail: extra data (+1)" \
9389 "$P_SRV buffer_size=100" \
9390 "$P_CLI request_size=101" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02009391 0 \
Gilles Peskined2d90af2022-04-06 23:35:56 +02009392 -s "Read from client: 101 bytes read (100 + 1)"
9393
9394requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
9395requires_max_content_len 200
9396run_test "mbedtls_ssl_get_bytes_avail: extra data (*2)" \
9397 "$P_SRV buffer_size=100" \
9398 "$P_CLI request_size=200" \
9399 0 \
9400 -s "Read from client: 200 bytes read (100 + 100)"
9401
9402requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
9403run_test "mbedtls_ssl_get_bytes_avail: extra data (max)" \
Waleed Elmelegybae705c2024-01-01 14:21:21 +00009404 "$P_SRV buffer_size=100 force_version=tls12" \
Gilles Peskined2d90af2022-04-06 23:35:56 +02009405 "$P_CLI request_size=$MAX_CONTENT_LEN" \
9406 0 \
9407 -s "Read from client: $MAX_CONTENT_LEN bytes read (100 + $((MAX_CONTENT_LEN - 100)))"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02009408
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009409# Tests for small client packets
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02009410
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009411run_test "Small client packet TLS 1.2 BlockCipher" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009412 "$P_SRV force_version=tls12" \
9413 "$P_CLI request_size=1 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02009414 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
9415 0 \
9416 -s "Read from client: 1 bytes read"
9417
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009418run_test "Small client packet TLS 1.2 BlockCipher, without EtM" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009419 "$P_SRV force_version=tls12" \
9420 "$P_CLI request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00009421 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01009422 0 \
9423 -s "Read from client: 1 bytes read"
9424
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009425run_test "Small client packet TLS 1.2 BlockCipher larger MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009426 "$P_SRV force_version=tls12" \
9427 "$P_CLI request_size=1 \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01009428 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02009429 0 \
9430 -s "Read from client: 1 bytes read"
9431
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009432run_test "Small client packet TLS 1.2 AEAD" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009433 "$P_SRV force_version=tls12" \
9434 "$P_CLI request_size=1 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02009435 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
9436 0 \
9437 -s "Read from client: 1 bytes read"
9438
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009439run_test "Small client packet TLS 1.2 AEAD shorter tag" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009440 "$P_SRV force_version=tls12" \
9441 "$P_CLI request_size=1 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02009442 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
9443 0 \
9444 -s "Read from client: 1 bytes read"
9445
Ronald Cron928cbd32022-10-04 16:14:26 +02009446requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02009447run_test "Small client packet TLS 1.3 AEAD" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01009448 "$P_SRV" \
Ronald Crona4417c12022-06-23 16:06:28 +02009449 "$P_CLI request_size=1 \
9450 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256" \
9451 0 \
9452 -s "Read from client: 1 bytes read"
9453
Ronald Cron928cbd32022-10-04 16:14:26 +02009454requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02009455run_test "Small client packet TLS 1.3 AEAD shorter tag" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01009456 "$P_SRV" \
Ronald Crona4417c12022-06-23 16:06:28 +02009457 "$P_CLI request_size=1 \
9458 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256" \
9459 0 \
9460 -s "Read from client: 1 bytes read"
9461
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009462# Tests for small client packets in DTLS
Hanno Beckere2148042017-11-10 08:59:18 +00009463
9464requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009465run_test "Small client packet DTLS 1.2" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009466 "$P_SRV dtls=1 force_version=dtls12" \
Hanno Beckere2148042017-11-10 08:59:18 +00009467 "$P_CLI dtls=1 request_size=1 \
9468 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
9469 0 \
9470 -s "Read from client: 1 bytes read"
9471
9472requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009473run_test "Small client packet DTLS 1.2, without EtM" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009474 "$P_SRV dtls=1 force_version=dtls12 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00009475 "$P_CLI dtls=1 request_size=1 \
9476 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
9477 0 \
9478 -s "Read from client: 1 bytes read"
9479
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009480# Tests for small server packets
9481
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009482run_test "Small server packet TLS 1.2 BlockCipher" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009483 "$P_SRV response_size=1 force_version=tls12" \
9484 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009485 0 \
9486 -c "Read from server: 1 bytes read"
9487
9488run_test "Small server packet TLS 1.2 BlockCipher, without EtM" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009489 "$P_SRV response_size=1 force_version=tls12" \
9490 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009491 0 \
9492 -c "Read from server: 1 bytes read"
9493
9494run_test "Small server packet TLS 1.2 BlockCipher larger MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009495 "$P_SRV response_size=1 force_version=tls12" \
9496 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009497 0 \
9498 -c "Read from server: 1 bytes read"
9499
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009500run_test "Small server packet TLS 1.2 AEAD" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009501 "$P_SRV response_size=1 force_version=tls12" \
9502 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009503 0 \
9504 -c "Read from server: 1 bytes read"
9505
9506run_test "Small server packet TLS 1.2 AEAD shorter tag" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009507 "$P_SRV response_size=1 force_version=tls12" \
9508 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009509 0 \
9510 -c "Read from server: 1 bytes read"
9511
Ronald Cron928cbd32022-10-04 16:14:26 +02009512requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02009513run_test "Small server packet TLS 1.3 AEAD" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01009514 "$P_SRV response_size=1" \
Ronald Crona4417c12022-06-23 16:06:28 +02009515 "$P_CLI force_ciphersuite=TLS1-3-AES-128-CCM-SHA256" \
9516 0 \
9517 -c "Read from server: 1 bytes read"
9518
Ronald Cron928cbd32022-10-04 16:14:26 +02009519requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02009520run_test "Small server packet TLS 1.3 AEAD shorter tag" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01009521 "$P_SRV response_size=1" \
Ronald Crona4417c12022-06-23 16:06:28 +02009522 "$P_CLI force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256" \
9523 0 \
9524 -c "Read from server: 1 bytes read"
9525
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009526# Tests for small server packets in DTLS
9527
9528requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009529run_test "Small server packet DTLS 1.2" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009530 "$P_SRV dtls=1 response_size=1 force_version=dtls12" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009531 "$P_CLI dtls=1 \
9532 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
9533 0 \
9534 -c "Read from server: 1 bytes read"
9535
9536requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9537run_test "Small server packet DTLS 1.2, without EtM" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00009538 "$P_SRV dtls=1 response_size=1 force_version=dtls12 etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009539 "$P_CLI dtls=1 \
9540 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
9541 0 \
9542 -c "Read from server: 1 bytes read"
9543
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009544# Test for large client packets
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009545
Angus Grattonc4dd0732018-04-11 16:28:39 +10009546# How many fragments do we expect to write $1 bytes?
9547fragments_for_write() {
9548 echo "$(( ( $1 + $MAX_OUT_LEN - 1 ) / $MAX_OUT_LEN ))"
9549}
9550
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009551run_test "Large client packet TLS 1.2 BlockCipher" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009552 "$P_SRV force_version=tls12" \
9553 "$P_CLI request_size=16384 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009554 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
9555 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10009556 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
9557 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009558
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009559run_test "Large client packet TLS 1.2 BlockCipher, without EtM" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009560 "$P_SRV force_version=tls12" \
9561 "$P_CLI request_size=16384 etm=0 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00009562 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
9563 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10009564 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00009565
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009566run_test "Large client packet TLS 1.2 BlockCipher larger MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009567 "$P_SRV force_version=tls12" \
9568 "$P_CLI request_size=16384 \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01009569 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009570 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10009571 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
9572 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009573
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009574run_test "Large client packet TLS 1.2 AEAD" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009575 "$P_SRV force_version=tls12" \
9576 "$P_CLI request_size=16384 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009577 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
9578 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10009579 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
9580 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009581
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009582run_test "Large client packet TLS 1.2 AEAD shorter tag" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009583 "$P_SRV force_version=tls12" \
9584 "$P_CLI request_size=16384 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009585 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
9586 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10009587 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
9588 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02009589
Ronald Cron928cbd32022-10-04 16:14:26 +02009590requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02009591run_test "Large client packet TLS 1.3 AEAD" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01009592 "$P_SRV" \
Waleed Elmelegyea031832023-12-29 15:36:51 +00009593 "$P_CLI request_size=16383 \
Ronald Crona4417c12022-06-23 16:06:28 +02009594 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256" \
9595 0 \
Waleed Elmelegyea031832023-12-29 15:36:51 +00009596 -c "16383 bytes written in $(fragments_for_write 16383) fragments" \
9597 -s "Read from client: 16383 bytes read"
Ronald Crona4417c12022-06-23 16:06:28 +02009598
Ronald Cron928cbd32022-10-04 16:14:26 +02009599requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02009600run_test "Large client packet TLS 1.3 AEAD shorter tag" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01009601 "$P_SRV" \
Waleed Elmelegyea031832023-12-29 15:36:51 +00009602 "$P_CLI request_size=16383 \
Ronald Crona4417c12022-06-23 16:06:28 +02009603 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256" \
9604 0 \
Waleed Elmelegyea031832023-12-29 15:36:51 +00009605 -c "16383 bytes written in $(fragments_for_write 16383) fragments" \
9606 -s "Read from client: 16383 bytes read"
Ronald Crona4417c12022-06-23 16:06:28 +02009607
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009608# The tests below fail when the server's OUT_CONTENT_LEN is less than 16384.
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009609run_test "Large server packet TLS 1.2 BlockCipher" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009610 "$P_SRV response_size=16384 force_version=tls12" \
9611 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009612 0 \
9613 -c "Read from server: 16384 bytes read"
9614
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009615run_test "Large server packet TLS 1.2 BlockCipher, without EtM" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009616 "$P_SRV response_size=16384 force_version=tls12" \
9617 "$P_CLI etm=0 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009618 0 \
9619 -s "16384 bytes written in 1 fragments" \
9620 -c "Read from server: 16384 bytes read"
9621
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009622run_test "Large server packet TLS 1.2 BlockCipher larger MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009623 "$P_SRV response_size=16384 force_version=tls12" \
9624 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009625 0 \
9626 -c "Read from server: 16384 bytes read"
9627
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009628run_test "Large server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009629 "$P_SRV response_size=16384 trunc_hmac=1 force_version=tls12" \
9630 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04009631 0 \
9632 -s "16384 bytes written in 1 fragments" \
9633 -c "Read from server: 16384 bytes read"
9634
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009635run_test "Large server packet TLS 1.2 AEAD" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009636 "$P_SRV response_size=16384 force_version=tls12" \
9637 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009638 0 \
9639 -c "Read from server: 16384 bytes read"
9640
9641run_test "Large server packet TLS 1.2 AEAD shorter tag" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01009642 "$P_SRV response_size=16384 force_version=tls12" \
9643 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02009644 0 \
9645 -c "Read from server: 16384 bytes read"
9646
Ronald Cron928cbd32022-10-04 16:14:26 +02009647requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02009648run_test "Large server packet TLS 1.3 AEAD" \
Waleed Elmelegyea031832023-12-29 15:36:51 +00009649 "$P_SRV response_size=16383" \
Ronald Crona4417c12022-06-23 16:06:28 +02009650 "$P_CLI force_ciphersuite=TLS1-3-AES-128-CCM-SHA256" \
9651 0 \
Waleed Elmelegyea031832023-12-29 15:36:51 +00009652 -c "Read from server: 16383 bytes read"
Ronald Crona4417c12022-06-23 16:06:28 +02009653
Ronald Cron928cbd32022-10-04 16:14:26 +02009654requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02009655run_test "Large server packet TLS 1.3 AEAD shorter tag" \
Waleed Elmelegyea031832023-12-29 15:36:51 +00009656 "$P_SRV response_size=16383" \
Ronald Crona4417c12022-06-23 16:06:28 +02009657 "$P_CLI force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256" \
9658 0 \
Waleed Elmelegyea031832023-12-29 15:36:51 +00009659 -c "Read from server: 16383 bytes read"
Ronald Crona4417c12022-06-23 16:06:28 +02009660
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009661# Tests for restartable ECC
9662
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009663# Force the use of a curve that supports restartable ECC (secp256r1).
9664
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009665requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009666requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009667run_test "EC restart: TLS, default" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009668 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009669 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009670 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009671 debug_level=1" \
9672 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009673 -C "x509_verify_cert.*4b00" \
9674 -C "mbedtls_pk_verify.*4b00" \
9675 -C "mbedtls_ecdh_make_public.*4b00" \
9676 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009677
9678requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009679requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009680run_test "EC restart: TLS, max_ops=0" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009681 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009682 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009683 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009684 debug_level=1 ec_max_ops=0" \
9685 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009686 -C "x509_verify_cert.*4b00" \
9687 -C "mbedtls_pk_verify.*4b00" \
9688 -C "mbedtls_ecdh_make_public.*4b00" \
9689 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009690
9691requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009692requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009693run_test "EC restart: TLS, max_ops=65535" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009694 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009695 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009696 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009697 debug_level=1 ec_max_ops=65535" \
9698 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009699 -C "x509_verify_cert.*4b00" \
9700 -C "mbedtls_pk_verify.*4b00" \
9701 -C "mbedtls_ecdh_make_public.*4b00" \
9702 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009703
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009704# With USE_PSA disabled we expect full restartable behaviour.
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009705requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009706requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009707requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
9708run_test "EC restart: TLS, max_ops=1000 (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009709 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009710 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009711 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009712 debug_level=1 ec_max_ops=1000" \
9713 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009714 -c "x509_verify_cert.*4b00" \
9715 -c "mbedtls_pk_verify.*4b00" \
9716 -c "mbedtls_ecdh_make_public.*4b00" \
9717 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009718
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009719# With USE_PSA enabled we expect only partial restartable behaviour:
9720# everything except ECDH (where TLS calls PSA directly).
9721requires_config_enabled MBEDTLS_ECP_RESTARTABLE
9722requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009723run_test "EC restart: TLS, max_ops=1000 (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009724 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009725 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009726 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009727 debug_level=1 ec_max_ops=1000" \
9728 0 \
9729 -c "x509_verify_cert.*4b00" \
9730 -c "mbedtls_pk_verify.*4b00" \
9731 -C "mbedtls_ecdh_make_public.*4b00" \
9732 -c "mbedtls_pk_sign.*4b00"
9733
9734# This works the same with & without USE_PSA as we never get to ECDH:
9735# we abort as soon as we determined the cert is bad.
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009736requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009737requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009738run_test "EC restart: TLS, max_ops=1000, badsign" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009739 "$P_SRV groups=secp256r1 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +01009740 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
9741 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009742 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009743 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009744 debug_level=1 ec_max_ops=1000" \
9745 1 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009746 -c "x509_verify_cert.*4b00" \
9747 -C "mbedtls_pk_verify.*4b00" \
9748 -C "mbedtls_ecdh_make_public.*4b00" \
9749 -C "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009750 -c "! The certificate is not correctly signed by the trusted CA" \
9751 -c "! mbedtls_ssl_handshake returned" \
9752 -c "X509 - Certificate verification failed"
9753
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009754# With USE_PSA disabled we expect full restartable behaviour.
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009755requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009756requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009757requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
9758run_test "EC restart: TLS, max_ops=1000, auth_mode=optional badsign (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009759 "$P_SRV groups=secp256r1 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +01009760 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
9761 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009762 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009763 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009764 debug_level=1 ec_max_ops=1000 auth_mode=optional" \
9765 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009766 -c "x509_verify_cert.*4b00" \
9767 -c "mbedtls_pk_verify.*4b00" \
9768 -c "mbedtls_ecdh_make_public.*4b00" \
9769 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009770 -c "! The certificate is not correctly signed by the trusted CA" \
9771 -C "! mbedtls_ssl_handshake returned" \
9772 -C "X509 - Certificate verification failed"
9773
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009774# With USE_PSA enabled we expect only partial restartable behaviour:
9775# everything except ECDH (where TLS calls PSA directly).
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009776requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009777requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009778run_test "EC restart: TLS, max_ops=1000, auth_mode=optional badsign (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009779 "$P_SRV groups=secp256r1 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +01009780 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
9781 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009782 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009783 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009784 debug_level=1 ec_max_ops=1000 auth_mode=optional" \
9785 0 \
9786 -c "x509_verify_cert.*4b00" \
9787 -c "mbedtls_pk_verify.*4b00" \
9788 -C "mbedtls_ecdh_make_public.*4b00" \
9789 -c "mbedtls_pk_sign.*4b00" \
9790 -c "! The certificate is not correctly signed by the trusted CA" \
9791 -C "! mbedtls_ssl_handshake returned" \
9792 -C "X509 - Certificate verification failed"
9793
9794# With USE_PSA disabled we expect full restartable behaviour.
9795requires_config_enabled MBEDTLS_ECP_RESTARTABLE
9796requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009797requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
9798run_test "EC restart: TLS, max_ops=1000, auth_mode=none badsign (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009799 "$P_SRV groups=secp256r1 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +01009800 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
9801 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009802 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009803 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009804 debug_level=1 ec_max_ops=1000 auth_mode=none" \
9805 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009806 -C "x509_verify_cert.*4b00" \
9807 -c "mbedtls_pk_verify.*4b00" \
9808 -c "mbedtls_ecdh_make_public.*4b00" \
9809 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009810 -C "! The certificate is not correctly signed by the trusted CA" \
9811 -C "! mbedtls_ssl_handshake returned" \
9812 -C "X509 - Certificate verification failed"
9813
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009814# With USE_PSA enabled we expect only partial restartable behaviour:
9815# everything except ECDH (where TLS calls PSA directly).
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02009816requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009817requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009818run_test "EC restart: TLS, max_ops=1000, auth_mode=none badsign (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009819 "$P_SRV groups=secp256r1 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +01009820 crt_file=$DATA_FILES_PATH/server5-badsign.crt \
9821 key_file=$DATA_FILES_PATH/server5.key" \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009822 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009823 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009824 debug_level=1 ec_max_ops=1000 auth_mode=none" \
9825 0 \
9826 -C "x509_verify_cert.*4b00" \
9827 -c "mbedtls_pk_verify.*4b00" \
9828 -C "mbedtls_ecdh_make_public.*4b00" \
9829 -c "mbedtls_pk_sign.*4b00" \
9830 -C "! The certificate is not correctly signed by the trusted CA" \
9831 -C "! mbedtls_ssl_handshake returned" \
9832 -C "X509 - Certificate verification failed"
9833
9834# With USE_PSA disabled we expect full restartable behaviour.
9835requires_config_enabled MBEDTLS_ECP_RESTARTABLE
9836requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009837requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
9838run_test "EC restart: DTLS, max_ops=1000 (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009839 "$P_SRV groups=secp256r1 auth_mode=required dtls=1" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009840 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009841 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009842 dtls=1 debug_level=1 ec_max_ops=1000" \
9843 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009844 -c "x509_verify_cert.*4b00" \
9845 -c "mbedtls_pk_verify.*4b00" \
9846 -c "mbedtls_ecdh_make_public.*4b00" \
9847 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02009848
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009849# With USE_PSA enabled we expect only partial restartable behaviour:
9850# everything except ECDH (where TLS calls PSA directly).
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02009851requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009852requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009853run_test "EC restart: DTLS, max_ops=1000 (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009854 "$P_SRV groups=secp256r1 auth_mode=required dtls=1" \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009855 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009856 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009857 dtls=1 debug_level=1 ec_max_ops=1000" \
9858 0 \
9859 -c "x509_verify_cert.*4b00" \
9860 -c "mbedtls_pk_verify.*4b00" \
9861 -C "mbedtls_ecdh_make_public.*4b00" \
9862 -c "mbedtls_pk_sign.*4b00"
9863
9864# With USE_PSA disabled we expect full restartable behaviour.
9865requires_config_enabled MBEDTLS_ECP_RESTARTABLE
9866requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009867requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
9868run_test "EC restart: TLS, max_ops=1000 no client auth (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009869 "$P_SRV groups=secp256r1" \
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02009870 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
9871 debug_level=1 ec_max_ops=1000" \
9872 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009873 -c "x509_verify_cert.*4b00" \
9874 -c "mbedtls_pk_verify.*4b00" \
9875 -c "mbedtls_ecdh_make_public.*4b00" \
9876 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02009877
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01009878
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009879# With USE_PSA enabled we expect only partial restartable behaviour:
9880# everything except ECDH (where TLS calls PSA directly).
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02009881requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02009882requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009883run_test "EC restart: TLS, max_ops=1000 no client auth (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009884 "$P_SRV groups=secp256r1" \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01009885 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
9886 debug_level=1 ec_max_ops=1000" \
9887 0 \
9888 -c "x509_verify_cert.*4b00" \
9889 -c "mbedtls_pk_verify.*4b00" \
9890 -C "mbedtls_ecdh_make_public.*4b00" \
9891 -C "mbedtls_pk_sign.*4b00"
9892
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01009893# Restartable is only for ECDHE-ECDSA, with another ciphersuite we expect no
9894# restartable behaviour at all (not even client auth).
9895# This is the same as "EC restart: TLS, max_ops=1000" except with ECDHE-RSA,
9896# and all 4 assertions negated.
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02009897requires_config_enabled MBEDTLS_ECP_RESTARTABLE
9898requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01009899run_test "EC restart: TLS, max_ops=1000, ECDHE-RSA" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02009900 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01009901 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 \
David Horstmann184c4f02024-07-01 17:01:28 +01009902 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01009903 debug_level=1 ec_max_ops=1000" \
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02009904 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02009905 -C "x509_verify_cert.*4b00" \
9906 -C "mbedtls_pk_verify.*4b00" \
9907 -C "mbedtls_ecdh_make_public.*4b00" \
9908 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02009909
Gilles Peskine3665f1d2018-01-05 21:22:12 +01009910# Tests of asynchronous private key support in SSL
9911
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009912requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009913run_test "SSL async private: sign, delay=0" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01009914 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009915 async_operations=s async_private_delay1=0 async_private_delay2=0" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01009916 "$P_CLI" \
9917 0 \
9918 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009919 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01009920
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009921requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009922run_test "SSL async private: sign, delay=1" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01009923 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009924 async_operations=s async_private_delay1=1 async_private_delay2=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01009925 "$P_CLI" \
9926 0 \
9927 -s "Async sign callback: using key slot " \
9928 -s "Async resume (slot [0-9]): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009929 -s "Async resume (slot [0-9]): sign done, status=0"
9930
Gilles Peskine12d0cc12018-04-26 15:06:56 +02009931requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
9932run_test "SSL async private: sign, delay=2" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01009933 "$P_SRV force_version=tls12 \
Gilles Peskine12d0cc12018-04-26 15:06:56 +02009934 async_operations=s async_private_delay1=2 async_private_delay2=2" \
9935 "$P_CLI" \
9936 0 \
9937 -s "Async sign callback: using key slot " \
9938 -U "Async sign callback: using key slot " \
9939 -s "Async resume (slot [0-9]): call 1 more times." \
9940 -s "Async resume (slot [0-9]): call 0 more times." \
9941 -s "Async resume (slot [0-9]): sign done, status=0"
9942
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009943requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Hanno Beckerc5722d12020-10-09 11:10:42 +01009944requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Gilles Peskine807d74a2018-04-30 10:30:49 +02009945run_test "SSL async private: sign, SNI" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01009946 "$P_SRV force_version=tls12 debug_level=3 \
Gilles Peskine807d74a2018-04-30 10:30:49 +02009947 async_operations=s async_private_delay1=0 async_private_delay2=0 \
David Horstmann184c4f02024-07-01 17:01:28 +01009948 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
9949 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
Gilles Peskine807d74a2018-04-30 10:30:49 +02009950 "$P_CLI server_name=polarssl.example" \
9951 0 \
9952 -s "Async sign callback: using key slot " \
9953 -s "Async resume (slot [0-9]): sign done, status=0" \
9954 -s "parse ServerName extension" \
9955 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
9956 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
9957
9958requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009959run_test "SSL async private: decrypt, delay=0" \
9960 "$P_SRV \
9961 async_operations=d async_private_delay1=0 async_private_delay2=0" \
9962 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
9963 0 \
9964 -s "Async decrypt callback: using key slot " \
9965 -s "Async resume (slot [0-9]): decrypt done, status=0"
9966
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009967requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009968run_test "SSL async private: decrypt, delay=1" \
9969 "$P_SRV \
9970 async_operations=d async_private_delay1=1 async_private_delay2=1" \
9971 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
9972 0 \
9973 -s "Async decrypt callback: using key slot " \
9974 -s "Async resume (slot [0-9]): call 0 more times." \
9975 -s "Async resume (slot [0-9]): decrypt done, status=0"
9976
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009977requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009978run_test "SSL async private: decrypt RSA-PSK, delay=0" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009979 "$P_SRV psk=73776f726466697368 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009980 async_operations=d async_private_delay1=0 async_private_delay2=0" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009981 "$P_CLI psk=73776f726466697368 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009982 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
9983 0 \
9984 -s "Async decrypt callback: using key slot " \
9985 -s "Async resume (slot [0-9]): decrypt done, status=0"
9986
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009987requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009988run_test "SSL async private: decrypt RSA-PSK, delay=1" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009989 "$P_SRV psk=73776f726466697368 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009990 async_operations=d async_private_delay1=1 async_private_delay2=1" \
Gilles Peskine77c13e62024-04-29 16:09:52 +02009991 "$P_CLI psk=73776f726466697368 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009992 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
9993 0 \
9994 -s "Async decrypt callback: using key slot " \
9995 -s "Async resume (slot [0-9]): call 0 more times." \
9996 -s "Async resume (slot [0-9]): decrypt done, status=0"
9997
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009998requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009999run_test "SSL async private: sign callback not present" \
10000 "$P_SRV \
10001 async_operations=d async_private_delay1=1 async_private_delay2=1" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +010010002 "$P_CLI force_version=tls12; [ \$? -eq 1 ] &&
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010003 $P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
10004 0 \
10005 -S "Async sign callback" \
10006 -s "! mbedtls_ssl_handshake returned" \
10007 -s "The own private key or pre-shared key is not set, but needed" \
10008 -s "Async resume (slot [0-9]): decrypt done, status=0" \
10009 -s "Successful connection"
10010
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010011requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010012run_test "SSL async private: decrypt callback not present" \
10013 "$P_SRV debug_level=1 \
10014 async_operations=s async_private_delay1=1 async_private_delay2=1" \
10015 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA;
Ronald Cronc5649382023-04-04 15:33:42 +020010016 [ \$? -eq 1 ] && $P_CLI force_version=tls12" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010017 0 \
10018 -S "Async decrypt callback" \
10019 -s "! mbedtls_ssl_handshake returned" \
10020 -s "got no RSA private key" \
10021 -s "Async resume (slot [0-9]): sign done, status=0" \
10022 -s "Successful connection"
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010023
10024# key1: ECDSA, key2: RSA; use key1 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010025requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010026run_test "SSL async private: slot 0 used with key1" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010027 "$P_SRV \
10028 async_operations=s async_private_delay1=1 \
David Horstmann184c4f02024-07-01 17:01:28 +010010029 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
10030 key_file2=$DATA_FILES_PATH/server2.key crt_file2=$DATA_FILES_PATH/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010031 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
10032 0 \
10033 -s "Async sign callback: using key slot 0," \
10034 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010035 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010036
10037# key1: ECDSA, key2: RSA; use key2 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010038requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010039run_test "SSL async private: slot 0 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010040 "$P_SRV \
10041 async_operations=s async_private_delay2=1 \
David Horstmann184c4f02024-07-01 17:01:28 +010010042 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
10043 key_file2=$DATA_FILES_PATH/server2.key crt_file2=$DATA_FILES_PATH/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010044 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
10045 0 \
10046 -s "Async sign callback: using key slot 0," \
10047 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010048 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010049
10050# key1: ECDSA, key2: RSA; use key2 from slot 1
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010051requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinead28bf02018-04-26 00:19:16 +020010052run_test "SSL async private: slot 1 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010053 "$P_SRV \
Gilles Peskine168dae82018-04-25 23:35:42 +020010054 async_operations=s async_private_delay1=1 async_private_delay2=1 \
David Horstmann184c4f02024-07-01 17:01:28 +010010055 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
10056 key_file2=$DATA_FILES_PATH/server2.key crt_file2=$DATA_FILES_PATH/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010057 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
10058 0 \
10059 -s "Async sign callback: using key slot 1," \
10060 -s "Async resume (slot 1): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010061 -s "Async resume (slot 1): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010062
10063# key1: ECDSA, key2: RSA; use key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010064requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010065run_test "SSL async private: fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010066 "$P_SRV \
10067 async_operations=s async_private_delay1=1 \
David Horstmann184c4f02024-07-01 17:01:28 +010010068 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
10069 key_file2=$DATA_FILES_PATH/server2.key crt_file2=$DATA_FILES_PATH/server2.crt " \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010070 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
10071 0 \
10072 -s "Async sign callback: no key matches this certificate."
10073
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010074requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +020010075run_test "SSL async private: sign, error in start" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +010010076 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010077 async_operations=s async_private_delay1=1 async_private_delay2=1 \
10078 async_private_error=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010079 "$P_CLI" \
10080 1 \
10081 -s "Async sign callback: injected error" \
10082 -S "Async resume" \
Gilles Peskine37289cd2018-04-27 11:50:14 +020010083 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010084 -s "! mbedtls_ssl_handshake returned"
10085
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010086requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +020010087run_test "SSL async private: sign, cancel after start" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +010010088 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010089 async_operations=s async_private_delay1=1 async_private_delay2=1 \
10090 async_private_error=2" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010091 "$P_CLI" \
10092 1 \
10093 -s "Async sign callback: using key slot " \
10094 -S "Async resume" \
10095 -s "Async cancel"
10096
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010097requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +020010098run_test "SSL async private: sign, error in resume" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +010010099 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010100 async_operations=s async_private_delay1=1 async_private_delay2=1 \
10101 async_private_error=3" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010102 "$P_CLI" \
10103 1 \
10104 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010105 -s "Async resume callback: sign done but injected error" \
Gilles Peskine37289cd2018-04-27 11:50:14 +020010106 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010107 -s "! mbedtls_ssl_handshake returned"
10108
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010109requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +020010110run_test "SSL async private: decrypt, error in start" \
10111 "$P_SRV \
10112 async_operations=d async_private_delay1=1 async_private_delay2=1 \
10113 async_private_error=1" \
10114 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
10115 1 \
10116 -s "Async decrypt callback: injected error" \
10117 -S "Async resume" \
10118 -S "Async cancel" \
10119 -s "! mbedtls_ssl_handshake returned"
10120
10121requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
10122run_test "SSL async private: decrypt, cancel after start" \
10123 "$P_SRV \
10124 async_operations=d async_private_delay1=1 async_private_delay2=1 \
10125 async_private_error=2" \
10126 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
10127 1 \
10128 -s "Async decrypt callback: using key slot " \
10129 -S "Async resume" \
10130 -s "Async cancel"
10131
10132requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
10133run_test "SSL async private: decrypt, error in resume" \
10134 "$P_SRV \
10135 async_operations=d async_private_delay1=1 async_private_delay2=1 \
10136 async_private_error=3" \
10137 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
10138 1 \
10139 -s "Async decrypt callback: using key slot " \
10140 -s "Async resume callback: decrypt done but injected error" \
10141 -S "Async cancel" \
10142 -s "! mbedtls_ssl_handshake returned"
10143
10144requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +010010145run_test "SSL async private: cancel after start then operate correctly" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +010010146 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010147 async_operations=s async_private_delay1=1 async_private_delay2=1 \
10148 async_private_error=-2" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +010010149 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
10150 0 \
10151 -s "Async cancel" \
10152 -s "! mbedtls_ssl_handshake returned" \
10153 -s "Async resume" \
10154 -s "Successful connection"
10155
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010156requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +010010157run_test "SSL async private: error in resume then operate correctly" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +010010158 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010159 async_operations=s async_private_delay1=1 async_private_delay2=1 \
10160 async_private_error=-3" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +010010161 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
10162 0 \
10163 -s "! mbedtls_ssl_handshake returned" \
10164 -s "Async resume" \
10165 -s "Successful connection"
10166
10167# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010168requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Valerio Setti3f2309f2023-02-23 13:47:30 +010010169# Note: the function "detect_required_features()" is not able to detect more than
10170# one "force_ciphersuite" per client/server and it only picks the 2nd one.
10171# Therefore the 1st one is added explicitly here
Valerio Settid1f991c2023-02-22 12:54:13 +010010172requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Gilles Peskine60ee4ca2018-01-08 11:28:05 +010010173run_test "SSL async private: cancel after start then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010174 "$P_SRV \
10175 async_operations=s async_private_delay1=1 async_private_error=-2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010176 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
10177 key_file2=$DATA_FILES_PATH/server2.key crt_file2=$DATA_FILES_PATH/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +010010178 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
10179 [ \$? -eq 1 ] &&
10180 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
10181 0 \
Gilles Peskinededa75a2018-04-30 10:02:45 +020010182 -s "Async sign callback: using key slot 0" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +010010183 -S "Async resume" \
10184 -s "Async cancel" \
10185 -s "! mbedtls_ssl_handshake returned" \
10186 -s "Async sign callback: no key matches this certificate." \
10187 -s "Successful connection"
10188
10189# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010190requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Valerio Setti3f2309f2023-02-23 13:47:30 +010010191# Note: the function "detect_required_features()" is not able to detect more than
10192# one "force_ciphersuite" per client/server and it only picks the 2nd one.
10193# Therefore the 1st one is added explicitly here
Valerio Settid1f991c2023-02-22 12:54:13 +010010194requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Gilles Peskine725f1cb2018-06-12 15:06:40 +020010195run_test "SSL async private: sign, error in resume then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010196 "$P_SRV \
10197 async_operations=s async_private_delay1=1 async_private_error=-3 \
David Horstmann184c4f02024-07-01 17:01:28 +010010198 key_file=$DATA_FILES_PATH/server5.key crt_file=$DATA_FILES_PATH/server5.crt \
10199 key_file2=$DATA_FILES_PATH/server2.key crt_file2=$DATA_FILES_PATH/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +010010200 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
10201 [ \$? -eq 1 ] &&
10202 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
10203 0 \
10204 -s "Async resume" \
10205 -s "! mbedtls_ssl_handshake returned" \
10206 -s "Async sign callback: no key matches this certificate." \
10207 -s "Successful connection"
10208
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010209requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010210requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +020010211run_test "SSL async private: renegotiation: client-initiated, sign" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +010010212 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010213 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010214 exchanges=2 renegotiation=1" \
10215 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1" \
10216 0 \
10217 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010218 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010219
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010220requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010221requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +020010222run_test "SSL async private: renegotiation: server-initiated, sign" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +010010223 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010224 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010225 exchanges=2 renegotiation=1 renegotiate=1" \
10226 "$P_CLI exchanges=2 renegotiation=1" \
10227 0 \
10228 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010229 -s "Async resume (slot [0-9]): sign done, status=0"
10230
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010231requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010232requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +020010233run_test "SSL async private: renegotiation: client-initiated, decrypt" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010234 "$P_SRV \
10235 async_operations=d async_private_delay1=1 async_private_delay2=1 \
10236 exchanges=2 renegotiation=1" \
10237 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1 \
10238 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
10239 0 \
10240 -s "Async decrypt callback: using key slot " \
10241 -s "Async resume (slot [0-9]): decrypt done, status=0"
10242
Gilles Peskineb74a1c72018-04-24 13:09:22 +020010243requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010244requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +020010245run_test "SSL async private: renegotiation: server-initiated, decrypt" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +010010246 "$P_SRV \
10247 async_operations=d async_private_delay1=1 async_private_delay2=1 \
10248 exchanges=2 renegotiation=1 renegotiate=1" \
10249 "$P_CLI exchanges=2 renegotiation=1 \
10250 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
10251 0 \
10252 -s "Async decrypt callback: using key slot " \
10253 -s "Async resume (slot [0-9]): decrypt done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +010010254
Ron Eldor58093c82018-06-28 13:22:05 +030010255# Tests for ECC extensions (rfc 4492)
10256
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040010257requires_hash_alg SHA_256
Ron Eldor643df7c2018-06-28 16:17:00 +030010258requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +030010259run_test "Force a non ECC ciphersuite in the client side" \
10260 "$P_SRV debug_level=3" \
Ron Eldor643df7c2018-06-28 16:17:00 +030010261 "$P_CLI debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +030010262 0 \
Jerry Yu136320b2021-12-21 17:09:00 +080010263 -C "client hello, adding supported_groups extension" \
Ron Eldor58093c82018-06-28 13:22:05 +030010264 -C "client hello, adding supported_point_formats extension" \
10265 -S "found supported elliptic curves extension" \
10266 -S "found supported point formats extension"
10267
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040010268requires_hash_alg SHA_256
Ron Eldor643df7c2018-06-28 16:17:00 +030010269requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +030010270run_test "Force a non ECC ciphersuite in the server side" \
Ron Eldor643df7c2018-06-28 16:17:00 +030010271 "$P_SRV debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +030010272 "$P_CLI debug_level=3" \
10273 0 \
10274 -C "found supported_point_formats extension" \
10275 -S "server hello, supported_point_formats extension"
10276
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040010277requires_hash_alg SHA_256
Ron Eldor58093c82018-06-28 13:22:05 +030010278run_test "Force an ECC ciphersuite in the client side" \
10279 "$P_SRV debug_level=3" \
10280 "$P_CLI debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
10281 0 \
Jerry Yu136320b2021-12-21 17:09:00 +080010282 -c "client hello, adding supported_groups extension" \
Ron Eldor58093c82018-06-28 13:22:05 +030010283 -c "client hello, adding supported_point_formats extension" \
10284 -s "found supported elliptic curves extension" \
10285 -s "found supported point formats extension"
10286
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040010287requires_hash_alg SHA_256
Ron Eldor58093c82018-06-28 13:22:05 +030010288run_test "Force an ECC ciphersuite in the server side" \
10289 "$P_SRV debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
10290 "$P_CLI debug_level=3" \
10291 0 \
10292 -c "found supported_point_formats extension" \
10293 -s "server hello, supported_point_formats extension"
10294
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +020010295# Tests for DTLS HelloVerifyRequest
10296
Jerry Yuab082902021-12-23 18:02:22 +080010297requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +020010298run_test "DTLS cookie: enabled" \
10299 "$P_SRV dtls=1 debug_level=2" \
10300 "$P_CLI dtls=1 debug_level=2" \
10301 0 \
10302 -s "cookie verification failed" \
10303 -s "cookie verification passed" \
10304 -S "cookie verification skipped" \
10305 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +020010306 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +020010307 -S "SSL - The requested feature is not available"
10308
Jerry Yuab082902021-12-23 18:02:22 +080010309requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +020010310run_test "DTLS cookie: disabled" \
10311 "$P_SRV dtls=1 debug_level=2 cookies=0" \
10312 "$P_CLI dtls=1 debug_level=2" \
10313 0 \
10314 -S "cookie verification failed" \
10315 -S "cookie verification passed" \
10316 -s "cookie verification skipped" \
10317 -C "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +020010318 -S "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +020010319 -S "SSL - The requested feature is not available"
10320
Jerry Yuab082902021-12-23 18:02:22 +080010321requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +020010322run_test "DTLS cookie: default (failing)" \
10323 "$P_SRV dtls=1 debug_level=2 cookies=-1" \
10324 "$P_CLI dtls=1 debug_level=2 hs_timeout=100-400" \
10325 1 \
10326 -s "cookie verification failed" \
10327 -S "cookie verification passed" \
10328 -S "cookie verification skipped" \
10329 -C "received hello verify request" \
10330 -S "hello verification requested" \
10331 -s "SSL - The requested feature is not available"
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +020010332
10333requires_ipv6
Jerry Yuab082902021-12-23 18:02:22 +080010334requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +020010335run_test "DTLS cookie: enabled, IPv6" \
10336 "$P_SRV dtls=1 debug_level=2 server_addr=::1" \
10337 "$P_CLI dtls=1 debug_level=2 server_addr=::1" \
10338 0 \
10339 -s "cookie verification failed" \
10340 -s "cookie verification passed" \
10341 -S "cookie verification skipped" \
10342 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +020010343 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +020010344 -S "SSL - The requested feature is not available"
10345
Jerry Yuab082902021-12-23 18:02:22 +080010346requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +020010347run_test "DTLS cookie: enabled, nbio" \
10348 "$P_SRV dtls=1 nbio=2 debug_level=2" \
10349 "$P_CLI dtls=1 nbio=2 debug_level=2" \
10350 0 \
10351 -s "cookie verification failed" \
10352 -s "cookie verification passed" \
10353 -S "cookie verification skipped" \
10354 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +020010355 -s "hello verification requested" \
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +020010356 -S "SSL - The requested feature is not available"
10357
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010358# Tests for client reconnecting from the same port with DTLS
10359
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +020010360not_with_valgrind # spurious resend
Jerry Yuab082902021-12-23 18:02:22 +080010361requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010362run_test "DTLS client reconnect from same port: reference" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +020010363 "$P_SRV dtls=1 exchanges=2 read_timeout=20000 hs_timeout=10000-20000" \
10364 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010365 0 \
10366 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +020010367 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010368 -S "Client initiated reconnection from same port"
10369
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +020010370not_with_valgrind # spurious resend
Jerry Yuab082902021-12-23 18:02:22 +080010371requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010372run_test "DTLS client reconnect from same port: reconnect" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +020010373 "$P_SRV dtls=1 exchanges=2 read_timeout=20000 hs_timeout=10000-20000" \
10374 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=10000-20000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010375 0 \
10376 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +020010377 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010378 -s "Client initiated reconnection from same port"
10379
Paul Bakker362689d2016-05-13 10:33:25 +010010380not_with_valgrind # server/client too slow to respond in time (next test has higher timeouts)
Jerry Yuab082902021-12-23 18:02:22 +080010381requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Paul Bakker362689d2016-05-13 10:33:25 +010010382run_test "DTLS client reconnect from same port: reconnect, nbio, no valgrind" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +020010383 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 nbio=2" \
10384 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010385 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +020010386 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +020010387 -s "Client initiated reconnection from same port"
10388
Paul Bakker362689d2016-05-13 10:33:25 +010010389only_with_valgrind # Only with valgrind, do previous test but with higher read_timeout and hs_timeout
Jerry Yuab082902021-12-23 18:02:22 +080010390requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Paul Bakker362689d2016-05-13 10:33:25 +010010391run_test "DTLS client reconnect from same port: reconnect, nbio, valgrind" \
10392 "$P_SRV dtls=1 exchanges=2 read_timeout=2000 nbio=2 hs_timeout=1500-6000" \
10393 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=1500-3000 reconnect_hard=1" \
10394 0 \
10395 -S "The operation timed out" \
10396 -s "Client initiated reconnection from same port"
10397
Jerry Yuab082902021-12-23 18:02:22 +080010398requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +020010399run_test "DTLS client reconnect from same port: no cookies" \
10400 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 cookies=0" \
Manuel Pégourié-Gonnard6ad23b92015-09-15 12:57:46 +020010401 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-8000 reconnect_hard=1" \
10402 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +020010403 -s "The operation timed out" \
10404 -S "Client initiated reconnection from same port"
10405
Jerry Yuab082902021-12-23 18:02:22 +080010406requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardbaad2de2020-03-13 11:11:02 +010010407run_test "DTLS client reconnect from same port: attacker-injected" \
10408 -p "$P_PXY inject_clihlo=1" \
10409 "$P_SRV dtls=1 exchanges=2 debug_level=1" \
10410 "$P_CLI dtls=1 exchanges=2" \
10411 0 \
10412 -s "possible client reconnect from the same port" \
10413 -S "Client initiated reconnection from same port"
10414
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +020010415# Tests for various cases of client authentication with DTLS
10416# (focused on handshake flows and message parsing)
10417
Jerry Yuab082902021-12-23 18:02:22 +080010418requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +020010419run_test "DTLS client auth: required" \
10420 "$P_SRV dtls=1 auth_mode=required" \
10421 "$P_CLI dtls=1" \
10422 0 \
10423 -s "Verifying peer X.509 certificate... ok"
10424
Jerry Yuab082902021-12-23 18:02:22 +080010425requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +020010426run_test "DTLS client auth: optional, client has no cert" \
10427 "$P_SRV dtls=1 auth_mode=optional" \
10428 "$P_CLI dtls=1 crt_file=none key_file=none" \
10429 0 \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +010010430 -s "! Certificate was missing"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +020010431
Jerry Yuab082902021-12-23 18:02:22 +080010432requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +010010433run_test "DTLS client auth: none, client has no cert" \
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +020010434 "$P_SRV dtls=1 auth_mode=none" \
10435 "$P_CLI dtls=1 crt_file=none key_file=none debug_level=2" \
10436 0 \
10437 -c "skip write certificate$" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +010010438 -s "! Certificate verification was skipped"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +020010439
Manuel Pégourié-Gonnard0a885742015-08-04 12:08:35 +020010440run_test "DTLS wrong PSK: badmac alert" \
Gilles Peskine77c13e62024-04-29 16:09:52 +020010441 "$P_SRV dtls=1 psk=73776f726466697368 force_ciphersuite=TLS-PSK-WITH-AES-128-GCM-SHA256" \
Gilles Peskinef9f3d212024-05-13 21:06:26 +020010442 "$P_CLI dtls=1 psk=73776f726466697374" \
Manuel Pégourié-Gonnard0a885742015-08-04 12:08:35 +020010443 1 \
10444 -s "SSL - Verification of the message MAC failed" \
10445 -c "SSL - A fatal alert message was received from our peer"
10446
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +020010447# Tests for receiving fragmented handshake messages with DTLS
10448
10449requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010450requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +020010451run_test "DTLS reassembly: no fragmentation (gnutls server)" \
10452 "$G_SRV -u --mtu 2048 -a" \
10453 "$P_CLI dtls=1 debug_level=2" \
10454 0 \
10455 -C "found fragmented DTLS handshake message" \
10456 -C "error"
10457
10458requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010459requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +020010460run_test "DTLS reassembly: some fragmentation (gnutls server)" \
10461 "$G_SRV -u --mtu 512" \
10462 "$P_CLI dtls=1 debug_level=2" \
10463 0 \
10464 -c "found fragmented DTLS handshake message" \
10465 -C "error"
10466
10467requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010468requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +020010469run_test "DTLS reassembly: more fragmentation (gnutls server)" \
10470 "$G_SRV -u --mtu 128" \
10471 "$P_CLI dtls=1 debug_level=2" \
10472 0 \
10473 -c "found fragmented DTLS handshake message" \
10474 -C "error"
10475
10476requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010477requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +020010478run_test "DTLS reassembly: more fragmentation, nbio (gnutls server)" \
10479 "$G_SRV -u --mtu 128" \
10480 "$P_CLI dtls=1 nbio=2 debug_level=2" \
10481 0 \
10482 -c "found fragmented DTLS handshake message" \
10483 -C "error"
10484
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +020010485requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +010010486requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +080010487requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +020010488run_test "DTLS reassembly: fragmentation, renego (gnutls server)" \
10489 "$G_SRV -u --mtu 256" \
10490 "$P_CLI debug_level=3 dtls=1 renegotiation=1 renegotiate=1" \
10491 0 \
10492 -c "found fragmented DTLS handshake message" \
10493 -c "client hello, adding renegotiation extension" \
10494 -c "found renegotiation extension" \
10495 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020010496 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +020010497 -C "error" \
10498 -s "Extra-header:"
10499
10500requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +010010501requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +080010502requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +020010503run_test "DTLS reassembly: fragmentation, nbio, renego (gnutls server)" \
10504 "$G_SRV -u --mtu 256" \
10505 "$P_CLI debug_level=3 nbio=2 dtls=1 renegotiation=1 renegotiate=1" \
10506 0 \
10507 -c "found fragmented DTLS handshake message" \
10508 -c "client hello, adding renegotiation extension" \
10509 -c "found renegotiation extension" \
10510 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020010511 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +020010512 -C "error" \
10513 -s "Extra-header:"
10514
Jerry Yuab082902021-12-23 18:02:22 +080010515requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010516run_test "DTLS reassembly: no fragmentation (openssl server)" \
10517 "$O_SRV -dtls -mtu 2048" \
10518 "$P_CLI dtls=1 debug_level=2" \
10519 0 \
10520 -C "found fragmented DTLS handshake message" \
10521 -C "error"
10522
Jerry Yuab082902021-12-23 18:02:22 +080010523requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010524run_test "DTLS reassembly: some fragmentation (openssl server)" \
Valerio Setti6ba247c2023-03-14 17:13:43 +010010525 "$O_SRV -dtls -mtu 256" \
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010526 "$P_CLI dtls=1 debug_level=2" \
10527 0 \
10528 -c "found fragmented DTLS handshake message" \
10529 -C "error"
10530
Jerry Yuab082902021-12-23 18:02:22 +080010531requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010532run_test "DTLS reassembly: more fragmentation (openssl server)" \
10533 "$O_SRV -dtls -mtu 256" \
10534 "$P_CLI dtls=1 debug_level=2" \
10535 0 \
10536 -c "found fragmented DTLS handshake message" \
10537 -C "error"
10538
Jerry Yuab082902021-12-23 18:02:22 +080010539requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010540run_test "DTLS reassembly: fragmentation, nbio (openssl server)" \
10541 "$O_SRV -dtls -mtu 256" \
10542 "$P_CLI dtls=1 nbio=2 debug_level=2" \
10543 0 \
10544 -c "found fragmented DTLS handshake message" \
10545 -C "error"
10546
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010547# Tests for sending fragmented handshake messages with DTLS
10548#
10549# Use client auth when we need the client to send large messages,
10550# and use large cert chains on both sides too (the long chains we have all use
10551# both RSA and ECDSA, but ideally we should have long chains with either).
10552# Sizes reached (UDP payload):
10553# - 2037B for server certificate
10554# - 1542B for client certificate
10555# - 1013B for newsessionticket
10556# - all others below 512B
10557# All those tests assume MAX_CONTENT_LEN is at least 2048
10558
10559requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10560requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010561requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010562requires_max_content_len 4096
Jerry Yuab082902021-12-23 18:02:22 +080010563requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010564run_test "DTLS fragmenting: none (for reference)" \
10565 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010566 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10567 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010568 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +010010569 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010570 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010571 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10572 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010573 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +010010574 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010575 0 \
10576 -S "found fragmented DTLS handshake message" \
10577 -C "found fragmented DTLS handshake message" \
10578 -C "error"
10579
10580requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10581requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010582requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010583requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010584requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010585run_test "DTLS fragmenting: server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010586 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010587 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10588 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010589 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010590 max_frag_len=1024" \
10591 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010592 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10593 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010594 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010595 max_frag_len=2048" \
10596 0 \
10597 -S "found fragmented DTLS handshake message" \
10598 -c "found fragmented DTLS handshake message" \
10599 -C "error"
10600
Hanno Becker69ca0ad2018-08-24 12:11:35 +010010601# With the MFL extension, the server has no way of forcing
10602# the client to not exceed a certain MTU; hence, the following
10603# test can't be replicated with an MTU proxy such as the one
10604# `client-initiated, server only (max_frag_len)` below.
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010605requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10606requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010607requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010608requires_max_content_len 4096
Jerry Yuab082902021-12-23 18:02:22 +080010609requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010610run_test "DTLS fragmenting: server only (more) (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010611 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010612 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10613 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010614 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010615 max_frag_len=512" \
10616 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010617 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10618 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010619 hs_timeout=2500-60000 \
Hanno Becker69ca0ad2018-08-24 12:11:35 +010010620 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010621 0 \
10622 -S "found fragmented DTLS handshake message" \
10623 -c "found fragmented DTLS handshake message" \
10624 -C "error"
10625
10626requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10627requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010628requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010629requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010630requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010631run_test "DTLS fragmenting: client-initiated, server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010632 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
David Horstmann184c4f02024-07-01 17:01:28 +010010633 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10634 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010635 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010636 max_frag_len=2048" \
10637 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010638 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10639 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010640 hs_timeout=2500-60000 \
10641 max_frag_len=1024" \
10642 0 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010643 -S "found fragmented DTLS handshake message" \
10644 -c "found fragmented DTLS handshake message" \
10645 -C "error"
10646
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010647# While not required by the standard defining the MFL extension
10648# (according to which it only applies to records, not to datagrams),
10649# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
10650# as otherwise there wouldn't be any means to communicate MTU restrictions
10651# to the peer.
10652# The next test checks that no datagrams significantly larger than the
10653# negotiated MFL are sent.
10654requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10655requires_config_enabled MBEDTLS_RSA_C
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010656requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010657requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010658requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010659run_test "DTLS fragmenting: client-initiated, server only (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -040010660 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010661 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
David Horstmann184c4f02024-07-01 17:01:28 +010010662 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10663 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010664 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010665 max_frag_len=2048" \
10666 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010667 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10668 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010669 hs_timeout=2500-60000 \
10670 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010671 0 \
10672 -S "found fragmented DTLS handshake message" \
10673 -c "found fragmented DTLS handshake message" \
10674 -C "error"
10675
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010676requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10677requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010678requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010679requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010680requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010681run_test "DTLS fragmenting: client-initiated, both (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010682 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010683 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10684 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010685 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010686 max_frag_len=2048" \
10687 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010688 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10689 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010690 hs_timeout=2500-60000 \
10691 max_frag_len=1024" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +020010692 0 \
10693 -s "found fragmented DTLS handshake message" \
10694 -c "found fragmented DTLS handshake message" \
10695 -C "error"
10696
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010697# While not required by the standard defining the MFL extension
10698# (according to which it only applies to records, not to datagrams),
10699# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
10700# as otherwise there wouldn't be any means to communicate MTU restrictions
10701# to the peer.
10702# The next test checks that no datagrams significantly larger than the
10703# negotiated MFL are sent.
10704requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10705requires_config_enabled MBEDTLS_RSA_C
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010706requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010707requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010708requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010709run_test "DTLS fragmenting: client-initiated, both (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -040010710 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010711 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010712 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10713 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010714 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010715 max_frag_len=2048" \
10716 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010717 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10718 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010719 hs_timeout=2500-60000 \
10720 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +010010721 0 \
10722 -s "found fragmented DTLS handshake message" \
10723 -c "found fragmented DTLS handshake message" \
10724 -C "error"
10725
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010726requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10727requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010728requires_max_content_len 4096
Jerry Yuab082902021-12-23 18:02:22 +080010729requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010730run_test "DTLS fragmenting: none (for reference) (MTU)" \
10731 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010732 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10733 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010734 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +010010735 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010736 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010737 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10738 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010739 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +010010740 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010741 0 \
10742 -S "found fragmented DTLS handshake message" \
10743 -C "found fragmented DTLS handshake message" \
10744 -C "error"
10745
10746requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10747requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010748requires_max_content_len 4096
Jerry Yuab082902021-12-23 18:02:22 +080010749requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010750run_test "DTLS fragmenting: client (MTU)" \
10751 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010752 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10753 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010754 hs_timeout=3500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +010010755 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010756 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010757 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10758 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010759 hs_timeout=3500-60000 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010760 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010761 0 \
10762 -s "found fragmented DTLS handshake message" \
10763 -C "found fragmented DTLS handshake message" \
10764 -C "error"
10765
10766requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10767requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010768requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010769requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010770run_test "DTLS fragmenting: server (MTU)" \
10771 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010772 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10773 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010774 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010775 mtu=512" \
10776 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010777 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10778 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010779 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010780 mtu=2048" \
10781 0 \
10782 -S "found fragmented DTLS handshake message" \
10783 -c "found fragmented DTLS handshake message" \
10784 -C "error"
10785
10786requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10787requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010788requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010789requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andrzej Kurek7311c782018-10-11 06:49:41 -040010790run_test "DTLS fragmenting: both (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010791 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010792 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010793 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10794 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010795 hs_timeout=2500-60000 \
Andrzej Kurek95805282018-10-11 08:55:37 -040010796 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010797 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010798 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10799 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010800 hs_timeout=2500-60000 \
10801 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +020010802 0 \
10803 -s "found fragmented DTLS handshake message" \
10804 -c "found fragmented DTLS handshake message" \
10805 -C "error"
10806
Andrzej Kurek77826052018-10-11 07:34:08 -040010807# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -040010808requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10809requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040010810requires_hash_alg SHA_256
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010811requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -040010812run_test "DTLS fragmenting: both (MTU=512)" \
Hanno Becker8d832182018-03-15 10:14:19 +000010813 -p "$P_PXY mtu=512" \
Hanno Becker72a4f032017-11-15 16:39:20 +000010814 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010815 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10816 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010817 hs_timeout=2500-60000 \
Hanno Becker72a4f032017-11-15 16:39:20 +000010818 mtu=512" \
10819 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010820 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10821 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010822 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
10823 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010824 mtu=512" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020010825 0 \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010826 -s "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010827 -c "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010828 -C "error"
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010829
Andrzej Kurek7311c782018-10-11 06:49:41 -040010830# Test for automatic MTU reduction on repeated resend.
Andrzej Kurek77826052018-10-11 07:34:08 -040010831# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -040010832# The ratio of max/min timeout should ideally equal 4 to accept two
10833# retransmissions, but in some cases (like both the server and client using
10834# fragmentation and auto-reduction) an extra retransmission might occur,
10835# hence the ratio of 8.
Hanno Becker37029eb2018-08-29 17:01:40 +010010836not_with_valgrind
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +020010837requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10838requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010839requires_max_content_len 2048
Gilles Peskine0d8b86a2019-09-20 18:03:11 +020010840run_test "DTLS fragmenting: proxy MTU: auto-reduction (not valgrind)" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +020010841 -p "$P_PXY mtu=508" \
10842 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010843 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10844 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010845 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +020010846 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010847 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10848 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010849 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
10850 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +020010851 0 \
10852 -s "found fragmented DTLS handshake message" \
10853 -c "found fragmented DTLS handshake message" \
10854 -C "error"
10855
Andrzej Kurek77826052018-10-11 07:34:08 -040010856# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Hanno Becker108992e2018-08-29 17:04:18 +010010857only_with_valgrind
10858requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10859requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010860requires_max_content_len 2048
Gilles Peskine0d8b86a2019-09-20 18:03:11 +020010861run_test "DTLS fragmenting: proxy MTU: auto-reduction (with valgrind)" \
Hanno Becker108992e2018-08-29 17:04:18 +010010862 -p "$P_PXY mtu=508" \
10863 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010864 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10865 key_file=$DATA_FILES_PATH/server7.key \
Hanno Becker108992e2018-08-29 17:04:18 +010010866 hs_timeout=250-10000" \
10867 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010868 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10869 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010870 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Hanno Becker108992e2018-08-29 17:04:18 +010010871 hs_timeout=250-10000" \
10872 0 \
10873 -s "found fragmented DTLS handshake message" \
10874 -c "found fragmented DTLS handshake message" \
10875 -C "error"
10876
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010877# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
Manuel Pégourié-Gonnard3d183ce2018-08-22 09:56:22 +020010878# OTOH the client might resend if the server is to slow to reset after sending
10879# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -040010880not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010881requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10882requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010883requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010884requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andrzej Kurek7311c782018-10-11 06:49:41 -040010885run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010886 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010887 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010888 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10889 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010890 hs_timeout=10000-60000 \
10891 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010892 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010893 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10894 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010895 hs_timeout=10000-60000 \
10896 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010897 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -040010898 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010899 -s "found fragmented DTLS handshake message" \
10900 -c "found fragmented DTLS handshake message" \
10901 -C "error"
10902
Andrzej Kurek77826052018-10-11 07:34:08 -040010903# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -040010904# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
10905# OTOH the client might resend if the server is to slow to reset after sending
10906# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -040010907not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020010908requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10909requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010910requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -040010911run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=512)" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020010912 -p "$P_PXY mtu=512" \
10913 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010914 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10915 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010916 hs_timeout=10000-60000 \
10917 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020010918 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010919 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10920 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010921 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
10922 hs_timeout=10000-60000 \
10923 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020010924 0 \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010925 -S "autoreduction" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020010926 -s "found fragmented DTLS handshake message" \
10927 -c "found fragmented DTLS handshake message" \
10928 -C "error"
10929
Andrzej Kurek7311c782018-10-11 06:49:41 -040010930not_with_valgrind # spurious autoreduction due to timeout
10931requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10932requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010933requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +080010934requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andrzej Kurek7311c782018-10-11 06:49:41 -040010935run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010936 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010937 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010938 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10939 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010940 hs_timeout=10000-60000 \
10941 mtu=1024 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010942 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010943 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10944 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010945 hs_timeout=10000-60000 \
10946 mtu=1024 nbio=2" \
10947 0 \
10948 -S "autoreduction" \
10949 -s "found fragmented DTLS handshake message" \
10950 -c "found fragmented DTLS handshake message" \
10951 -C "error"
10952
Andrzej Kurek77826052018-10-11 07:34:08 -040010953# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -040010954not_with_valgrind # spurious autoreduction due to timeout
10955requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10956requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010957requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -040010958run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=512)" \
10959 -p "$P_PXY mtu=512" \
10960 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010961 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10962 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010963 hs_timeout=10000-60000 \
10964 mtu=512 nbio=2" \
10965 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010966 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
10967 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010968 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
10969 hs_timeout=10000-60000 \
10970 mtu=512 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010971 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -040010972 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020010973 -s "found fragmented DTLS handshake message" \
10974 -c "found fragmented DTLS handshake message" \
10975 -C "error"
10976
Andrzej Kurek77826052018-10-11 07:34:08 -040010977# Forcing ciphersuite for this test to fit the MTU of 1450 with full config.
Hanno Beckerb841b4f2018-08-28 10:25:51 +010010978# This ensures things still work after session_reset().
10979# It also exercises the "resumed handshake" flow.
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +020010980# Since we don't support reading fragmented ClientHello yet,
10981# up the MTU to 1450 (larger than ClientHello with session ticket,
10982# but still smaller than client's Certificate to ensure fragmentation).
Andrzej Kurek35f2f302018-10-09 08:52:14 -040010983# An autoreduction on the client-side might happen if the server is
10984# slow to reset, therefore omitting '-C "autoreduction"' below.
Manuel Pégourié-Gonnard2f2d9022018-08-21 12:17:54 +020010985# reco_delay avoids races where the client reconnects before the server has
Andrzej Kurek35f2f302018-10-09 08:52:14 -040010986# resumed listening, which would result in a spurious autoreduction.
10987not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +020010988requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10989requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010990requires_max_content_len 2048
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +020010991run_test "DTLS fragmenting: proxy MTU, resumed handshake" \
10992 -p "$P_PXY mtu=1450" \
10993 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010010994 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
10995 key_file=$DATA_FILES_PATH/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040010996 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +020010997 mtu=1450" \
10998 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010010999 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11000 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011001 hs_timeout=10000-60000 \
Andrzej Kurek7311c782018-10-11 06:49:41 -040011002 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Jerry Yua15af372022-12-05 15:55:24 +080011003 mtu=1450 reconnect=1 skip_close_notify=1 reco_delay=1000" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +020011004 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011005 -S "autoreduction" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +020011006 -s "found fragmented DTLS handshake message" \
11007 -c "found fragmented DTLS handshake message" \
11008 -C "error"
11009
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011010# An autoreduction on the client-side might happen if the server is
11011# slow to reset, therefore omitting '-C "autoreduction"' below.
11012not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011013requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11014requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040011015requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011016requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011017requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011018run_test "DTLS fragmenting: proxy MTU, ChachaPoly renego" \
11019 -p "$P_PXY mtu=512" \
11020 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010011021 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11022 key_file=$DATA_FILES_PATH/server7.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011023 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011024 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011025 mtu=512" \
11026 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011027 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11028 key_file=$DATA_FILES_PATH/server8.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011029 exchanges=2 renegotiation=1 renegotiate=1 \
Ronald Cron60f76662023-11-28 17:52:42 +010011030 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011031 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011032 mtu=512" \
11033 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011034 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011035 -s "found fragmented DTLS handshake message" \
11036 -c "found fragmented DTLS handshake message" \
11037 -C "error"
11038
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011039# An autoreduction on the client-side might happen if the server is
11040# slow to reset, therefore omitting '-C "autoreduction"' below.
11041not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011042requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11043requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040011044requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011045requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011046requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011047run_test "DTLS fragmenting: proxy MTU, AES-GCM renego" \
11048 -p "$P_PXY mtu=512" \
11049 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010011050 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11051 key_file=$DATA_FILES_PATH/server7.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011052 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011053 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011054 mtu=512" \
11055 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011056 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11057 key_file=$DATA_FILES_PATH/server8.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011058 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -040011059 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011060 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011061 mtu=512" \
11062 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011063 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011064 -s "found fragmented DTLS handshake message" \
11065 -c "found fragmented DTLS handshake message" \
11066 -C "error"
11067
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011068# An autoreduction on the client-side might happen if the server is
11069# slow to reset, therefore omitting '-C "autoreduction"' below.
11070not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011071requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11072requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040011073requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011074requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011075requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011076run_test "DTLS fragmenting: proxy MTU, AES-CCM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011077 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011078 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010011079 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11080 key_file=$DATA_FILES_PATH/server7.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011081 exchanges=2 renegotiation=1 \
11082 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011083 hs_timeout=10000-60000 \
11084 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011085 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011086 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11087 key_file=$DATA_FILES_PATH/server8.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011088 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011089 hs_timeout=10000-60000 \
11090 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011091 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011092 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011093 -s "found fragmented DTLS handshake message" \
11094 -c "found fragmented DTLS handshake message" \
11095 -C "error"
11096
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011097# An autoreduction on the client-side might happen if the server is
11098# slow to reset, therefore omitting '-C "autoreduction"' below.
11099not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011100requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11101requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040011102requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011103requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011104requires_config_enabled MBEDTLS_SSL_ENCRYPT_THEN_MAC
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011105requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011106run_test "DTLS fragmenting: proxy MTU, AES-CBC EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011107 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011108 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010011109 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11110 key_file=$DATA_FILES_PATH/server7.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011111 exchanges=2 renegotiation=1 \
11112 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011113 hs_timeout=10000-60000 \
11114 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011115 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011116 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11117 key_file=$DATA_FILES_PATH/server8.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011118 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011119 hs_timeout=10000-60000 \
11120 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011121 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011122 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011123 -s "found fragmented DTLS handshake message" \
11124 -c "found fragmented DTLS handshake message" \
11125 -C "error"
11126
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011127# An autoreduction on the client-side might happen if the server is
11128# slow to reset, therefore omitting '-C "autoreduction"' below.
11129not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011130requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11131requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -040011132requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011133requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011134requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011135run_test "DTLS fragmenting: proxy MTU, AES-CBC non-EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011136 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011137 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010011138 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11139 key_file=$DATA_FILES_PATH/server7.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011140 exchanges=2 renegotiation=1 \
11141 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 etm=0 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011142 hs_timeout=10000-60000 \
11143 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011144 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011145 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11146 key_file=$DATA_FILES_PATH/server8.key \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011147 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -040011148 hs_timeout=10000-60000 \
11149 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011150 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -040011151 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +020011152 -s "found fragmented DTLS handshake message" \
11153 -c "found fragmented DTLS handshake message" \
11154 -C "error"
11155
Andrzej Kurek77826052018-10-11 07:34:08 -040011156# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +020011157requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11158requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +020011159client_needs_more_time 2
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011160requires_max_content_len 2048
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +020011161run_test "DTLS fragmenting: proxy MTU + 3d" \
11162 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010011163 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010011164 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11165 key_file=$DATA_FILES_PATH/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +020011166 hs_timeout=250-10000 mtu=512" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010011167 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011168 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11169 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040011170 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +020011171 hs_timeout=250-10000 mtu=512" \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +020011172 0 \
11173 -s "found fragmented DTLS handshake message" \
11174 -c "found fragmented DTLS handshake message" \
11175 -C "error"
11176
Andrzej Kurek77826052018-10-11 07:34:08 -040011177# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020011178requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11179requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020011180client_needs_more_time 2
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011181requires_max_content_len 2048
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020011182run_test "DTLS fragmenting: proxy MTU + 3d, nbio" \
11183 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
11184 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
David Horstmann184c4f02024-07-01 17:01:28 +010011185 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11186 key_file=$DATA_FILES_PATH/server7.key \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020011187 hs_timeout=250-10000 mtu=512 nbio=2" \
11188 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011189 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11190 key_file=$DATA_FILES_PATH/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040011191 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020011192 hs_timeout=250-10000 mtu=512 nbio=2" \
11193 0 \
11194 -s "found fragmented DTLS handshake message" \
11195 -c "found fragmented DTLS handshake message" \
11196 -C "error"
11197
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020011198# interop tests for DTLS fragmentating with reliable connection
11199#
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011200# here and below we just want to test that the we fragment in a way that
11201# pleases other implementations, so we don't need the peer to fragment
11202requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11203requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +020011204requires_gnutls
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011205requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011206run_test "DTLS fragmenting: gnutls server, DTLS 1.2" \
11207 "$G_SRV -u" \
11208 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011209 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11210 key_file=$DATA_FILES_PATH/server8.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000011211 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011212 0 \
11213 -c "fragmenting handshake message" \
11214 -C "error"
11215
Hanno Beckerb9a00862018-08-28 10:20:22 +010011216# We use --insecure for the GnuTLS client because it expects
11217# the hostname / IP it connects to to be the name used in the
11218# certificate obtained from the server. Here, however, it
11219# connects to 127.0.0.1 while our test certificates use 'localhost'
11220# as the server name in the certificate. This will make the
Shaun Case8b0ecbc2021-12-20 21:14:10 -080011221# certificate validation fail, but passing --insecure makes
Hanno Beckerb9a00862018-08-28 10:20:22 +010011222# GnuTLS continue the connection nonetheless.
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011223requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11224requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +020011225requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -040011226requires_not_i686
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011227requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011228run_test "DTLS fragmenting: gnutls client, DTLS 1.2" \
Valerio Setti3b2c0282023-03-08 10:22:29 +010011229 "$P_SRV dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011230 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11231 key_file=$DATA_FILES_PATH/server7.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000011232 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +020011233 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011234 0 \
11235 -s "fragmenting handshake message"
11236
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011237requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11238requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011239requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011240run_test "DTLS fragmenting: openssl server, DTLS 1.2" \
11241 "$O_SRV -dtls1_2 -verify 10" \
11242 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011243 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11244 key_file=$DATA_FILES_PATH/server8.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000011245 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011246 0 \
11247 -c "fragmenting handshake message" \
11248 -C "error"
11249
11250requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11251requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011252requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011253run_test "DTLS fragmenting: openssl client, DTLS 1.2" \
11254 "$P_SRV dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011255 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11256 key_file=$DATA_FILES_PATH/server7.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000011257 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020011258 "$O_CLI -dtls1_2" \
11259 0 \
11260 -s "fragmenting handshake message"
11261
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020011262# interop tests for DTLS fragmentating with unreliable connection
11263#
11264# again we just want to test that the we fragment in a way that
11265# pleases other implementations, so we don't need the peer to fragment
11266requires_gnutls_next
11267requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11268requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +020011269client_needs_more_time 4
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011270requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020011271run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.2" \
11272 -p "$P_PXY drop=8 delay=8 duplicate=8" \
11273 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010011274 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011275 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11276 key_file=$DATA_FILES_PATH/server8.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000011277 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020011278 0 \
11279 -c "fragmenting handshake message" \
11280 -C "error"
11281
11282requires_gnutls_next
11283requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11284requires_config_enabled MBEDTLS_RSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +010011285client_needs_more_time 4
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011286requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +010011287run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.2" \
11288 -p "$P_PXY drop=8 delay=8 duplicate=8" \
11289 "$P_SRV dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011290 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11291 key_file=$DATA_FILES_PATH/server7.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000011292 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
k-stachowiak17a38d32019-02-18 15:29:56 +010011293 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +010011294 0 \
11295 -s "fragmenting handshake message"
11296
Zhangsen Wang91385122022-07-12 01:48:17 +000011297## The test below requires 1.1.1a or higher version of openssl, otherwise
11298## it might trigger a bug due to openssl server (https://github.com/openssl/openssl/issues/6902)
Zhangsen Wang87a9c862022-06-28 06:10:35 +000011299requires_openssl_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +010011300requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11301requires_config_enabled MBEDTLS_RSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +010011302client_needs_more_time 4
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011303requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +010011304run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.2" \
11305 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Zhangsen Wang87a9c862022-06-28 06:10:35 +000011306 "$O_NEXT_SRV -dtls1_2 -verify 10" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +010011307 "$P_CLI dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011308 crt_file=$DATA_FILES_PATH/server8_int-ca2.crt \
11309 key_file=$DATA_FILES_PATH/server8.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000011310 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +010011311 0 \
11312 -c "fragmenting handshake message" \
11313 -C "error"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020011314
Zhangsen Wangd5e8a482022-07-29 07:53:36 +000011315## the test below will time out with certain seed.
Zhangsen Wangbaeffbb2022-07-29 06:34:47 +000011316## The cause is an openssl bug (https://github.com/openssl/openssl/issues/18887)
11317skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020011318requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
11319requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +020011320client_needs_more_time 4
Yuto Takanobc87b1d2021-07-08 15:56:33 +010011321requires_max_content_len 2048
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +020011322run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.2" \
11323 -p "$P_PXY drop=8 delay=8 duplicate=8" \
11324 "$P_SRV dtls=1 debug_level=2 \
David Horstmann184c4f02024-07-01 17:01:28 +010011325 crt_file=$DATA_FILES_PATH/server7_int-ca.crt \
11326 key_file=$DATA_FILES_PATH/server7.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000011327 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +020011328 "$O_CLI -dtls1_2" \
11329 0 \
11330 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020011331
Ron Eldorb4655392018-07-05 18:25:39 +030011332# Tests for DTLS-SRTP (RFC 5764)
11333requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011334requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030011335run_test "DTLS-SRTP all profiles supported" \
11336 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
11337 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11338 0 \
11339 -s "found use_srtp extension" \
11340 -s "found srtp profile" \
11341 -s "selected srtp profile" \
11342 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011343 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011344 -c "client hello, adding use_srtp extension" \
11345 -c "found use_srtp extension" \
11346 -c "found srtp profile" \
11347 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011348 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020011349 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030011350 -C "error"
11351
Johan Pascal9bc50b02020-09-24 12:01:13 +020011352
Ron Eldorb4655392018-07-05 18:25:39 +030011353requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011354requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030011355run_test "DTLS-SRTP server supports all profiles. Client supports one profile." \
11356 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal43f94902020-09-22 12:25:52 +020011357 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=5 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +030011358 0 \
11359 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011360 -s "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
11361 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldorb4655392018-07-05 18:25:39 +030011362 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011363 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011364 -c "client hello, adding use_srtp extension" \
11365 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011366 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldorb4655392018-07-05 18:25:39 +030011367 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011368 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020011369 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030011370 -C "error"
11371
11372requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011373requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011374run_test "DTLS-SRTP server supports one profile. Client supports all profiles." \
Johan Pascal43f94902020-09-22 12:25:52 +020011375 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +030011376 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11377 0 \
11378 -s "found use_srtp extension" \
11379 -s "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +020011380 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030011381 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011382 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011383 -c "client hello, adding use_srtp extension" \
11384 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011385 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030011386 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011387 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020011388 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030011389 -C "error"
11390
11391requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011392requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030011393run_test "DTLS-SRTP server and Client support only one matching profile." \
11394 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11395 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11396 0 \
11397 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011398 -s "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
11399 -s "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030011400 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011401 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011402 -c "client hello, adding use_srtp extension" \
11403 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011404 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030011405 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011406 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020011407 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030011408 -C "error"
11409
11410requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011411requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030011412run_test "DTLS-SRTP server and Client support only one different profile." \
11413 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
Johan Pascal43f94902020-09-22 12:25:52 +020011414 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +030011415 0 \
11416 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011417 -s "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030011418 -S "selected srtp profile" \
11419 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011420 -S "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011421 -c "client hello, adding use_srtp extension" \
11422 -C "found use_srtp extension" \
11423 -C "found srtp profile" \
11424 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011425 -C "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011426 -C "error"
11427
11428requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011429requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030011430run_test "DTLS-SRTP server doesn't support use_srtp extension." \
11431 "$P_SRV dtls=1 debug_level=3" \
11432 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11433 0 \
11434 -s "found use_srtp extension" \
11435 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011436 -S "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011437 -c "client hello, adding use_srtp extension" \
11438 -C "found use_srtp extension" \
11439 -C "found srtp profile" \
11440 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011441 -C "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011442 -C "error"
11443
11444requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011445requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030011446run_test "DTLS-SRTP all profiles supported. mki used" \
11447 "$P_SRV dtls=1 use_srtp=1 support_mki=1 debug_level=3" \
11448 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
11449 0 \
11450 -s "found use_srtp extension" \
11451 -s "found srtp profile" \
11452 -s "selected srtp profile" \
11453 -s "server hello, adding use_srtp extension" \
11454 -s "dumping 'using mki' (8 bytes)" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011455 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030011456 -c "client hello, adding use_srtp extension" \
11457 -c "found use_srtp extension" \
11458 -c "found srtp profile" \
11459 -c "selected srtp profile" \
11460 -c "dumping 'sending mki' (8 bytes)" \
11461 -c "dumping 'received mki' (8 bytes)" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011462 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020011463 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Johan Pascal20c7db32020-10-26 22:45:58 +010011464 -g "find_in_both '^ *DTLS-SRTP mki value: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030011465 -C "error"
11466
11467requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011468requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030011469run_test "DTLS-SRTP all profiles supported. server doesn't support mki." \
11470 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
11471 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
11472 0 \
11473 -s "found use_srtp extension" \
11474 -s "found srtp profile" \
11475 -s "selected srtp profile" \
11476 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011477 -s "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +010011478 -s "DTLS-SRTP no mki value negotiated"\
Ron Eldorb4655392018-07-05 18:25:39 +030011479 -S "dumping 'using mki' (8 bytes)" \
11480 -c "client hello, adding use_srtp extension" \
11481 -c "found use_srtp extension" \
11482 -c "found srtp profile" \
11483 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011484 -c "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +010011485 -c "DTLS-SRTP no mki value negotiated"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020011486 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030011487 -c "dumping 'sending mki' (8 bytes)" \
11488 -C "dumping 'received mki' (8 bytes)" \
11489 -C "error"
11490
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011491requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011492requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011493run_test "DTLS-SRTP all profiles supported. openssl client." \
11494 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
11495 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11496 0 \
11497 -s "found use_srtp extension" \
11498 -s "found srtp profile" \
11499 -s "selected srtp profile" \
11500 -s "server hello, adding use_srtp extension" \
11501 -s "DTLS-SRTP key material is"\
11502 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
11503 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_80"
11504
11505requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011506requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011507run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. openssl client." \
11508 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
11509 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_32:SRTP_AES128_CM_SHA1_80 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11510 0 \
11511 -s "found use_srtp extension" \
11512 -s "found srtp profile" \
11513 -s "selected srtp profile" \
11514 -s "server hello, adding use_srtp extension" \
11515 -s "DTLS-SRTP key material is"\
11516 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
11517 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
11518
11519requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011520requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011521run_test "DTLS-SRTP server supports all profiles. Client supports one profile. openssl client." \
11522 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
11523 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11524 0 \
11525 -s "found use_srtp extension" \
11526 -s "found srtp profile" \
11527 -s "selected srtp profile" \
11528 -s "server hello, adding use_srtp extension" \
11529 -s "DTLS-SRTP key material is"\
11530 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
11531 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
11532
11533requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011534requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011535run_test "DTLS-SRTP server supports one profile. Client supports all profiles. openssl client." \
11536 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11537 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11538 0 \
11539 -s "found use_srtp extension" \
11540 -s "found srtp profile" \
11541 -s "selected srtp profile" \
11542 -s "server hello, adding use_srtp extension" \
11543 -s "DTLS-SRTP key material is"\
11544 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
11545 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
11546
11547requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011548requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011549run_test "DTLS-SRTP server and Client support only one matching profile. openssl client." \
11550 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11551 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11552 0 \
11553 -s "found use_srtp extension" \
11554 -s "found srtp profile" \
11555 -s "selected srtp profile" \
11556 -s "server hello, adding use_srtp extension" \
11557 -s "DTLS-SRTP key material is"\
11558 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
11559 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
11560
11561requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011562requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011563run_test "DTLS-SRTP server and Client support only one different profile. openssl client." \
11564 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=1 debug_level=3" \
11565 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11566 0 \
11567 -s "found use_srtp extension" \
11568 -s "found srtp profile" \
11569 -S "selected srtp profile" \
11570 -S "server hello, adding use_srtp extension" \
11571 -S "DTLS-SRTP key material is"\
11572 -C "SRTP Extension negotiated, profile"
11573
11574requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011575requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011576run_test "DTLS-SRTP server doesn't support use_srtp extension. openssl client" \
11577 "$P_SRV dtls=1 debug_level=3" \
11578 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11579 0 \
11580 -s "found use_srtp extension" \
11581 -S "server hello, adding use_srtp extension" \
11582 -S "DTLS-SRTP key material is"\
11583 -C "SRTP Extension negotiated, profile"
11584
11585requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011586requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011587run_test "DTLS-SRTP all profiles supported. openssl server" \
11588 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11589 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11590 0 \
11591 -c "client hello, adding use_srtp extension" \
11592 -c "found use_srtp extension" \
11593 -c "found srtp profile" \
11594 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
11595 -c "DTLS-SRTP key material is"\
11596 -C "error"
11597
11598requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011599requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011600run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. openssl server." \
11601 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32:SRTP_AES128_CM_SHA1_80 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11602 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11603 0 \
11604 -c "client hello, adding use_srtp extension" \
11605 -c "found use_srtp extension" \
11606 -c "found srtp profile" \
11607 -c "selected srtp profile" \
11608 -c "DTLS-SRTP key material is"\
11609 -C "error"
11610
11611requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011612requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011613run_test "DTLS-SRTP server supports all profiles. Client supports one profile. openssl server." \
11614 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11615 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11616 0 \
11617 -c "client hello, adding use_srtp extension" \
11618 -c "found use_srtp extension" \
11619 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
11620 -c "selected srtp profile" \
11621 -c "DTLS-SRTP key material is"\
11622 -C "error"
11623
11624requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011625requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011626run_test "DTLS-SRTP server supports one profile. Client supports all profiles. openssl server." \
11627 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11628 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11629 0 \
11630 -c "client hello, adding use_srtp extension" \
11631 -c "found use_srtp extension" \
11632 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
11633 -c "selected srtp profile" \
11634 -c "DTLS-SRTP key material is"\
11635 -C "error"
11636
11637requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011638requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011639run_test "DTLS-SRTP server and Client support only one matching profile. openssl server." \
11640 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11641 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11642 0 \
11643 -c "client hello, adding use_srtp extension" \
11644 -c "found use_srtp extension" \
11645 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
11646 -c "selected srtp profile" \
11647 -c "DTLS-SRTP key material is"\
11648 -C "error"
11649
11650requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011651requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011652run_test "DTLS-SRTP server and Client support only one different profile. openssl server." \
11653 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11654 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
11655 0 \
11656 -c "client hello, adding use_srtp extension" \
11657 -C "found use_srtp extension" \
11658 -C "found srtp profile" \
11659 -C "selected srtp profile" \
11660 -C "DTLS-SRTP key material is"\
11661 -C "error"
11662
11663requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011664requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011665run_test "DTLS-SRTP server doesn't support use_srtp extension. openssl server" \
11666 "$O_SRV -dtls" \
11667 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11668 0 \
11669 -c "client hello, adding use_srtp extension" \
11670 -C "found use_srtp extension" \
11671 -C "found srtp profile" \
11672 -C "selected srtp profile" \
11673 -C "DTLS-SRTP key material is"\
11674 -C "error"
11675
11676requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080011677requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020011678run_test "DTLS-SRTP all profiles supported. server doesn't support mki. openssl server." \
11679 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
11680 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
11681 0 \
11682 -c "client hello, adding use_srtp extension" \
11683 -c "found use_srtp extension" \
11684 -c "found srtp profile" \
11685 -c "selected srtp profile" \
11686 -c "DTLS-SRTP key material is"\
11687 -c "DTLS-SRTP no mki value negotiated"\
11688 -c "dumping 'sending mki' (8 bytes)" \
11689 -C "dumping 'received mki' (8 bytes)" \
11690 -C "error"
11691
11692requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011693requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011694requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011695run_test "DTLS-SRTP all profiles supported. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020011696 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
11697 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011698 0 \
11699 -s "found use_srtp extension" \
11700 -s "found srtp profile" \
11701 -s "selected srtp profile" \
11702 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011703 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011704 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_80"
11705
11706requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011707requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011708requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011709run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020011710 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
11711 "$G_CLI -u --srtp-profiles=SRTP_NULL_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011712 0 \
11713 -s "found use_srtp extension" \
11714 -s "found srtp profile" \
11715 -s "selected srtp profile" \
11716 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011717 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011718 -c "SRTP profile: SRTP_NULL_HMAC_SHA1_80"
11719
11720requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011721requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011722requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011723run_test "DTLS-SRTP server supports all profiles. Client supports one profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020011724 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
11725 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011726 0 \
11727 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011728 -s "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
11729 -s "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011730 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011731 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011732 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_32"
11733
11734requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011735requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011736requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011737run_test "DTLS-SRTP server supports one profile. Client supports all profiles. gnutls client." \
Johan Pascal43f94902020-09-22 12:25:52 +020011738 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor5d991c92019-01-15 18:54:03 +020011739 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011740 0 \
11741 -s "found use_srtp extension" \
11742 -s "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +020011743 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011744 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011745 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011746 -c "SRTP profile: SRTP_NULL_SHA1_32"
11747
11748requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011749requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011750requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011751run_test "DTLS-SRTP server and Client support only one matching profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020011752 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11753 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011754 0 \
11755 -s "found use_srtp extension" \
11756 -s "found srtp profile" \
11757 -s "selected srtp profile" \
11758 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011759 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011760 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_32"
11761
11762requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011763requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011764requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011765run_test "DTLS-SRTP server and Client support only one different profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020011766 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=1 debug_level=3" \
11767 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011768 0 \
11769 -s "found use_srtp extension" \
11770 -s "found srtp profile" \
11771 -S "selected srtp profile" \
11772 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011773 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011774 -C "SRTP profile:"
11775
11776requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011777requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011778requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011779run_test "DTLS-SRTP server doesn't support use_srtp extension. gnutls client" \
Ron Eldor5d991c92019-01-15 18:54:03 +020011780 "$P_SRV dtls=1 debug_level=3" \
11781 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011782 0 \
11783 -s "found use_srtp extension" \
11784 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011785 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011786 -C "SRTP profile:"
11787
11788requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011789requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011790requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011791run_test "DTLS-SRTP all profiles supported. gnutls server" \
11792 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
11793 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11794 0 \
11795 -c "client hello, adding use_srtp extension" \
11796 -c "found use_srtp extension" \
11797 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +020011798 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011799 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011800 -C "error"
11801
11802requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011803requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011804requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011805run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. gnutls server." \
11806 "$G_SRV -u --srtp-profiles=SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
11807 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11808 0 \
11809 -c "client hello, adding use_srtp extension" \
11810 -c "found use_srtp extension" \
11811 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +020011812 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011813 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011814 -C "error"
11815
11816requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011817requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011818requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011819run_test "DTLS-SRTP server supports all profiles. Client supports one profile. gnutls server." \
11820 "$G_SRV -u --srtp-profiles=SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
11821 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11822 0 \
11823 -c "client hello, adding use_srtp extension" \
11824 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011825 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011826 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011827 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011828 -C "error"
11829
11830requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011831requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011832requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011833run_test "DTLS-SRTP server supports one profile. Client supports all profiles. gnutls server." \
11834 "$G_SRV -u --srtp-profiles=SRTP_NULL_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011835 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011836 0 \
11837 -c "client hello, adding use_srtp extension" \
11838 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011839 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011840 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011841 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011842 -C "error"
11843
11844requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011845requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011846requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011847run_test "DTLS-SRTP server and Client support only one matching profile. gnutls server." \
11848 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32" \
11849 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
11850 0 \
11851 -c "client hello, adding use_srtp extension" \
11852 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020011853 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011854 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011855 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011856 -C "error"
11857
11858requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011859requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011860requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011861run_test "DTLS-SRTP server and Client support only one different profile. gnutls server." \
11862 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32" \
Johan Pascal43f94902020-09-22 12:25:52 +020011863 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011864 0 \
11865 -c "client hello, adding use_srtp extension" \
11866 -C "found use_srtp extension" \
11867 -C "found srtp profile" \
11868 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011869 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011870 -C "error"
11871
11872requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011873requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011874requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011875run_test "DTLS-SRTP server doesn't support use_srtp extension. gnutls server" \
11876 "$G_SRV -u" \
11877 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
11878 0 \
11879 -c "client hello, adding use_srtp extension" \
11880 -C "found use_srtp extension" \
11881 -C "found srtp profile" \
11882 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011883 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011884 -C "error"
11885
11886requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020011887requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080011888requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011889run_test "DTLS-SRTP all profiles supported. mki used. gnutls server." \
11890 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
11891 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
11892 0 \
11893 -c "client hello, adding use_srtp extension" \
11894 -c "found use_srtp extension" \
11895 -c "found srtp profile" \
11896 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020011897 -c "DTLS-SRTP key material is"\
Johan Pascal20c7db32020-10-26 22:45:58 +010011898 -c "DTLS-SRTP mki value:"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030011899 -c "dumping 'sending mki' (8 bytes)" \
11900 -c "dumping 'received mki' (8 bytes)" \
11901 -C "error"
11902
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +020011903# Tests for specific things with "unreliable" UDP connection
11904
11905not_with_valgrind # spurious resend due to timeout
Jerry Yuab082902021-12-23 18:02:22 +080011906requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +020011907run_test "DTLS proxy: reference" \
11908 -p "$P_PXY" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +020011909 "$P_SRV dtls=1 debug_level=2 hs_timeout=10000-20000" \
11910 "$P_CLI dtls=1 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +020011911 0 \
11912 -C "replayed record" \
11913 -S "replayed record" \
Hanno Beckerb2a86c32019-07-19 15:43:09 +010011914 -C "Buffer record from epoch" \
11915 -S "Buffer record from epoch" \
11916 -C "ssl_buffer_message" \
11917 -S "ssl_buffer_message" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +020011918 -C "discarding invalid record" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020011919 -S "discarding invalid record" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020011920 -S "resend" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020011921 -s "Extra-header:" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020011922 -c "HTTP/1.0 200 OK"
11923
11924not_with_valgrind # spurious resend due to timeout
Jerry Yuab082902021-12-23 18:02:22 +080011925requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020011926run_test "DTLS proxy: duplicate every packet" \
11927 -p "$P_PXY duplicate=1" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +020011928 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 hs_timeout=10000-20000" \
11929 "$P_CLI dtls=1 dgram_packing=0 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020011930 0 \
11931 -c "replayed record" \
11932 -s "replayed record" \
11933 -c "record from another epoch" \
11934 -s "record from another epoch" \
11935 -S "resend" \
11936 -s "Extra-header:" \
11937 -c "HTTP/1.0 200 OK"
11938
Jerry Yuab082902021-12-23 18:02:22 +080011939requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020011940run_test "DTLS proxy: duplicate every packet, server anti-replay off" \
11941 -p "$P_PXY duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010011942 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 anti_replay=0" \
11943 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020011944 0 \
11945 -c "replayed record" \
11946 -S "replayed record" \
11947 -c "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011948 -s "record from another epoch" \
11949 -c "resend" \
11950 -s "resend" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020011951 -s "Extra-header:" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011952 -c "HTTP/1.0 200 OK"
11953
Jerry Yuab082902021-12-23 18:02:22 +080011954requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020011955run_test "DTLS proxy: multiple records in same datagram" \
11956 -p "$P_PXY pack=50" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010011957 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
11958 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020011959 0 \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011960 -c "next record in same datagram" \
11961 -s "next record in same datagram"
11962
Jerry Yuab082902021-12-23 18:02:22 +080011963requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011964run_test "DTLS proxy: multiple records in same datagram, duplicate every packet" \
11965 -p "$P_PXY pack=50 duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010011966 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
11967 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020011968 0 \
11969 -c "next record in same datagram" \
11970 -s "next record in same datagram"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011971
Jerry Yuab082902021-12-23 18:02:22 +080011972requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020011973run_test "DTLS proxy: inject invalid AD record, default badmac_limit" \
11974 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010011975 "$P_SRV dtls=1 dgram_packing=0 debug_level=1" \
11976 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011977 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020011978 -c "discarding invalid record (mac)" \
11979 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011980 -s "Extra-header:" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020011981 -c "HTTP/1.0 200 OK" \
11982 -S "too many records with bad MAC" \
11983 -S "Verification of the message MAC failed"
11984
Jerry Yuab082902021-12-23 18:02:22 +080011985requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020011986run_test "DTLS proxy: inject invalid AD record, badmac_limit 1" \
11987 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010011988 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=1" \
11989 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020011990 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020011991 -C "discarding invalid record (mac)" \
11992 -S "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020011993 -S "Extra-header:" \
11994 -C "HTTP/1.0 200 OK" \
11995 -s "too many records with bad MAC" \
11996 -s "Verification of the message MAC failed"
11997
Jerry Yuab082902021-12-23 18:02:22 +080011998requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020011999run_test "DTLS proxy: inject invalid AD record, badmac_limit 2" \
12000 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010012001 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2" \
12002 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020012003 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020012004 -c "discarding invalid record (mac)" \
12005 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020012006 -s "Extra-header:" \
12007 -c "HTTP/1.0 200 OK" \
12008 -S "too many records with bad MAC" \
12009 -S "Verification of the message MAC failed"
12010
Jerry Yuab082902021-12-23 18:02:22 +080012011requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020012012run_test "DTLS proxy: inject invalid AD record, badmac_limit 2, exchanges 2"\
12013 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010012014 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2 exchanges=2" \
12015 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100 exchanges=2" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020012016 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020012017 -c "discarding invalid record (mac)" \
12018 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020012019 -s "Extra-header:" \
12020 -c "HTTP/1.0 200 OK" \
12021 -s "too many records with bad MAC" \
12022 -s "Verification of the message MAC failed"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020012023
Jerry Yuab082902021-12-23 18:02:22 +080012024requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020012025run_test "DTLS proxy: delay ChangeCipherSpec" \
12026 -p "$P_PXY delay_ccs=1" \
Hanno Beckerc4305232018-08-14 13:41:21 +010012027 "$P_SRV dtls=1 debug_level=1 dgram_packing=0" \
12028 "$P_CLI dtls=1 debug_level=1 dgram_packing=0" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020012029 0 \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020012030 -c "record from another epoch" \
12031 -s "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020012032 -s "Extra-header:" \
12033 -c "HTTP/1.0 200 OK"
12034
Hanno Beckeraa5d0c42018-08-16 13:15:19 +010012035# Tests for reordering support with DTLS
12036
Gilles Peskine6f160ca2022-03-14 18:21:24 +010012037requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080012038requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker56cdfd12018-08-17 13:42:15 +010012039run_test "DTLS reordering: Buffer out-of-order handshake message on client" \
12040 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012041 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
12042 hs_timeout=2500-60000" \
12043 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
12044 hs_timeout=2500-60000" \
Hanno Beckere3842212018-08-16 15:28:59 +010012045 0 \
12046 -c "Buffering HS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012047 -c "Next handshake message has been buffered - load"\
12048 -S "Buffering HS message" \
12049 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010012050 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012051 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012052 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012053 -S "Remember CCS message"
Hanno Beckere3842212018-08-16 15:28:59 +010012054
Gilles Peskine6f160ca2022-03-14 18:21:24 +010012055requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080012056requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerdc1e9502018-08-28 16:02:33 +010012057run_test "DTLS reordering: Buffer out-of-order handshake message fragment on client" \
12058 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012059 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
12060 hs_timeout=2500-60000" \
12061 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
12062 hs_timeout=2500-60000" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +010012063 0 \
12064 -c "Buffering HS message" \
12065 -c "found fragmented DTLS handshake message"\
12066 -c "Next handshake message 1 not or only partially bufffered" \
12067 -c "Next handshake message has been buffered - load"\
12068 -S "Buffering HS message" \
12069 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010012070 -C "Injecting buffered CCS message" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +010012071 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012072 -S "Injecting buffered CCS message" \
Hanno Beckeraa5d0c42018-08-16 13:15:19 +010012073 -S "Remember CCS message"
12074
Hanno Beckera1adcca2018-08-24 14:41:07 +010012075# The client buffers the ServerKeyExchange before receiving the fragmented
12076# Certificate message; at the time of writing, together these are aroudn 1200b
12077# in size, so that the bound below ensures that the certificate can be reassembled
12078# while keeping the ServerKeyExchange.
Gilles Peskine6f160ca2022-03-14 18:21:24 +010012079requires_certificate_authentication
Hanno Beckera1adcca2018-08-24 14:41:07 +010012080requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1300
Jerry Yuab082902021-12-23 18:02:22 +080012081requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera1adcca2018-08-24 14:41:07 +010012082run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next" \
Hanno Beckere3567052018-08-21 16:50:43 +010012083 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012084 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
12085 hs_timeout=2500-60000" \
12086 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
12087 hs_timeout=2500-60000" \
Hanno Beckere3567052018-08-21 16:50:43 +010012088 0 \
12089 -c "Buffering HS message" \
12090 -c "Next handshake message has been buffered - load"\
Hanno Beckera1adcca2018-08-24 14:41:07 +010012091 -C "attempt to make space by freeing buffered messages" \
12092 -S "Buffering HS message" \
12093 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010012094 -C "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010012095 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012096 -S "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010012097 -S "Remember CCS message"
12098
12099# The size constraints ensure that the delayed certificate message can't
12100# be reassembled while keeping the ServerKeyExchange message, but it can
12101# when dropping it first.
Gilles Peskine6f160ca2022-03-14 18:21:24 +010012102requires_certificate_authentication
Hanno Beckera1adcca2018-08-24 14:41:07 +010012103requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 900
12104requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1299
Jerry Yuab082902021-12-23 18:02:22 +080012105requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera1adcca2018-08-24 14:41:07 +010012106run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg" \
12107 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012108 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
12109 hs_timeout=2500-60000" \
12110 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
12111 hs_timeout=2500-60000" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010012112 0 \
12113 -c "Buffering HS message" \
12114 -c "attempt to make space by freeing buffered future messages" \
12115 -c "Enough space available after freeing buffered HS messages" \
Hanno Beckere3567052018-08-21 16:50:43 +010012116 -S "Buffering HS message" \
12117 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010012118 -C "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +010012119 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012120 -S "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +010012121 -S "Remember CCS message"
12122
Gilles Peskine6f160ca2022-03-14 18:21:24 +010012123requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080012124requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker56cdfd12018-08-17 13:42:15 +010012125run_test "DTLS reordering: Buffer out-of-order handshake message on server" \
12126 -p "$P_PXY delay_cli=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012127 "$P_SRV dgram_packing=0 auth_mode=required cookies=0 dtls=1 debug_level=2 \
12128 hs_timeout=2500-60000" \
12129 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
12130 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012131 0 \
12132 -C "Buffering HS message" \
12133 -C "Next handshake message has been buffered - load"\
12134 -s "Buffering HS message" \
12135 -s "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012136 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012137 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012138 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012139 -S "Remember CCS message"
12140
Gilles Peskine6f160ca2022-03-14 18:21:24 +010012141requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080012142requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +020012143requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Hanno Becker56cdfd12018-08-17 13:42:15 +010012144run_test "DTLS reordering: Buffer out-of-order CCS message on client"\
12145 -p "$P_PXY delay_srv=NewSessionTicket" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012146 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
12147 hs_timeout=2500-60000" \
12148 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
12149 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012150 0 \
12151 -C "Buffering HS message" \
12152 -C "Next handshake message has been buffered - load"\
12153 -S "Buffering HS message" \
12154 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012155 -c "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012156 -c "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012157 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012158 -S "Remember CCS message"
12159
Gilles Peskine6f160ca2022-03-14 18:21:24 +010012160requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080012161requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker56cdfd12018-08-17 13:42:15 +010012162run_test "DTLS reordering: Buffer out-of-order CCS message on server"\
12163 -p "$P_PXY delay_cli=ClientKeyExchange" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012164 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
12165 hs_timeout=2500-60000" \
12166 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
12167 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012168 0 \
12169 -C "Buffering HS message" \
12170 -C "Next handshake message has been buffered - load"\
12171 -S "Buffering HS message" \
12172 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012173 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012174 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010012175 -s "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012176 -s "Remember CCS message"
12177
Jerry Yuab082902021-12-23 18:02:22 +080012178requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera1adcca2018-08-24 14:41:07 +010012179run_test "DTLS reordering: Buffer encrypted Finished message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012180 -p "$P_PXY delay_ccs=1" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012181 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
12182 hs_timeout=2500-60000" \
12183 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
12184 hs_timeout=2500-60000" \
Hanno Beckerb34149c2018-08-16 15:29:06 +010012185 0 \
12186 -s "Buffer record from epoch 1" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010012187 -s "Found buffered record from current epoch - load" \
12188 -c "Buffer record from epoch 1" \
12189 -c "Found buffered record from current epoch - load"
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012190
Hanno Beckera1adcca2018-08-24 14:41:07 +010012191# In this test, both the fragmented NewSessionTicket and the ChangeCipherSpec
12192# from the server are delayed, so that the encrypted Finished message
12193# is received and buffered. When the fragmented NewSessionTicket comes
12194# in afterwards, the encrypted Finished message must be freed in order
12195# to make space for the NewSessionTicket to be reassembled.
12196# This works only in very particular circumstances:
12197# - MBEDTLS_SSL_DTLS_MAX_BUFFERING must be large enough to allow buffering
12198# of the NewSessionTicket, but small enough to also allow buffering of
12199# the encrypted Finished message.
12200# - The MTU setting on the server must be so small that the NewSessionTicket
12201# needs to be fragmented.
12202# - All messages sent by the server must be small enough to be either sent
12203# without fragmentation or be reassembled within the bounds of
12204# MBEDTLS_SSL_DTLS_MAX_BUFFERING. Achieve this by testing with a PSK-based
12205# handshake, omitting CRTs.
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +020012206requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 190
12207requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 230
Hanno Beckera1adcca2018-08-24 14:41:07 +010012208run_test "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket" \
12209 -p "$P_PXY delay_srv=NewSessionTicket delay_srv=NewSessionTicket delay_ccs=1" \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012210 "$P_SRV mtu=140 response_size=90 dgram_packing=0 psk=73776f726466697368 psk_identity=foo cookies=0 dtls=1 debug_level=2" \
12211 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 psk=73776f726466697368 psk_identity=foo" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010012212 0 \
12213 -s "Buffer record from epoch 1" \
12214 -s "Found buffered record from current epoch - load" \
12215 -c "Buffer record from epoch 1" \
12216 -C "Found buffered record from current epoch - load" \
12217 -c "Enough space available after freeing future epoch record"
12218
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +020012219# Tests for "randomly unreliable connection": try a variety of flows and peers
12220
12221client_needs_more_time 2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020012222run_test "DTLS proxy: 3d (drop, delay, duplicate), \"short\" PSK handshake" \
12223 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Gilles Peskine78df6172024-09-07 19:50:46 +020012224 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012225 psk=73776f726466697368" \
12226 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=73776f726466697368 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012227 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
12228 0 \
12229 -s "Extra-header:" \
12230 -c "HTTP/1.0 200 OK"
12231
Janos Follath74537a62016-09-02 13:45:28 +010012232client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012233run_test "DTLS proxy: 3d, \"short\" RSA handshake" \
12234 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012235 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
12236 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012237 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
12238 0 \
12239 -s "Extra-header:" \
12240 -c "HTTP/1.0 200 OK"
12241
Janos Follath74537a62016-09-02 13:45:28 +010012242client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080012243requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012244run_test "DTLS proxy: 3d, \"short\" (no ticket, no cli_auth) FS handshake" \
12245 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012246 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
12247 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012248 0 \
12249 -s "Extra-header:" \
12250 -c "HTTP/1.0 200 OK"
12251
Janos Follath74537a62016-09-02 13:45:28 +010012252client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080012253requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012254run_test "DTLS proxy: 3d, FS, client auth" \
12255 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012256 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=required" \
12257 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012258 0 \
12259 -s "Extra-header:" \
12260 -c "HTTP/1.0 200 OK"
12261
Janos Follath74537a62016-09-02 13:45:28 +010012262client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080012263requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +020012264requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012265run_test "DTLS proxy: 3d, FS, ticket" \
12266 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012267 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=none" \
12268 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012269 0 \
12270 -s "Extra-header:" \
12271 -c "HTTP/1.0 200 OK"
12272
Janos Follath74537a62016-09-02 13:45:28 +010012273client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080012274requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +020012275requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020012276run_test "DTLS proxy: 3d, max handshake (FS, ticket + client auth)" \
12277 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012278 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=required" \
12279 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020012280 0 \
12281 -s "Extra-header:" \
12282 -c "HTTP/1.0 200 OK"
12283
Janos Follath74537a62016-09-02 13:45:28 +010012284client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080012285requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Norbert Fabritius4f1c9272023-04-12 09:50:30 +020012286requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012287run_test "DTLS proxy: 3d, max handshake, nbio" \
12288 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012289 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020012290 auth_mode=required" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012291 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012292 0 \
12293 -s "Extra-header:" \
12294 -c "HTTP/1.0 200 OK"
12295
Janos Follath74537a62016-09-02 13:45:28 +010012296client_needs_more_time 4
Gilles Peskine2fe796f2022-02-25 19:51:52 +010012297requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020012298run_test "DTLS proxy: 3d, min handshake, resumption" \
12299 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012300 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012301 psk=73776f726466697368 debug_level=3" \
12302 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=73776f726466697368 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +010012303 debug_level=3 reconnect=1 skip_close_notify=1 read_timeout=1000 max_resend=10 \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020012304 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
12305 0 \
12306 -s "a session has been resumed" \
12307 -c "a session has been resumed" \
12308 -s "Extra-header:" \
12309 -c "HTTP/1.0 200 OK"
12310
Janos Follath74537a62016-09-02 13:45:28 +010012311client_needs_more_time 4
Gilles Peskine2fe796f2022-02-25 19:51:52 +010012312requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020012313run_test "DTLS proxy: 3d, min handshake, resumption, nbio" \
12314 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012315 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012316 psk=73776f726466697368 debug_level=3 nbio=2" \
12317 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=73776f726466697368 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +010012318 debug_level=3 reconnect=1 skip_close_notify=1 read_timeout=1000 max_resend=10 \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020012319 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 nbio=2" \
12320 0 \
12321 -s "a session has been resumed" \
12322 -c "a session has been resumed" \
12323 -s "Extra-header:" \
12324 -c "HTTP/1.0 200 OK"
12325
Janos Follath74537a62016-09-02 13:45:28 +010012326client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010012327requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012328run_test "DTLS proxy: 3d, min handshake, client-initiated renego" \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +020012329 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012330 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012331 psk=73776f726466697368 renegotiation=1 debug_level=2" \
12332 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=73776f726466697368 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020012333 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +020012334 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
12335 0 \
12336 -c "=> renegotiate" \
12337 -s "=> renegotiate" \
12338 -s "Extra-header:" \
12339 -c "HTTP/1.0 200 OK"
12340
Janos Follath74537a62016-09-02 13:45:28 +010012341client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010012342requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012343run_test "DTLS proxy: 3d, min handshake, client-initiated renego, nbio" \
12344 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012345 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012346 psk=73776f726466697368 renegotiation=1 debug_level=2" \
12347 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=73776f726466697368 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020012348 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012349 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
12350 0 \
12351 -c "=> renegotiate" \
12352 -s "=> renegotiate" \
12353 -s "Extra-header:" \
12354 -c "HTTP/1.0 200 OK"
12355
Janos Follath74537a62016-09-02 13:45:28 +010012356client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010012357requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020012358run_test "DTLS proxy: 3d, min handshake, server-initiated renego" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020012359 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012360 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012361 psk=73776f726466697368 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020012362 debug_level=2" \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012363 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=73776f726466697368 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020012364 renegotiation=1 exchanges=4 debug_level=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020012365 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
12366 0 \
12367 -c "=> renegotiate" \
12368 -s "=> renegotiate" \
12369 -s "Extra-header:" \
12370 -c "HTTP/1.0 200 OK"
12371
Janos Follath74537a62016-09-02 13:45:28 +010012372client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010012373requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020012374run_test "DTLS proxy: 3d, min handshake, server-initiated renego, nbio" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020012375 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012376 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012377 psk=73776f726466697368 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020012378 debug_level=2 nbio=2" \
Gilles Peskine77c13e62024-04-29 16:09:52 +020012379 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=73776f726466697368 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020012380 renegotiation=1 exchanges=4 debug_level=2 nbio=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020012381 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
12382 0 \
12383 -c "=> renegotiate" \
12384 -s "=> renegotiate" \
12385 -s "Extra-header:" \
12386 -c "HTTP/1.0 200 OK"
12387
Zhangsen Wang87a9c862022-06-28 06:10:35 +000012388## The three tests below require 1.1.1a or higher version of openssl, otherwise
12389## it might trigger a bug due to openssl (https://github.com/openssl/openssl/issues/6902)
12390## Besides, openssl should use dtls1_2 or dtls, otherwise it will cause "SSL alert number 70" error
12391requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010012392client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020012393not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080012394requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020012395run_test "DTLS proxy: 3d, openssl server" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020012396 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Valerio Setti2f8eb622023-03-16 13:04:44 +010012397 "$O_NEXT_SRV -dtls1_2 -mtu 2048" \
12398 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020012399 0 \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020012400 -c "HTTP/1.0 200 OK"
12401
Zhangsen Wang87a9c862022-06-28 06:10:35 +000012402requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010012403client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020012404not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080012405requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020012406run_test "DTLS proxy: 3d, openssl server, fragmentation" \
12407 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Zhangsen Wang87a9c862022-06-28 06:10:35 +000012408 "$O_NEXT_SRV -dtls1_2 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012409 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020012410 0 \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020012411 -c "HTTP/1.0 200 OK"
12412
Zhangsen Wang87a9c862022-06-28 06:10:35 +000012413requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010012414client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020012415not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080012416requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012417run_test "DTLS proxy: 3d, openssl server, fragmentation, nbio" \
12418 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Zhangsen Wang87a9c862022-06-28 06:10:35 +000012419 "$O_NEXT_SRV -dtls1_2 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012420 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2 tickets=0" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012421 0 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012422 -c "HTTP/1.0 200 OK"
12423
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +000012424requires_gnutls
Janos Follath74537a62016-09-02 13:45:28 +010012425client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020012426not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080012427requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020012428run_test "DTLS proxy: 3d, gnutls server" \
12429 -p "$P_PXY drop=5 delay=5 duplicate=5" \
12430 "$G_SRV -u --mtu 2048 -a" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012431 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020012432 0 \
12433 -s "Extra-header:" \
12434 -c "Extra-header:"
12435
k-stachowiak17a38d32019-02-18 15:29:56 +010012436requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +010012437client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020012438not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080012439requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020012440run_test "DTLS proxy: 3d, gnutls server, fragmentation" \
12441 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +010012442 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012443 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020012444 0 \
12445 -s "Extra-header:" \
12446 -c "Extra-header:"
12447
k-stachowiak17a38d32019-02-18 15:29:56 +010012448requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +010012449client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020012450not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080012451requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012452run_test "DTLS proxy: 3d, gnutls server, fragmentation, nbio" \
12453 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +010012454 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040012455 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020012456 0 \
12457 -s "Extra-header:" \
12458 -c "Extra-header:"
12459
Jerry Yuab082902021-12-23 18:02:22 +080012460requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorf75e2522019-05-14 20:38:49 +030012461run_test "export keys functionality" \
12462 "$P_SRV eap_tls=1 debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +010012463 "$P_CLI force_version=tls12 eap_tls=1 debug_level=3" \
Ron Eldorf75e2522019-05-14 20:38:49 +030012464 0 \
Ron Eldor65d8c262019-06-04 13:05:36 +030012465 -c "EAP-TLS key material is:"\
12466 -s "EAP-TLS key material is:"\
12467 -c "EAP-TLS IV is:" \
12468 -s "EAP-TLS IV is:"
Ron Eldorf75e2522019-05-14 20:38:49 +030012469
Jerry Yu04029792021-08-10 16:45:37 +080012470# openssl feature tests: check if tls1.3 exists.
12471requires_openssl_tls1_3
Jerry Yuc502dff2021-12-03 10:04:08 +080012472run_test "TLS 1.3: Test openssl tls1_3 feature" \
Jerry Yu04029792021-08-10 16:45:37 +080012473 "$O_NEXT_SRV -tls1_3 -msg" \
12474 "$O_NEXT_CLI -tls1_3 -msg" \
12475 0 \
12476 -c "TLS 1.3" \
12477 -s "TLS 1.3"
12478
Jerry Yu75261df2021-09-02 17:40:08 +080012479# gnutls feature tests: check if TLS 1.3 is supported as well as the NO_TICKETS and DISABLE_TLS13_COMPAT_MODE options.
Jerry Yu04029792021-08-10 16:45:37 +080012480requires_gnutls_tls1_3
Jerry Yub12d81d2021-08-17 10:56:08 +080012481requires_gnutls_next_no_ticket
12482requires_gnutls_next_disable_tls13_compat
Jerry Yuc502dff2021-12-03 10:04:08 +080012483run_test "TLS 1.3: Test gnutls tls1_3 feature" \
Jerry Yu937ac672021-10-28 17:39:28 +080012484 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE --disable-client-cert " \
Jerry Yub12d81d2021-08-17 10:56:08 +080012485 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Jerry Yu04029792021-08-10 16:45:37 +080012486 0 \
12487 -s "Version: TLS1.3" \
12488 -c "Version: TLS1.3"
12489
Jerry Yuc46e9b42021-08-06 11:22:24 +080012490# TLS1.3 test cases
Ronald Cronb18c67a2023-02-16 16:57:16 +010012491requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
12492requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron4bb67732023-02-16 15:51:18 +010012493requires_ciphersuite_enabled TLS1-3-CHACHA20-POLY1305-SHA256
Valerio Setticf29c5d2023-09-01 09:03:41 +020012494requires_any_configs_enabled "PSA_WANT_ECC_MONTGOMERY_255"
12495requires_any_configs_enabled "PSA_WANT_ECC_SECP_R1_256"
Ronald Cronb18c67a2023-02-16 16:57:16 +010012496run_test "TLS 1.3: Default" \
David Horstmann184c4f02024-07-01 17:01:28 +010012497 "$P_SRV allow_sha1=0 debug_level=3 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key force_version=tls13" \
Ronald Cronb18c67a2023-02-16 16:57:16 +010012498 "$P_CLI allow_sha1=0" \
12499 0 \
12500 -s "Protocol is TLSv1.3" \
Ronald Cron4bb67732023-02-16 15:51:18 +010012501 -s "Ciphersuite is TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020012502 -s "ECDH/FFDH group: " \
Ronald Cronb18c67a2023-02-16 16:57:16 +010012503 -s "selected signature algorithm ecdsa_secp256r1_sha256"
12504
Ronald Cron587cfe62024-02-08 08:56:09 +010012505requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
12506requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
12507requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12508requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
12509run_test "Establish TLS 1.2 then TLS 1.3 session" \
12510 "$P_SRV" \
12511 "( $P_CLI force_version=tls12; \
12512 $P_CLI force_version=tls13 )" \
12513 0 \
12514 -s "Protocol is TLSv1.2" \
12515 -s "Protocol is TLSv1.3" \
12516
Ronald Cron90abb222024-02-08 09:02:49 +010012517requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
12518requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
12519requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12520requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
12521run_test "Establish TLS 1.3 then TLS 1.2 session" \
12522 "$P_SRV" \
12523 "( $P_CLI force_version=tls13; \
12524 $P_CLI force_version=tls12 )" \
12525 0 \
12526 -s "Protocol is TLSv1.3" \
12527 -s "Protocol is TLSv1.2" \
12528
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012529requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron7c0185f2021-11-30 09:16:24 +010012530requires_config_enabled MBEDTLS_DEBUG_C
12531requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012532requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuc502dff2021-12-03 10:04:08 +080012533run_test "TLS 1.3: minimal feature sets - openssl" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012534 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012535 "$P_CLI debug_level=3" \
Jerry Yue1b1e2d2021-10-29 17:46:32 +080012536 0 \
Ronald Cron27c85e72022-03-08 11:37:55 +010012537 -c "client state: MBEDTLS_SSL_HELLO_REQUEST" \
12538 -c "client state: MBEDTLS_SSL_SERVER_HELLO" \
12539 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12540 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
12541 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
12542 -c "client state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12543 -c "client state: MBEDTLS_SSL_SERVER_FINISHED" \
12544 -c "client state: MBEDTLS_SSL_CLIENT_FINISHED" \
12545 -c "client state: MBEDTLS_SSL_FLUSH_BUFFERS" \
12546 -c "client state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
Xiaofei Bai746f9482021-11-12 08:53:56 +000012547 -c "<= ssl_tls13_process_server_hello" \
Ronald Cron4bb67732023-02-16 15:51:18 +010012548 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020012549 -c "DHE group name: " \
Xiaofei Bai746f9482021-11-12 08:53:56 +000012550 -c "=> ssl_tls13_process_server_hello" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012551 -c "<= parse encrypted extensions" \
Jerry Yu834886d2021-10-30 13:26:15 +080012552 -c "Certificate verification flags clear" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012553 -c "=> parse certificate verify" \
12554 -c "<= parse certificate verify" \
XiaokangQiand0aa3e92021-11-10 06:17:40 +000012555 -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
Jerry Yu6d38c192021-11-15 14:01:04 +080012556 -c "<= parse finished message" \
Gilles Peskinec63a1e02022-01-13 01:10:24 +010012557 -c "Protocol is TLSv1.3" \
Jerry Yu6d38c192021-11-15 14:01:04 +080012558 -c "HTTP/1.0 200 ok"
Jerry Yued2ef2d2021-08-19 18:11:43 +080012559
Jerry Yu76e31ec2021-09-22 21:16:27 +080012560requires_gnutls_tls1_3
Jerry Yu937ac672021-10-28 17:39:28 +080012561requires_gnutls_next_no_ticket
Ronald Cron7c0185f2021-11-30 09:16:24 +010012562requires_config_enabled MBEDTLS_DEBUG_C
12563requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012564requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuc502dff2021-12-03 10:04:08 +080012565run_test "TLS 1.3: minimal feature sets - gnutls" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012566 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012567 "$P_CLI debug_level=3" \
Jerry Yue1b1e2d2021-10-29 17:46:32 +080012568 0 \
Ronald Cron27c85e72022-03-08 11:37:55 +010012569 -s "SERVER HELLO was queued" \
12570 -c "client state: MBEDTLS_SSL_HELLO_REQUEST" \
12571 -c "client state: MBEDTLS_SSL_SERVER_HELLO" \
12572 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12573 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
12574 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
12575 -c "client state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12576 -c "client state: MBEDTLS_SSL_SERVER_FINISHED" \
12577 -c "client state: MBEDTLS_SSL_CLIENT_FINISHED" \
12578 -c "client state: MBEDTLS_SSL_FLUSH_BUFFERS" \
12579 -c "client state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
Xiaofei Bai746f9482021-11-12 08:53:56 +000012580 -c "<= ssl_tls13_process_server_hello" \
Ronald Cron4bb67732023-02-16 15:51:18 +010012581 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020012582 -c "DHE group name: " \
Xiaofei Bai746f9482021-11-12 08:53:56 +000012583 -c "=> ssl_tls13_process_server_hello" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012584 -c "<= parse encrypted extensions" \
Jerry Yu834886d2021-10-30 13:26:15 +080012585 -c "Certificate verification flags clear" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012586 -c "=> parse certificate verify" \
12587 -c "<= parse certificate verify" \
XiaokangQiand0aa3e92021-11-10 06:17:40 +000012588 -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
Jerry Yu6d38c192021-11-15 14:01:04 +080012589 -c "<= parse finished message" \
Gilles Peskine860429f2022-02-12 00:44:48 +010012590 -c "Protocol is TLSv1.3" \
Jerry Yu6d38c192021-11-15 14:01:04 +080012591 -c "HTTP/1.0 200 OK"
XiaokangQiand0aa3e92021-11-10 06:17:40 +000012592
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012593requires_openssl_tls1_3_with_compatible_ephemeral
lhuang0486cacac2022-01-21 07:34:27 -080012594requires_config_enabled MBEDTLS_DEBUG_C
12595requires_config_enabled MBEDTLS_SSL_CLI_C
12596requires_config_enabled MBEDTLS_SSL_ALPN
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012597requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
lhuang0486cacac2022-01-21 07:34:27 -080012598run_test "TLS 1.3: alpn - openssl" \
12599 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -alpn h2" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012600 "$P_CLI debug_level=3 alpn=h2" \
lhuang0486cacac2022-01-21 07:34:27 -080012601 0 \
Ronald Cron27c85e72022-03-08 11:37:55 +010012602 -c "client state: MBEDTLS_SSL_HELLO_REQUEST" \
12603 -c "client state: MBEDTLS_SSL_SERVER_HELLO" \
12604 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12605 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
12606 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
12607 -c "client state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12608 -c "client state: MBEDTLS_SSL_SERVER_FINISHED" \
12609 -c "client state: MBEDTLS_SSL_CLIENT_FINISHED" \
12610 -c "client state: MBEDTLS_SSL_FLUSH_BUFFERS" \
12611 -c "client state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
lhuang0486cacac2022-01-21 07:34:27 -080012612 -c "<= ssl_tls13_process_server_hello" \
Ronald Cron4bb67732023-02-16 15:51:18 +010012613 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020012614 -c "DHE group name: " \
lhuang0486cacac2022-01-21 07:34:27 -080012615 -c "=> ssl_tls13_process_server_hello" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012616 -c "<= parse encrypted extensions" \
lhuang0486cacac2022-01-21 07:34:27 -080012617 -c "Certificate verification flags clear" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012618 -c "=> parse certificate verify" \
12619 -c "<= parse certificate verify" \
lhuang0486cacac2022-01-21 07:34:27 -080012620 -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
12621 -c "<= parse finished message" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012622 -c "Protocol is TLSv1.3" \
lhuang0486cacac2022-01-21 07:34:27 -080012623 -c "HTTP/1.0 200 ok" \
12624 -c "Application Layer Protocol is h2"
12625
12626requires_gnutls_tls1_3
12627requires_gnutls_next_no_ticket
lhuang0486cacac2022-01-21 07:34:27 -080012628requires_config_enabled MBEDTLS_DEBUG_C
12629requires_config_enabled MBEDTLS_SSL_CLI_C
12630requires_config_enabled MBEDTLS_SSL_ALPN
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012631requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
lhuang0486cacac2022-01-21 07:34:27 -080012632run_test "TLS 1.3: alpn - gnutls" \
12633 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert --alpn=h2" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012634 "$P_CLI debug_level=3 alpn=h2" \
lhuang0486cacac2022-01-21 07:34:27 -080012635 0 \
Ronald Cron27c85e72022-03-08 11:37:55 +010012636 -s "SERVER HELLO was queued" \
12637 -c "client state: MBEDTLS_SSL_HELLO_REQUEST" \
12638 -c "client state: MBEDTLS_SSL_SERVER_HELLO" \
12639 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12640 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
12641 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
12642 -c "client state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12643 -c "client state: MBEDTLS_SSL_SERVER_FINISHED" \
12644 -c "client state: MBEDTLS_SSL_CLIENT_FINISHED" \
12645 -c "client state: MBEDTLS_SSL_FLUSH_BUFFERS" \
12646 -c "client state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
lhuang0486cacac2022-01-21 07:34:27 -080012647 -c "<= ssl_tls13_process_server_hello" \
Ronald Cron4bb67732023-02-16 15:51:18 +010012648 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020012649 -c "DHE group name: " \
lhuang0486cacac2022-01-21 07:34:27 -080012650 -c "=> ssl_tls13_process_server_hello" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012651 -c "<= parse encrypted extensions" \
lhuang0486cacac2022-01-21 07:34:27 -080012652 -c "Certificate verification flags clear" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012653 -c "=> parse certificate verify" \
12654 -c "<= parse certificate verify" \
lhuang0486cacac2022-01-21 07:34:27 -080012655 -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
12656 -c "<= parse finished message" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012657 -c "Protocol is TLSv1.3" \
lhuang0486cacac2022-01-21 07:34:27 -080012658 -c "HTTP/1.0 200 OK" \
12659 -c "Application Layer Protocol is h2"
12660
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012661requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQianacb39922022-06-17 10:18:48 +000012662requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian95d5f542022-06-24 02:29:26 +000012663requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQianacb39922022-06-17 10:18:48 +000012664requires_config_enabled MBEDTLS_SSL_ALPN
Ronald Cron928cbd32022-10-04 16:14:26 +020012665requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianacb39922022-06-17 10:18:48 +000012666run_test "TLS 1.3: server alpn - openssl" \
David Horstmann184c4f02024-07-01 17:01:28 +010012667 "$P_SRV debug_level=3 tickets=0 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key alpn=h2" \
XiaokangQianacb39922022-06-17 10:18:48 +000012668 "$O_NEXT_CLI -msg -tls1_3 -no_middlebox -alpn h2" \
12669 0 \
XiaokangQianc7403452022-06-23 03:24:12 +000012670 -s "found alpn extension" \
12671 -s "server side, adding alpn extension" \
12672 -s "Protocol is TLSv1.3" \
12673 -s "HTTP/1.0 200 OK" \
12674 -s "Application Layer Protocol is h2"
12675
12676requires_gnutls_tls1_3
XiaokangQianc7403452022-06-23 03:24:12 +000012677requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian95d5f542022-06-24 02:29:26 +000012678requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQianc7403452022-06-23 03:24:12 +000012679requires_config_enabled MBEDTLS_SSL_ALPN
Ronald Cron928cbd32022-10-04 16:14:26 +020012680requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianc7403452022-06-23 03:24:12 +000012681run_test "TLS 1.3: server alpn - gnutls" \
David Horstmann184c4f02024-07-01 17:01:28 +010012682 "$P_SRV debug_level=3 tickets=0 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key alpn=h2" \
XiaokangQianc7403452022-06-23 03:24:12 +000012683 "$G_NEXT_CLI localhost -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V --alpn h2" \
12684 0 \
XiaokangQianacb39922022-06-17 10:18:48 +000012685 -s "found alpn extension" \
12686 -s "server side, adding alpn extension" \
12687 -s "Protocol is TLSv1.3" \
12688 -s "HTTP/1.0 200 OK" \
12689 -s "Application Layer Protocol is h2"
12690
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012691requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaa6214a2022-01-30 19:53:28 +080012692requires_config_enabled MBEDTLS_DEBUG_C
12693requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012694requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012695run_test "TLS 1.3: Client authentication, no client certificate - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080012696 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -verify 10" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012697 "$P_CLI debug_level=4 crt_file=none key_file=none" \
Jerry Yuaa6214a2022-01-30 19:53:28 +080012698 0 \
Jerry Yuaa6214a2022-01-30 19:53:28 +080012699 -c "got a certificate request" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012700 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12701 -s "TLS 1.3" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012702 -c "HTTP/1.0 200 ok" \
12703 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080012704
12705requires_gnutls_tls1_3
12706requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080012707requires_config_enabled MBEDTLS_DEBUG_C
12708requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012709requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012710run_test "TLS 1.3: Client authentication, no client certificate - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080012711 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --verify-client-cert" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012712 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012713 0 \
12714 -c "got a certificate request" \
12715 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE"\
12716 -s "Version: TLS1.3" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012717 -c "HTTP/1.0 200 OK" \
12718 -c "Protocol is TLSv1.3"
12719
Jerry Yuaa6214a2022-01-30 19:53:28 +080012720
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012721requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu960bc282022-01-26 11:12:34 +080012722requires_config_enabled MBEDTLS_DEBUG_C
12723requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012724requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu819f2972022-02-22 10:14:24 +080012725run_test "TLS 1.3: Client authentication, no server middlebox compat - openssl" \
Jerry Yu960bc282022-01-26 11:12:34 +080012726 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10 -no_middlebox" \
David Horstmann184c4f02024-07-01 17:01:28 +010012727 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/cli2.crt key_file=$DATA_FILES_PATH/cli2.key" \
Jerry Yuc19884f2022-01-29 10:44:44 +080012728 0 \
Jerry Yu960bc282022-01-26 11:12:34 +080012729 -c "got a certificate request" \
Jerry Yu200b47b2022-01-28 14:26:30 +080012730 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012731 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12732 -c "Protocol is TLSv1.3"
Jerry Yu960bc282022-01-26 11:12:34 +080012733
12734requires_gnutls_tls1_3
12735requires_gnutls_next_no_ticket
Jerry Yu960bc282022-01-26 11:12:34 +080012736requires_config_enabled MBEDTLS_DEBUG_C
12737requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012738requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu819f2972022-02-22 10:14:24 +080012739run_test "TLS 1.3: Client authentication, no server middlebox compat - gnutls" \
Jerry Yu960bc282022-01-26 11:12:34 +080012740 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
David Horstmann184c4f02024-07-01 17:01:28 +010012741 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/cli2.crt \
12742 key_file=$DATA_FILES_PATH/cli2.key" \
Jerry Yuc19884f2022-01-29 10:44:44 +080012743 0 \
Jerry Yu960bc282022-01-26 11:12:34 +080012744 -c "got a certificate request" \
Jerry Yu200b47b2022-01-28 14:26:30 +080012745 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012746 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12747 -c "Protocol is TLSv1.3"
Jerry Yu200b47b2022-01-28 14:26:30 +080012748
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012749requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu200b47b2022-01-28 14:26:30 +080012750requires_config_enabled MBEDTLS_DEBUG_C
12751requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012752requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012753run_test "TLS 1.3: Client authentication, ecdsa_secp256r1_sha256 - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080012754 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010012755 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/ecdsa_secp256r1.crt \
12756 key_file=$DATA_FILES_PATH/ecdsa_secp256r1.key" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012757 0 \
12758 -c "got a certificate request" \
12759 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012760 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12761 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080012762
12763requires_gnutls_tls1_3
12764requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080012765requires_config_enabled MBEDTLS_DEBUG_C
12766requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012767requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012768run_test "TLS 1.3: Client authentication, ecdsa_secp256r1_sha256 - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080012769 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010012770 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp256r1.crt \
12771 key_file=$DATA_FILES_PATH/ecdsa_secp256r1.key" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012772 0 \
12773 -c "got a certificate request" \
12774 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012775 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12776 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080012777
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012778requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu6c3d8212022-02-18 15:23:23 +080012779requires_config_enabled MBEDTLS_DEBUG_C
12780requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012781requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012782run_test "TLS 1.3: Client authentication, ecdsa_secp384r1_sha384 - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080012783 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010012784 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/ecdsa_secp384r1.crt \
12785 key_file=$DATA_FILES_PATH/ecdsa_secp384r1.key" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012786 0 \
12787 -c "got a certificate request" \
12788 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012789 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12790 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080012791
12792requires_gnutls_tls1_3
12793requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080012794requires_config_enabled MBEDTLS_DEBUG_C
12795requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012796requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012797run_test "TLS 1.3: Client authentication, ecdsa_secp384r1_sha384 - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080012798 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010012799 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp384r1.crt \
12800 key_file=$DATA_FILES_PATH/ecdsa_secp384r1.key" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012801 0 \
12802 -c "got a certificate request" \
12803 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012804 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12805 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080012806
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012807requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu6c3d8212022-02-18 15:23:23 +080012808requires_config_enabled MBEDTLS_DEBUG_C
12809requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012810requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012811run_test "TLS 1.3: Client authentication, ecdsa_secp521r1_sha512 - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080012812 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010012813 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/ecdsa_secp521r1.crt \
12814 key_file=$DATA_FILES_PATH/ecdsa_secp521r1.key" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012815 0 \
12816 -c "got a certificate request" \
12817 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012818 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12819 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080012820
12821requires_gnutls_tls1_3
12822requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080012823requires_config_enabled MBEDTLS_DEBUG_C
12824requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012825requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012826run_test "TLS 1.3: Client authentication, ecdsa_secp521r1_sha512 - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080012827 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010012828 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp521r1.crt \
12829 key_file=$DATA_FILES_PATH/ecdsa_secp521r1.key" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012830 0 \
12831 -c "got a certificate request" \
12832 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012833 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12834 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080012835
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012836requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu6c3d8212022-02-18 15:23:23 +080012837requires_config_enabled MBEDTLS_DEBUG_C
12838requires_config_enabled MBEDTLS_SSL_CLI_C
12839requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012840requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012841run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha256 - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080012842 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010012843 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/cert_sha256.crt \
12844 key_file=$DATA_FILES_PATH/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256" \
Jerry Yu919130c2022-02-23 10:40:19 +080012845 0 \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012846 -c "got a certificate request" \
12847 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012848 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Jerry Yu919130c2022-02-23 10:40:19 +080012849 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080012850
12851requires_gnutls_tls1_3
12852requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080012853requires_config_enabled MBEDTLS_DEBUG_C
12854requires_config_enabled MBEDTLS_SSL_CLI_C
12855requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012856requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080012857run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha256 - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080012858 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010012859 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
12860 key_file=$DATA_FILES_PATH/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256" \
Jerry Yu919130c2022-02-23 10:40:19 +080012861 0 \
Jerry Yu6c3d8212022-02-18 15:23:23 +080012862 -c "got a certificate request" \
12863 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080012864 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Jerry Yu919130c2022-02-23 10:40:19 +080012865 -c "Protocol is TLSv1.3"
Jerry Yu960bc282022-01-26 11:12:34 +080012866
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012867requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu2124d052022-02-18 21:07:18 +080012868requires_config_enabled MBEDTLS_DEBUG_C
12869requires_config_enabled MBEDTLS_SSL_CLI_C
12870requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012871requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu3a58b462022-02-22 16:42:29 +080012872run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha384 - openssl" \
12873 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010012874 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/cert_sha256.crt \
12875 key_file=$DATA_FILES_PATH/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha384" \
Jerry Yu3a58b462022-02-22 16:42:29 +080012876 0 \
12877 -c "got a certificate request" \
12878 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12879 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12880 -c "Protocol is TLSv1.3"
12881
12882requires_gnutls_tls1_3
12883requires_gnutls_next_no_ticket
Jerry Yu3a58b462022-02-22 16:42:29 +080012884requires_config_enabled MBEDTLS_DEBUG_C
12885requires_config_enabled MBEDTLS_SSL_CLI_C
12886requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012887requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu3a58b462022-02-22 16:42:29 +080012888run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha384 - gnutls" \
12889 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010012890 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
12891 key_file=$DATA_FILES_PATH/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha384" \
Jerry Yu3a58b462022-02-22 16:42:29 +080012892 0 \
12893 -c "got a certificate request" \
12894 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12895 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12896 -c "Protocol is TLSv1.3"
12897
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012898requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu3a58b462022-02-22 16:42:29 +080012899requires_config_enabled MBEDTLS_DEBUG_C
12900requires_config_enabled MBEDTLS_SSL_CLI_C
12901requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012902requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu3a58b462022-02-22 16:42:29 +080012903run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha512 - openssl" \
12904 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010012905 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/cert_sha256.crt \
12906 key_file=$DATA_FILES_PATH/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha512" \
Jerry Yu3a58b462022-02-22 16:42:29 +080012907 0 \
12908 -c "got a certificate request" \
12909 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12910 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12911 -c "Protocol is TLSv1.3"
12912
12913requires_gnutls_tls1_3
12914requires_gnutls_next_no_ticket
Jerry Yu3a58b462022-02-22 16:42:29 +080012915requires_config_enabled MBEDTLS_DEBUG_C
12916requires_config_enabled MBEDTLS_SSL_CLI_C
12917requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012918requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu3a58b462022-02-22 16:42:29 +080012919run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha512 - gnutls" \
12920 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010012921 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
12922 key_file=$DATA_FILES_PATH/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha512" \
Jerry Yu3a58b462022-02-22 16:42:29 +080012923 0 \
12924 -c "got a certificate request" \
12925 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12926 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12927 -c "Protocol is TLSv1.3"
12928
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012929requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu3a58b462022-02-22 16:42:29 +080012930requires_config_enabled MBEDTLS_DEBUG_C
12931requires_config_enabled MBEDTLS_SSL_CLI_C
12932requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012933requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuccb005e2022-02-22 17:38:34 +080012934run_test "TLS 1.3: Client authentication, client alg not in server list - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080012935 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10
Jerry Yu2124d052022-02-18 21:07:18 +080012936 -sigalgs ecdsa_secp256r1_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010012937 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp521r1.crt \
12938 key_file=$DATA_FILES_PATH/ecdsa_secp521r1.key sig_algs=ecdsa_secp256r1_sha256,ecdsa_secp521r1_sha512" \
Jerry Yu2124d052022-02-18 21:07:18 +080012939 1 \
12940 -c "got a certificate request" \
12941 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12942 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Xiaokang Qianea3d9332022-12-07 06:19:49 +000012943 -c "no suitable signature algorithm"
Jerry Yu2124d052022-02-18 21:07:18 +080012944
12945requires_gnutls_tls1_3
12946requires_gnutls_next_no_ticket
Jerry Yu2124d052022-02-18 21:07:18 +080012947requires_config_enabled MBEDTLS_DEBUG_C
12948requires_config_enabled MBEDTLS_SSL_CLI_C
12949requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012950requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu819f2972022-02-22 10:14:24 +080012951run_test "TLS 1.3: Client authentication, client alg not in server list - gnutls" \
12952 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:-SIGN-ALL:+SIGN-ECDSA-SECP256R1-SHA256:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010012953 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp521r1.crt \
12954 key_file=$DATA_FILES_PATH/ecdsa_secp521r1.key sig_algs=ecdsa_secp256r1_sha256,ecdsa_secp521r1_sha512" \
Jerry Yu2124d052022-02-18 21:07:18 +080012955 1 \
12956 -c "got a certificate request" \
12957 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12958 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Xiaokang Qianea3d9332022-12-07 06:19:49 +000012959 -c "no suitable signature algorithm"
Jerry Yu2124d052022-02-18 21:07:18 +080012960
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012961# Test using an opaque private key for client authentication
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012962requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012963requires_config_enabled MBEDTLS_DEBUG_C
12964requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012965requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012966run_test "TLS 1.3: Client authentication - opaque key, no server middlebox compat - openssl" \
12967 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10 -no_middlebox" \
David Horstmann184c4f02024-07-01 17:01:28 +010012968 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/cli2.crt key_file=$DATA_FILES_PATH/cli2.key key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012969 0 \
12970 -c "got a certificate request" \
12971 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12972 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12973 -c "Protocol is TLSv1.3"
12974
12975requires_gnutls_tls1_3
12976requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012977requires_config_enabled MBEDTLS_DEBUG_C
12978requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012979requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012980run_test "TLS 1.3: Client authentication - opaque key, no server middlebox compat - gnutls" \
12981 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
David Horstmann184c4f02024-07-01 17:01:28 +010012982 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/cli2.crt \
12983 key_file=$DATA_FILES_PATH/cli2.key key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012984 0 \
12985 -c "got a certificate request" \
12986 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12987 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12988 -c "Protocol is TLSv1.3"
12989
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012990requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012991requires_config_enabled MBEDTLS_DEBUG_C
12992requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020012993requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012994run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp256r1_sha256 - openssl" \
12995 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010012996 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/ecdsa_secp256r1.crt \
12997 key_file=$DATA_FILES_PATH/ecdsa_secp256r1.key key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012998 0 \
12999 -c "got a certificate request" \
13000 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13001 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13002 -c "Protocol is TLSv1.3"
13003
13004requires_gnutls_tls1_3
13005requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013006requires_config_enabled MBEDTLS_DEBUG_C
13007requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013008requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013009run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp256r1_sha256 - gnutls" \
13010 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010013011 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp256r1.crt \
13012 key_file=$DATA_FILES_PATH/ecdsa_secp256r1.key key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013013 0 \
13014 -c "got a certificate request" \
13015 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13016 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13017 -c "Protocol is TLSv1.3"
13018
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013019requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013020requires_config_enabled MBEDTLS_DEBUG_C
13021requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013022requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013023run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp384r1_sha384 - openssl" \
13024 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010013025 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/ecdsa_secp384r1.crt \
13026 key_file=$DATA_FILES_PATH/ecdsa_secp384r1.key key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013027 0 \
13028 -c "got a certificate request" \
13029 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13030 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13031 -c "Protocol is TLSv1.3"
13032
13033requires_gnutls_tls1_3
13034requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013035requires_config_enabled MBEDTLS_DEBUG_C
13036requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013037requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013038run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp384r1_sha384 - gnutls" \
13039 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010013040 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp384r1.crt \
13041 key_file=$DATA_FILES_PATH/ecdsa_secp384r1.key key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013042 0 \
13043 -c "got a certificate request" \
13044 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13045 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13046 -c "Protocol is TLSv1.3"
13047
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013048requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013049requires_config_enabled MBEDTLS_DEBUG_C
13050requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013051requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013052run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp521r1_sha512 - openssl" \
13053 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010013054 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/ecdsa_secp521r1.crt \
13055 key_file=$DATA_FILES_PATH/ecdsa_secp521r1.key key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013056 0 \
13057 -c "got a certificate request" \
13058 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13059 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13060 -c "Protocol is TLSv1.3"
13061
13062requires_gnutls_tls1_3
13063requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013064requires_config_enabled MBEDTLS_DEBUG_C
13065requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013066requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013067run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp521r1_sha512 - gnutls" \
13068 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010013069 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp521r1.crt \
13070 key_file=$DATA_FILES_PATH/ecdsa_secp521r1.key key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013071 0 \
13072 -c "got a certificate request" \
13073 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13074 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13075 -c "Protocol is TLSv1.3"
13076
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013077requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013078requires_config_enabled MBEDTLS_DEBUG_C
13079requires_config_enabled MBEDTLS_SSL_CLI_C
13080requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013081requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013082run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha256 - openssl" \
13083 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010013084 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/cert_sha256.crt \
13085 key_file=$DATA_FILES_PATH/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256 key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013086 0 \
13087 -c "got a certificate request" \
13088 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13089 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13090 -c "Protocol is TLSv1.3"
13091
13092requires_gnutls_tls1_3
13093requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013094requires_config_enabled MBEDTLS_DEBUG_C
13095requires_config_enabled MBEDTLS_SSL_CLI_C
13096requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013097requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013098run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha256 - gnutls" \
13099 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010013100 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
13101 key_file=$DATA_FILES_PATH/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256 key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013102 0 \
13103 -c "got a certificate request" \
13104 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13105 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13106 -c "Protocol is TLSv1.3"
13107
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013108requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013109requires_config_enabled MBEDTLS_DEBUG_C
13110requires_config_enabled MBEDTLS_SSL_CLI_C
13111requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013112requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013113run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha384 - openssl" \
13114 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010013115 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/cert_sha256.crt \
13116 key_file=$DATA_FILES_PATH/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha384 key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013117 0 \
13118 -c "got a certificate request" \
13119 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13120 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13121 -c "Protocol is TLSv1.3"
13122
13123requires_gnutls_tls1_3
13124requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013125requires_config_enabled MBEDTLS_DEBUG_C
13126requires_config_enabled MBEDTLS_SSL_CLI_C
13127requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013128requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013129run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha384 - gnutls" \
13130 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010013131 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
13132 key_file=$DATA_FILES_PATH/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha384 key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013133 0 \
13134 -c "got a certificate request" \
13135 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13136 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13137 -c "Protocol is TLSv1.3"
13138
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013139requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013140requires_config_enabled MBEDTLS_DEBUG_C
13141requires_config_enabled MBEDTLS_SSL_CLI_C
13142requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013143requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013144run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha512 - openssl" \
13145 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
David Horstmann184c4f02024-07-01 17:01:28 +010013146 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/cert_sha256.crt \
13147 key_file=$DATA_FILES_PATH/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha512 key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013148 0 \
13149 -c "got a certificate request" \
13150 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13151 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13152 -c "Protocol is TLSv1.3"
13153
13154requires_gnutls_tls1_3
13155requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013156requires_config_enabled MBEDTLS_DEBUG_C
13157requires_config_enabled MBEDTLS_SSL_CLI_C
13158requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013159requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013160run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha512 - gnutls" \
13161 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010013162 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/server2-sha256.crt \
13163 key_file=$DATA_FILES_PATH/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha512 key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013164 0 \
13165 -c "got a certificate request" \
13166 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13167 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
13168 -c "Protocol is TLSv1.3"
13169
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013170requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013171requires_config_enabled MBEDTLS_DEBUG_C
13172requires_config_enabled MBEDTLS_SSL_CLI_C
13173requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013174requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013175run_test "TLS 1.3: Client authentication - opaque key, client alg not in server list - openssl" \
13176 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10
13177 -sigalgs ecdsa_secp256r1_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010013178 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp521r1.crt \
13179 key_file=$DATA_FILES_PATH/ecdsa_secp521r1.key sig_algs=ecdsa_secp256r1_sha256,ecdsa_secp521r1_sha512 key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013180 1 \
13181 -c "got a certificate request" \
13182 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13183 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Xiaokang Qianea3d9332022-12-07 06:19:49 +000013184 -c "no suitable signature algorithm"
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013185
13186requires_gnutls_tls1_3
13187requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013188requires_config_enabled MBEDTLS_DEBUG_C
13189requires_config_enabled MBEDTLS_SSL_CLI_C
13190requires_config_enabled MBEDTLS_RSA_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013191requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013192run_test "TLS 1.3: Client authentication - opaque key, client alg not in server list - gnutls" \
13193 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:-SIGN-ALL:+SIGN-ECDSA-SECP256R1-SHA256:%NO_TICKETS" \
David Horstmann184c4f02024-07-01 17:01:28 +010013194 "$P_CLI debug_level=3 crt_file=$DATA_FILES_PATH/ecdsa_secp521r1.crt \
13195 key_file=$DATA_FILES_PATH/ecdsa_secp521r1.key sig_algs=ecdsa_secp256r1_sha256,ecdsa_secp521r1_sha512 key_opaque=1" \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013196 1 \
13197 -c "got a certificate request" \
13198 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
13199 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Xiaokang Qianea3d9332022-12-07 06:19:49 +000013200 -c "no suitable signature algorithm"
Neil Armstrong7f6f6722022-04-15 10:09:11 +020013201
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013202requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron7c0185f2021-11-30 09:16:24 +010013203requires_config_enabled MBEDTLS_DEBUG_C
13204requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013205requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crondf5f8682022-04-05 16:01:03 +020013206run_test "TLS 1.3: HRR check, ciphersuite TLS_AES_128_GCM_SHA256 - openssl" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000013207 "$O_NEXT_SRV -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013208 "$P_CLI debug_level=4" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000013209 0 \
13210 -c "received HelloRetryRequest message" \
XiaokangQiana9090612022-01-27 03:48:27 +000013211 -c "<= ssl_tls13_process_server_hello ( HelloRetryRequest )" \
Ronald Cron27c85e72022-03-08 11:37:55 +010013212 -c "client state: MBEDTLS_SSL_CLIENT_HELLO" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013213 -c "Protocol is TLSv1.3" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000013214 -c "HTTP/1.0 200 ok"
13215
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013216requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQian7bae3b62022-01-26 06:31:39 +000013217requires_config_enabled MBEDTLS_DEBUG_C
13218requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013219requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crondf5f8682022-04-05 16:01:03 +020013220run_test "TLS 1.3: HRR check, ciphersuite TLS_AES_256_GCM_SHA384 - openssl" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013221 "$O_NEXT_SRV -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013222 "$P_CLI debug_level=4" \
XiaokangQian6db08dd2022-01-18 06:36:23 +000013223 0 \
Jerry Yu8c5559d2021-11-22 21:15:41 +080013224 -c "received HelloRetryRequest message" \
XiaokangQiana9090612022-01-27 03:48:27 +000013225 -c "<= ssl_tls13_process_server_hello ( HelloRetryRequest )" \
Ronald Cron27c85e72022-03-08 11:37:55 +010013226 -c "client state: MBEDTLS_SSL_CLIENT_HELLO" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013227 -c "Protocol is TLSv1.3" \
XiaokangQian6db08dd2022-01-18 06:36:23 +000013228 -c "HTTP/1.0 200 ok"
Jerry Yu8c5559d2021-11-22 21:15:41 +080013229
13230requires_gnutls_tls1_3
13231requires_gnutls_next_no_ticket
Ronald Cron7c0185f2021-11-30 09:16:24 +010013232requires_config_enabled MBEDTLS_DEBUG_C
13233requires_config_enabled MBEDTLS_SSL_CLI_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020013234requires_config_enabled PSA_WANT_ALG_ECDH
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013235requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crondf5f8682022-04-05 16:01:03 +020013236run_test "TLS 1.3: HRR check, ciphersuite TLS_AES_128_GCM_SHA256 - gnutls" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000013237 "$G_NEXT_SRV -d 4 --priority=NONE:+GROUP-SECP256R1:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS --disable-client-cert" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013238 "$P_CLI debug_level=4" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000013239 0 \
13240 -c "received HelloRetryRequest message" \
XiaokangQiana9090612022-01-27 03:48:27 +000013241 -c "<= ssl_tls13_process_server_hello ( HelloRetryRequest )" \
Ronald Cron27c85e72022-03-08 11:37:55 +010013242 -c "client state: MBEDTLS_SSL_CLIENT_HELLO" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013243 -c "Protocol is TLSv1.3" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000013244 -c "HTTP/1.0 200 OK"
13245
13246requires_gnutls_tls1_3
13247requires_gnutls_next_no_ticket
XiaokangQian7bae3b62022-01-26 06:31:39 +000013248requires_config_enabled MBEDTLS_DEBUG_C
13249requires_config_enabled MBEDTLS_SSL_CLI_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020013250requires_config_enabled PSA_WANT_ALG_ECDH
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013251requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crondf5f8682022-04-05 16:01:03 +020013252run_test "TLS 1.3: HRR check, ciphersuite TLS_AES_256_GCM_SHA384 - gnutls" \
XiaokangQian355e09a2022-01-20 11:14:50 +000013253 "$G_NEXT_SRV -d 4 --priority=NONE:+GROUP-SECP256R1:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS --disable-client-cert" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013254 "$P_CLI debug_level=4" \
XiaokangQian355e09a2022-01-20 11:14:50 +000013255 0 \
Jerry Yu8c5559d2021-11-22 21:15:41 +080013256 -c "received HelloRetryRequest message" \
XiaokangQiana9090612022-01-27 03:48:27 +000013257 -c "<= ssl_tls13_process_server_hello ( HelloRetryRequest )" \
Ronald Cron27c85e72022-03-08 11:37:55 +010013258 -c "client state: MBEDTLS_SSL_CLIENT_HELLO" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013259 -c "Protocol is TLSv1.3" \
XiaokangQian355e09a2022-01-20 11:14:50 +000013260 -c "HTTP/1.0 200 OK"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013261
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013262requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQian5e4528c2022-02-17 07:51:12 +000013263requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQiane8ff3502022-04-22 02:34:40 +000013264requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013265requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian318dc762022-04-20 09:43:51 +000013266run_test "TLS 1.3: Server side check - openssl" \
David Horstmann184c4f02024-07-01 17:01:28 +010013267 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Jerry Yu66220492022-04-23 13:53:36 +080013268 "$O_NEXT_CLI -msg -debug -tls1_3 -no_middlebox" \
Jerry Yu4d8567f2022-04-17 10:57:57 +080013269 0 \
Jerry Yuabf20c72022-04-14 18:36:14 +080013270 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13271 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13272 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
Jerry Yucef55db2022-04-23 11:02:05 +080013273 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yuc8bdbf72022-04-23 12:37:35 +080013274 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
13275 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
Jerry Yu66220492022-04-23 13:53:36 +080013276 -s "tls13 server state: MBEDTLS_SSL_CLIENT_FINISHED" \
Jerry Yu155493d2022-04-25 13:30:18 +080013277 -s "tls13 server state: MBEDTLS_SSL_HANDSHAKE_WRAPUP"
XiaokangQian5e4528c2022-02-17 07:51:12 +000013278
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013279requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQian2f150e12022-04-29 02:01:19 +000013280requires_config_enabled MBEDTLS_DEBUG_C
13281requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013282requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQiana987e1d2022-05-07 01:25:58 +000013283run_test "TLS 1.3: Server side check - openssl with client authentication" \
David Horstmann184c4f02024-07-01 17:01:28 +010013284 "$P_SRV debug_level=4 auth_mode=required crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
13285 "$O_NEXT_CLI -msg -debug -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key -tls1_3 -no_middlebox" \
XiaokangQian9a4e1dd2022-05-26 00:58:11 +000013286 0 \
XiaokangQian2f150e12022-04-29 02:01:19 +000013287 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13288 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13289 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
13290 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
13291 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yuc4505662022-05-10 20:39:21 +080013292 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
13293 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
XiaokangQiana987e1d2022-05-07 01:25:58 +000013294 -s "=> write certificate request" \
XiaokangQian2f150e12022-04-29 02:01:19 +000013295 -s "=> parse client hello" \
13296 -s "<= parse client hello"
13297
XiaokangQian5e4528c2022-02-17 07:51:12 +000013298requires_gnutls_tls1_3
13299requires_gnutls_next_no_ticket
XiaokangQian5e4528c2022-02-17 07:51:12 +000013300requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQiane8ff3502022-04-22 02:34:40 +000013301requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013302requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian318dc762022-04-20 09:43:51 +000013303run_test "TLS 1.3: Server side check - gnutls" \
David Horstmann184c4f02024-07-01 17:01:28 +010013304 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
XiaokangQian3f84d5d2022-04-19 06:36:17 +000013305 "$G_NEXT_CLI localhost -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Jerry Yu66220492022-04-23 13:53:36 +080013306 0 \
Jerry Yuabf20c72022-04-14 18:36:14 +080013307 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13308 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13309 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
Jerry Yucef55db2022-04-23 11:02:05 +080013310 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yuc8bdbf72022-04-23 12:37:35 +080013311 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
13312 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
Jerry Yu66220492022-04-23 13:53:36 +080013313 -s "tls13 server state: MBEDTLS_SSL_CLIENT_FINISHED" \
13314 -s "tls13 server state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
13315 -c "HTTP/1.0 200 OK"
XiaokangQian5e4528c2022-02-17 07:51:12 +000013316
XiaokangQian2f150e12022-04-29 02:01:19 +000013317requires_gnutls_tls1_3
13318requires_gnutls_next_no_ticket
XiaokangQian2f150e12022-04-29 02:01:19 +000013319requires_config_enabled MBEDTLS_DEBUG_C
13320requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013321requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQiana987e1d2022-05-07 01:25:58 +000013322run_test "TLS 1.3: Server side check - gnutls with client authentication" \
David Horstmann184c4f02024-07-01 17:01:28 +010013323 "$P_SRV debug_level=4 auth_mode=required crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
13324 "$G_NEXT_CLI localhost -d 4 --x509certfile $DATA_FILES_PATH/server5.crt --x509keyfile $DATA_FILES_PATH/server5.key --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
XiaokangQianc3017f62022-05-13 05:55:41 +000013325 0 \
XiaokangQian2f150e12022-04-29 02:01:19 +000013326 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13327 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13328 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
13329 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
13330 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yuc4505662022-05-10 20:39:21 +080013331 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
13332 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
XiaokangQiana987e1d2022-05-07 01:25:58 +000013333 -s "=> write certificate request" \
XiaokangQian2f150e12022-04-29 02:01:19 +000013334 -s "=> parse client hello" \
13335 -s "<= parse client hello"
13336
Jerry Yu8b9fd372022-04-14 20:55:12 +080013337requires_config_enabled MBEDTLS_DEBUG_C
13338requires_config_enabled MBEDTLS_SSL_SRV_C
Jerry Yu955ddd72022-04-22 22:27:33 +080013339requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013340requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu8b9fd372022-04-14 20:55:12 +080013341run_test "TLS 1.3: Server side check - mbedtls" \
David Horstmann184c4f02024-07-01 17:01:28 +010013342 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Ronald Cron65f90292023-03-13 17:38:12 +010013343 "$P_CLI debug_level=4" \
XiaokangQianc3017f62022-05-13 05:55:41 +000013344 0 \
Jerry Yu8b9fd372022-04-14 20:55:12 +080013345 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13346 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13347 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
Jerry Yua7abc5e2022-05-11 13:32:03 +080013348 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
Jerry Yucef55db2022-04-23 11:02:05 +080013349 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yua7abc5e2022-05-11 13:32:03 +080013350 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
13351 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
13352 -s "tls13 server state: MBEDTLS_SSL_CLIENT_FINISHED" \
13353 -s "tls13 server state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
13354 -c "HTTP/1.0 200 OK"
Jerry Yu8b9fd372022-04-14 20:55:12 +080013355
XiaokangQian45c22202022-05-06 06:54:09 +000013356requires_config_enabled MBEDTLS_DEBUG_C
13357requires_config_enabled MBEDTLS_SSL_SRV_C
13358requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013359requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQiana987e1d2022-05-07 01:25:58 +000013360run_test "TLS 1.3: Server side check - mbedtls with client authentication" \
David Horstmann184c4f02024-07-01 17:01:28 +010013361 "$P_SRV debug_level=4 auth_mode=required crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
13362 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key" \
XiaokangQianc3017f62022-05-13 05:55:41 +000013363 0 \
XiaokangQian45c22202022-05-06 06:54:09 +000013364 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13365 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13366 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
13367 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yua7abc5e2022-05-11 13:32:03 +080013368 -s "=> write certificate request" \
XiaokangQian45c22202022-05-06 06:54:09 +000013369 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
XiaokangQian45c22202022-05-06 06:54:09 +000013370 -s "=> parse client hello" \
13371 -s "<= parse client hello"
13372
XiaokangQianaca90482022-05-19 07:19:31 +000013373requires_config_enabled MBEDTLS_DEBUG_C
13374requires_config_enabled MBEDTLS_SSL_SRV_C
13375requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013376requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianaca90482022-05-19 07:19:31 +000013377run_test "TLS 1.3: Server side check - mbedtls with client empty certificate" \
David Horstmann184c4f02024-07-01 17:01:28 +010013378 "$P_SRV debug_level=4 auth_mode=required crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Ronald Cron65f90292023-03-13 17:38:12 +010013379 "$P_CLI debug_level=4 crt_file=none key_file=none" \
XiaokangQianaca90482022-05-19 07:19:31 +000013380 1 \
13381 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13382 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13383 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
13384 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
13385 -s "=> write certificate request" \
13386 -s "SSL - No client certification received from the client, but required by the authentication mode" \
13387 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
13388 -s "=> parse client hello" \
13389 -s "<= parse client hello"
13390
XiaokangQianaca90482022-05-19 07:19:31 +000013391requires_config_enabled MBEDTLS_DEBUG_C
13392requires_config_enabled MBEDTLS_SSL_SRV_C
13393requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013394requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianaca90482022-05-19 07:19:31 +000013395run_test "TLS 1.3: Server side check - mbedtls with optional client authentication" \
David Horstmann184c4f02024-07-01 17:01:28 +010013396 "$P_SRV debug_level=4 auth_mode=optional crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Ronald Cron65f90292023-03-13 17:38:12 +010013397 "$P_CLI debug_level=4 crt_file=none key_file=none" \
XiaokangQianaca90482022-05-19 07:19:31 +000013398 0 \
13399 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13400 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13401 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
13402 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
13403 -s "=> write certificate request" \
13404 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
13405 -s "=> parse client hello" \
13406 -s "<= parse client hello"
Jerry Yuede50ea2022-05-05 11:21:20 +080013407
13408requires_config_enabled MBEDTLS_DEBUG_C
13409requires_config_enabled MBEDTLS_SSL_CLI_C
13410requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013411requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekielc31a7982023-06-27 10:53:33 +020013412requires_config_enabled PSA_WANT_ALG_ECDH
Jerry Yuede50ea2022-05-05 11:21:20 +080013413run_test "TLS 1.3: server: HRR check - mbedtls" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013414 "$P_SRV debug_level=4 groups=secp384r1" \
13415 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Jerry Yu36becb12022-05-12 16:57:20 +080013416 0 \
Jerry Yuede50ea2022-05-05 11:21:20 +080013417 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
13418 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
13419 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
13420 -s "tls13 server state: MBEDTLS_SSL_HELLO_RETRY_REQUEST" \
13421 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
13422 -s "selected_group: secp384r1" \
Jerry Yuede50ea2022-05-05 11:21:20 +080013423 -s "=> write hello retry request" \
13424 -s "<= write hello retry request"
13425
Jerry Yub89125b2022-05-13 15:45:49 +080013426requires_config_enabled MBEDTLS_DEBUG_C
13427requires_config_enabled MBEDTLS_SSL_SRV_C
13428requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013429requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yub89125b2022-05-13 15:45:49 +080013430run_test "TLS 1.3: Server side check, no server certificate available" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013431 "$P_SRV debug_level=4 crt_file=none key_file=none" \
Ronald Cron65f90292023-03-13 17:38:12 +010013432 "$P_CLI debug_level=4" \
Jerry Yub89125b2022-05-13 15:45:49 +080013433 1 \
13434 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
13435 -s "No certificate available."
13436
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013437requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQianf2a94202022-05-20 06:44:24 +000013438requires_config_enabled MBEDTLS_DEBUG_C
13439requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013440requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2ccd97b2022-05-31 08:30:17 +000013441run_test "TLS 1.3: Server side check - openssl with sni" \
David Horstmann184c4f02024-07-01 17:01:28 +010013442 "$P_SRV debug_level=4 auth_mode=required crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0 \
13443 sni=localhost,$DATA_FILES_PATH/server5.crt,$DATA_FILES_PATH/server5.key,$DATA_FILES_PATH/test-ca_cat12.crt,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
13444 "$O_NEXT_CLI -msg -debug -servername localhost -CAfile $DATA_FILES_PATH/test-ca_cat12.crt -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key -tls1_3" \
XiaokangQianf2a94202022-05-20 06:44:24 +000013445 0 \
XiaokangQianf2a94202022-05-20 06:44:24 +000013446 -s "parse ServerName extension" \
XiaokangQian129aeb92022-06-02 09:29:18 +000013447 -s "HTTP/1.0 200 OK"
XiaokangQianf2a94202022-05-20 06:44:24 +000013448
XiaokangQianac41edf2022-05-31 13:22:13 +000013449requires_gnutls_tls1_3
XiaokangQianf2a94202022-05-20 06:44:24 +000013450requires_config_enabled MBEDTLS_DEBUG_C
13451requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013452requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2ccd97b2022-05-31 08:30:17 +000013453run_test "TLS 1.3: Server side check - gnutls with sni" \
David Horstmann184c4f02024-07-01 17:01:28 +010013454 "$P_SRV debug_level=4 auth_mode=required crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0 \
13455 sni=localhost,$DATA_FILES_PATH/server5.crt,$DATA_FILES_PATH/server5.key,$DATA_FILES_PATH/test-ca_cat12.crt,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
13456 "$G_NEXT_CLI localhost -d 4 --sni-hostname=localhost --x509certfile $DATA_FILES_PATH/server5.crt --x509keyfile $DATA_FILES_PATH/server5.key --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS -V" \
XiaokangQianf2a94202022-05-20 06:44:24 +000013457 0 \
XiaokangQianf2a94202022-05-20 06:44:24 +000013458 -s "parse ServerName extension" \
XiaokangQian129aeb92022-06-02 09:29:18 +000013459 -s "HTTP/1.0 200 OK"
XiaokangQianf2a94202022-05-20 06:44:24 +000013460
XiaokangQian40a35232022-05-07 09:02:40 +000013461requires_config_enabled MBEDTLS_DEBUG_C
13462requires_config_enabled MBEDTLS_SSL_SRV_C
13463requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013464requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2ccd97b2022-05-31 08:30:17 +000013465run_test "TLS 1.3: Server side check - mbedtls with sni" \
David Horstmann184c4f02024-07-01 17:01:28 +010013466 "$P_SRV debug_level=4 auth_mode=required crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0 \
13467 sni=localhost,$DATA_FILES_PATH/server2.crt,$DATA_FILES_PATH/server2.key,-,-,-,polarssl.example,$DATA_FILES_PATH/server1-nospace.crt,$DATA_FILES_PATH/server1.key,-,-,-" \
13468 "$P_CLI debug_level=4 server_name=localhost crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key" \
XiaokangQianf2a94202022-05-20 06:44:24 +000013469 0 \
XiaokangQianf2a94202022-05-20 06:44:24 +000013470 -s "parse ServerName extension" \
XiaokangQian129aeb92022-06-02 09:29:18 +000013471 -s "HTTP/1.0 200 OK"
XiaokangQian40a35232022-05-07 09:02:40 +000013472
Gilles Peskine2baaf602022-01-07 15:46:12 +010013473for i in opt-testcases/*.sh
Jerry Yucdcb6832021-11-29 16:50:13 +080013474do
Gilles Peskine5eb2b022022-01-07 15:47:02 +010013475 TEST_SUITE_NAME=${i##*/}
13476 TEST_SUITE_NAME=${TEST_SUITE_NAME%.*}
13477 . "$i"
Jerry Yucdcb6832021-11-29 16:50:13 +080013478done
Gilles Peskine5eb2b022022-01-07 15:47:02 +010013479unset TEST_SUITE_NAME
Jerry Yu305bfc32021-11-24 16:04:47 +080013480
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013481# Test 1.3 compatibility mode
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013482requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13483requires_config_enabled MBEDTLS_DEBUG_C
13484requires_config_enabled MBEDTLS_SSL_SRV_C
13485requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013486requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013487run_test "TLS 1.3 m->m both peers do not support middlebox compatibility" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013488 "$P_SRV debug_level=4 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013489 "$P_CLI debug_level=4" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013490 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013491 -s "Protocol is TLSv1.3" \
13492 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013493 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
13494 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13495
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013496requires_config_enabled MBEDTLS_DEBUG_C
13497requires_config_enabled MBEDTLS_SSL_SRV_C
13498requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013499requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13500requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013501run_test "TLS 1.3 m->m both with middlebox compat support" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013502 "$P_SRV debug_level=4 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013503 "$P_CLI debug_level=4" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013504 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013505 -s "Protocol is TLSv1.3" \
13506 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013507 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
13508 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13509
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013510requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013511requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron7c0185f2021-11-30 09:16:24 +010013512requires_config_enabled MBEDTLS_DEBUG_C
13513requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013514requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona55c5a12021-11-30 09:32:47 +010013515run_test "TLS 1.3 m->O both peers do not support middlebox compatibility" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013516 "$O_NEXT_SRV -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013517 "$P_CLI debug_level=4" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013518 0 \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013519 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013520 -C "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode" \
13521 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013522
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013523requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013524requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron7c0185f2021-11-30 09:16:24 +010013525requires_config_enabled MBEDTLS_DEBUG_C
13526requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013527requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona55c5a12021-11-30 09:32:47 +010013528run_test "TLS 1.3 m->O server with middlebox compat support, not client" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013529 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013530 "$P_CLI debug_level=4" \
Gilles Peskine671a4392024-09-13 13:46:37 +020013531 0 \
13532 -c "Protocol is TLSv1.3" \
13533 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010013534
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013535requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013536requires_config_enabled MBEDTLS_DEBUG_C
13537requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013538requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13539requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013540run_test "TLS 1.3 m->O both with middlebox compat support" \
13541 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013542 "$P_CLI debug_level=4" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013543 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013544 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013545 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13546
Ronald Crona55c5a12021-11-30 09:32:47 +010013547requires_gnutls_tls1_3
13548requires_gnutls_next_no_ticket
13549requires_gnutls_next_disable_tls13_compat
Ronald Crona55c5a12021-11-30 09:32:47 +010013550requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13551requires_config_enabled MBEDTLS_DEBUG_C
13552requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013553requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona55c5a12021-11-30 09:32:47 +010013554run_test "TLS 1.3 m->G both peers do not support middlebox compatibility" \
13555 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE --disable-client-cert" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013556 "$P_CLI debug_level=4" \
Ronald Crona55c5a12021-11-30 09:32:47 +010013557 0 \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010013558 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013559 -C "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode" \
13560 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
Ronald Crona55c5a12021-11-30 09:32:47 +010013561
13562requires_gnutls_tls1_3
13563requires_gnutls_next_no_ticket
Ronald Crona55c5a12021-11-30 09:32:47 +010013564requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13565requires_config_enabled MBEDTLS_DEBUG_C
13566requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013567requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona55c5a12021-11-30 09:32:47 +010013568run_test "TLS 1.3 m->G server with middlebox compat support, not client" \
13569 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013570 "$P_CLI debug_level=4" \
Gilles Peskine671a4392024-09-13 13:46:37 +020013571 0 \
13572 -c "Protocol is TLSv1.3" \
13573 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
Ronald Crona55c5a12021-11-30 09:32:47 +010013574
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013575requires_gnutls_tls1_3
13576requires_gnutls_next_no_ticket
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013577requires_config_enabled MBEDTLS_DEBUG_C
13578requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013579requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13580requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013581run_test "TLS 1.3 m->G both with middlebox compat support" \
13582 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013583 "$P_CLI debug_level=4" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013584 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013585 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013586 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13587
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013588requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013589requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13590requires_config_enabled MBEDTLS_DEBUG_C
13591requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013592requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013593run_test "TLS 1.3 O->m both peers do not support middlebox compatibility" \
David Horstmann184c4f02024-07-01 17:01:28 +010013594 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013595 "$O_NEXT_CLI -msg -debug -no_middlebox" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013596 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013597 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013598 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
13599 -C "14 03 03 00 01"
13600
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013601requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013602requires_config_enabled MBEDTLS_DEBUG_C
13603requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013604requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13605requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013606run_test "TLS 1.3 O->m server with middlebox compat support, not client" \
David Horstmann184c4f02024-07-01 17:01:28 +010013607 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013608 "$O_NEXT_CLI -msg -debug -no_middlebox" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013609 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013610 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013611 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO"
13612
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013613requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013614requires_config_enabled MBEDTLS_DEBUG_C
13615requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013616requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13617requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013618run_test "TLS 1.3 O->m both with middlebox compat support" \
David Horstmann184c4f02024-07-01 17:01:28 +010013619 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013620 "$O_NEXT_CLI -msg -debug" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013621 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013622 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013623 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
13624 -c "14 03 03 00 01"
13625
13626requires_gnutls_tls1_3
13627requires_gnutls_next_no_ticket
13628requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013629requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13630requires_config_enabled MBEDTLS_DEBUG_C
13631requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013632requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013633run_test "TLS 1.3 G->m both peers do not support middlebox compatibility" \
David Horstmann184c4f02024-07-01 17:01:28 +010013634 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013635 "$G_NEXT_CLI localhost --priority=NORMAL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013636 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013637 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013638 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
13639 -C "SSL 3.3 ChangeCipherSpec packet received"
13640
13641requires_gnutls_tls1_3
13642requires_gnutls_next_no_ticket
13643requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013644requires_config_enabled MBEDTLS_DEBUG_C
13645requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013646requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13647requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013648run_test "TLS 1.3 G->m server with middlebox compat support, not client" \
David Horstmann184c4f02024-07-01 17:01:28 +010013649 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013650 "$G_NEXT_CLI localhost --debug=10 --priority=NORMAL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013651 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013652 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013653 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
13654 -c "SSL 3.3 ChangeCipherSpec packet received" \
13655 -c "discarding change cipher spec in TLS1.3"
13656
13657requires_gnutls_tls1_3
13658requires_gnutls_next_no_ticket
13659requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013660requires_config_enabled MBEDTLS_DEBUG_C
13661requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013662requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13663requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013664run_test "TLS 1.3 G->m both with middlebox compat support" \
David Horstmann184c4f02024-07-01 17:01:28 +010013665 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013666 "$G_NEXT_CLI localhost --debug=10 --priority=NORMAL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013667 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013668 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013669 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
13670 -c "SSL 3.3 ChangeCipherSpec packet received"
13671
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013672requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13673requires_config_enabled MBEDTLS_DEBUG_C
13674requires_config_enabled MBEDTLS_SSL_SRV_C
13675requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013676requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013677run_test "TLS 1.3 m->m HRR both peers do not support middlebox compatibility" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013678 "$P_SRV debug_level=4 groups=secp384r1 tickets=0" \
13679 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013680 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013681 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013682 -c "Protocol is TLSv1.3" \
13683 -s "tls13 server state: MBEDTLS_SSL_HELLO_RETRY_REQUEST" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020013684 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013685 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13686
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013687requires_config_enabled MBEDTLS_DEBUG_C
13688requires_config_enabled MBEDTLS_SSL_SRV_C
13689requires_config_enabled MBEDTLS_SSL_CLI_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020013690requires_config_enabled PSA_WANT_ALG_ECDH
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013691requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13692requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013693run_test "TLS 1.3 m->m HRR both with middlebox compat support" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013694 "$P_SRV debug_level=4 groups=secp384r1 tickets=0" \
13695 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013696 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013697 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013698 -c "Protocol is TLSv1.3" \
13699 -s "tls13 server state: MBEDTLS_SSL_HELLO_RETRY_REQUEST" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020013700 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013701 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13702
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013703requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013704requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13705requires_config_enabled MBEDTLS_DEBUG_C
13706requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013707requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013708run_test "TLS 1.3 m->O HRR both peers do not support middlebox compatibility" \
13709 "$O_NEXT_SRV -msg -tls1_3 -groups P-384 -no_middlebox -num_tickets 0 -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013710 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013711 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013712 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013713 -c "received HelloRetryRequest message" \
13714 -C "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode" \
13715 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13716
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013717requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013718requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13719requires_config_enabled MBEDTLS_DEBUG_C
13720requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013721requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013722run_test "TLS 1.3 m->O HRR server with middlebox compat support, not client" \
13723 "$O_NEXT_SRV -msg -tls1_3 -groups P-384 -num_tickets 0 -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013724 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gilles Peskine671a4392024-09-13 13:46:37 +020013725 0 \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013726 -c "received HelloRetryRequest message" \
Gilles Peskine671a4392024-09-13 13:46:37 +020013727 -c "Protocol is TLSv1.3" \
13728 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013729
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013730requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013731requires_config_enabled MBEDTLS_DEBUG_C
13732requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013733requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13734requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013735run_test "TLS 1.3 m->O HRR both with middlebox compat support" \
13736 "$O_NEXT_SRV -msg -tls1_3 -groups P-384 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013737 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013738 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013739 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013740 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13741
13742requires_gnutls_tls1_3
13743requires_gnutls_next_no_ticket
13744requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013745requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13746requires_config_enabled MBEDTLS_DEBUG_C
13747requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013748requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013749run_test "TLS 1.3 m->G HRR both peers do not support middlebox compatibility" \
13750 "$G_NEXT_SRV --priority=NORMAL:-GROUP-ALL:+GROUP-SECP384R1:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE --disable-client-cert" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013751 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013752 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013753 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013754 -c "received HelloRetryRequest message" \
13755 -C "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode" \
13756 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13757
13758requires_gnutls_tls1_3
13759requires_gnutls_next_no_ticket
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013760requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13761requires_config_enabled MBEDTLS_DEBUG_C
13762requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013763requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013764run_test "TLS 1.3 m->G HRR server with middlebox compat support, not client" \
13765 "$G_NEXT_SRV --priority=NORMAL:-GROUP-ALL:+GROUP-SECP384R1:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS --disable-client-cert" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013766 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gilles Peskine671a4392024-09-13 13:46:37 +020013767 0 \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013768 -c "received HelloRetryRequest message" \
Gilles Peskine671a4392024-09-13 13:46:37 +020013769 -c "Protocol is TLSv1.3" \
13770 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013771
13772requires_gnutls_tls1_3
13773requires_gnutls_next_no_ticket
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013774requires_config_enabled MBEDTLS_DEBUG_C
13775requires_config_enabled MBEDTLS_SSL_CLI_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020013776requires_config_enabled PSA_WANT_ALG_ECDH
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013777requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13778requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013779run_test "TLS 1.3 m->G HRR both with middlebox compat support" \
13780 "$G_NEXT_SRV --priority=NORMAL:-GROUP-ALL:+GROUP-SECP384R1:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013781 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013782 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013783 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013784 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
13785
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013786requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013787requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13788requires_config_enabled MBEDTLS_DEBUG_C
13789requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013790requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013791run_test "TLS 1.3 O->m HRR both peers do not support middlebox compatibility" \
David Horstmann184c4f02024-07-01 17:01:28 +010013792 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013793 "$O_NEXT_CLI -msg -debug -groups P-256:P-384 -no_middlebox" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013794 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013795 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020013796 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013797 -C "14 03 03 00 01"
13798
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013799requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013800requires_config_enabled MBEDTLS_DEBUG_C
13801requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013802requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13803requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013804run_test "TLS 1.3 O->m HRR server with middlebox compat support, not client" \
David Horstmann184c4f02024-07-01 17:01:28 +010013805 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013806 "$O_NEXT_CLI -msg -debug -groups P-256:P-384 -no_middlebox" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013807 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013808 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020013809 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013810
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013811requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013812requires_config_enabled MBEDTLS_DEBUG_C
13813requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013814requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13815requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013816run_test "TLS 1.3 O->m HRR both with middlebox compat support" \
David Horstmann184c4f02024-07-01 17:01:28 +010013817 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013818 "$O_NEXT_CLI -msg -debug -groups P-256:P-384" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013819 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013820 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020013821 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013822 -c "14 03 03 00 01"
13823
13824requires_gnutls_tls1_3
13825requires_gnutls_next_no_ticket
13826requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013827requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13828requires_config_enabled MBEDTLS_DEBUG_C
13829requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020013830requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013831run_test "TLS 1.3 G->m HRR both peers do not support middlebox compatibility" \
David Horstmann184c4f02024-07-01 17:01:28 +010013832 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013833 "$G_NEXT_CLI localhost --priority=NORMAL:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013834 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013835 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020013836 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013837 -C "SSL 3.3 ChangeCipherSpec packet received"
13838
13839requires_gnutls_tls1_3
13840requires_gnutls_next_no_ticket
13841requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013842requires_config_enabled MBEDTLS_DEBUG_C
13843requires_config_enabled MBEDTLS_SSL_SRV_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020013844requires_config_enabled PSA_WANT_ALG_ECDH
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013845requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13846requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013847run_test "TLS 1.3 G->m HRR server with middlebox compat support, not client" \
David Horstmann184c4f02024-07-01 17:01:28 +010013848 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013849 "$G_NEXT_CLI localhost --debug=10 --priority=NORMAL:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013850 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013851 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020013852 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013853 -c "SSL 3.3 ChangeCipherSpec packet received" \
13854 -c "discarding change cipher spec in TLS1.3"
13855
13856requires_gnutls_tls1_3
13857requires_gnutls_next_no_ticket
13858requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013859requires_config_enabled MBEDTLS_DEBUG_C
13860requires_config_enabled MBEDTLS_SSL_SRV_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020013861requires_config_enabled PSA_WANT_ALG_ECDH
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013862requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13863requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013864run_test "TLS 1.3 G->m HRR both with middlebox compat support" \
David Horstmann184c4f02024-07-01 17:01:28 +010013865 "$P_SRV debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013866 "$G_NEXT_CLI localhost --debug=10 --priority=NORMAL:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013867 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020013868 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020013869 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020013870 -c "SSL 3.3 ChangeCipherSpec packet received"
13871
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013872requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080013873requires_config_enabled MBEDTLS_DEBUG_C
13874requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013875requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013876run_test "TLS 1.3: Check signature algorithm order, m->O" \
David Horstmann184c4f02024-07-01 17:01:28 +010013877 "$O_NEXT_SRV_NO_CERT -cert $DATA_FILES_PATH/server2-sha256.crt -key $DATA_FILES_PATH/server2.key
Jerry Yuaae28f12022-06-29 16:21:32 +080013878 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache
13879 -Verify 10 -sigalgs rsa_pkcs1_sha512:rsa_pss_rsae_sha512:rsa_pss_rsae_sha384:ecdsa_secp256r1_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010013880 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080013881 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013882 0 \
13883 -c "Protocol is TLSv1.3" \
Ronald Cron067a1e72022-09-16 13:44:49 +020013884 -c "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013885 -c "HTTP/1.0 200 [Oo][Kk]"
13886
13887requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080013888requires_config_enabled MBEDTLS_DEBUG_C
13889requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013890requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013891run_test "TLS 1.3: Check signature algorithm order, m->G" \
David Horstmann184c4f02024-07-01 17:01:28 +010013892 "$G_NEXT_SRV_NO_CERT --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key
Jerry Yuaae28f12022-06-29 16:21:32 +080013893 -d 4
13894 --priority=NORMAL:-VERS-ALL:-SIGN-ALL:+SIGN-RSA-SHA512:+SIGN-RSA-PSS-RSAE-SHA512:+SIGN-RSA-PSS-RSAE-SHA384:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS " \
David Horstmann184c4f02024-07-01 17:01:28 +010013895 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080013896 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013897 0 \
13898 -c "Protocol is TLSv1.3" \
Ronald Cron067a1e72022-09-16 13:44:49 +020013899 -c "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013900 -c "HTTP/1.0 200 [Oo][Kk]"
13901
Jerry Yuaae28f12022-06-29 16:21:32 +080013902requires_config_enabled MBEDTLS_DEBUG_C
13903requires_config_enabled MBEDTLS_SSL_SRV_C
13904requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013905requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013906run_test "TLS 1.3: Check signature algorithm order, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013907 "$P_SRV debug_level=4 auth_mode=required
David Horstmann184c4f02024-07-01 17:01:28 +010013908 crt_file2=$DATA_FILES_PATH/server2-sha256.crt key_file2=$DATA_FILES_PATH/server2.key
13909 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key
Jerry Yuaae28f12022-06-29 16:21:32 +080013910 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
David Horstmann184c4f02024-07-01 17:01:28 +010013911 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080013912 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013913 0 \
13914 -c "Protocol is TLSv1.3" \
Ronald Cron067a1e72022-09-16 13:44:49 +020013915 -c "CertificateVerify signature with rsa_pss_rsae_sha512" \
13916 -s "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013917 -s "ssl_tls13_pick_key_cert:selected signature algorithm rsa_pss_rsae_sha512" \
13918 -c "HTTP/1.0 200 [Oo][Kk]"
13919
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013920requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080013921requires_config_enabled MBEDTLS_DEBUG_C
13922requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013923requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013924run_test "TLS 1.3: Check signature algorithm order, O->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013925 "$P_SRV debug_level=4 auth_mode=required
David Horstmann184c4f02024-07-01 17:01:28 +010013926 crt_file2=$DATA_FILES_PATH/server2-sha256.crt key_file2=$DATA_FILES_PATH/server2.key
13927 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key
Jerry Yuaae28f12022-06-29 16:21:32 +080013928 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
David Horstmann184c4f02024-07-01 17:01:28 +010013929 "$O_NEXT_CLI_NO_CERT -msg -CAfile $DATA_FILES_PATH/test-ca_cat12.crt \
13930 -cert $DATA_FILES_PATH/server2-sha256.crt -key $DATA_FILES_PATH/server2.key \
Jerry Yuaae28f12022-06-29 16:21:32 +080013931 -sigalgs rsa_pkcs1_sha512:rsa_pss_rsae_sha512:rsa_pss_rsae_sha384:ecdsa_secp256r1_sha256" \
13932 0 \
13933 -c "TLSv1.3" \
Ronald Cron067a1e72022-09-16 13:44:49 +020013934 -s "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013935 -s "ssl_tls13_pick_key_cert:selected signature algorithm rsa_pss_rsae_sha512"
13936
13937requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080013938requires_config_enabled MBEDTLS_DEBUG_C
13939requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013940requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013941run_test "TLS 1.3: Check signature algorithm order, G->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013942 "$P_SRV debug_level=4 auth_mode=required
David Horstmann184c4f02024-07-01 17:01:28 +010013943 crt_file2=$DATA_FILES_PATH/server2-sha256.crt key_file2=$DATA_FILES_PATH/server2.key
13944 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key
Jerry Yuaae28f12022-06-29 16:21:32 +080013945 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
David Horstmann184c4f02024-07-01 17:01:28 +010013946 "$G_NEXT_CLI_NO_CERT localhost -d 4 --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt \
13947 --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key \
Jerry Yuaae28f12022-06-29 16:21:32 +080013948 --priority=NORMAL:-SIGN-ALL:+SIGN-RSA-SHA512:+SIGN-RSA-PSS-RSAE-SHA512:+SIGN-RSA-PSS-RSAE-SHA384" \
13949 0 \
13950 -c "Negotiated version: 3.4" \
13951 -c "HTTP/1.0 200 [Oo][Kk]" \
Ronald Cron067a1e72022-09-16 13:44:49 +020013952 -s "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013953 -s "ssl_tls13_pick_key_cert:selected signature algorithm rsa_pss_rsae_sha512"
13954
13955requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080013956requires_config_enabled MBEDTLS_DEBUG_C
13957requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013958requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013959run_test "TLS 1.3: Check server no suitable signature algorithm, G->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013960 "$P_SRV debug_level=4 auth_mode=required
David Horstmann184c4f02024-07-01 17:01:28 +010013961 crt_file2=$DATA_FILES_PATH/server2-sha256.crt key_file2=$DATA_FILES_PATH/server2.key
13962 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key
Jerry Yuaae28f12022-06-29 16:21:32 +080013963 sig_algs=rsa_pkcs1_sha512,ecdsa_secp256r1_sha256 " \
David Horstmann184c4f02024-07-01 17:01:28 +010013964 "$G_NEXT_CLI_NO_CERT localhost -d 4 --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt \
13965 --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key \
Jerry Yuaae28f12022-06-29 16:21:32 +080013966 --priority=NORMAL:-SIGN-ALL:+SIGN-RSA-SHA512:+SIGN-RSA-PSS-RSAE-SHA512:+SIGN-ECDSA-SECP521R1-SHA512" \
13967 1 \
Ronald Cron67ea2542022-09-15 17:34:42 +020013968 -S "ssl_tls13_pick_key_cert:check signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080013969
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013970requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080013971requires_config_enabled MBEDTLS_DEBUG_C
13972requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013973requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013974run_test "TLS 1.3: Check server no suitable signature algorithm, O->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013975 "$P_SRV debug_level=4 auth_mode=required
David Horstmann184c4f02024-07-01 17:01:28 +010013976 crt_file2=$DATA_FILES_PATH/server2-sha256.crt key_file2=$DATA_FILES_PATH/server2.key
13977 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key
Jerry Yuaae28f12022-06-29 16:21:32 +080013978 sig_algs=rsa_pkcs1_sha512,ecdsa_secp256r1_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010013979 "$O_NEXT_CLI_NO_CERT -msg -CAfile $DATA_FILES_PATH/test-ca_cat12.crt \
13980 -cert $DATA_FILES_PATH/server2-sha256.crt -key $DATA_FILES_PATH/server2.key \
Jerry Yuaae28f12022-06-29 16:21:32 +080013981 -sigalgs rsa_pkcs1_sha512:rsa_pss_rsae_sha512:ecdsa_secp521r1_sha512" \
13982 1 \
Ronald Cron67ea2542022-09-15 17:34:42 +020013983 -S "ssl_tls13_pick_key_cert:check signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080013984
Jerry Yuaae28f12022-06-29 16:21:32 +080013985requires_config_enabled MBEDTLS_DEBUG_C
13986requires_config_enabled MBEDTLS_SSL_SRV_C
13987requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020013988requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013989run_test "TLS 1.3: Check server no suitable signature algorithm, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013990 "$P_SRV debug_level=4 auth_mode=required
David Horstmann184c4f02024-07-01 17:01:28 +010013991 crt_file2=$DATA_FILES_PATH/server2-sha256.crt key_file2=$DATA_FILES_PATH/server2.key
13992 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key
Jerry Yuaae28f12022-06-29 16:21:32 +080013993 sig_algs=rsa_pkcs1_sha512,ecdsa_secp256r1_sha256 " \
David Horstmann184c4f02024-07-01 17:01:28 +010013994 "$P_CLI allow_sha1=0 debug_level=4 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080013995 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,ecdsa_secp521r1_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013996 1 \
Ronald Cron67ea2542022-09-15 17:34:42 +020013997 -S "ssl_tls13_pick_key_cert:check signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080013998
13999requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080014000requires_config_enabled MBEDTLS_DEBUG_C
14001requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020014002requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080014003run_test "TLS 1.3: Check server no suitable certificate, G->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010014004 "$P_SRV debug_level=4
David Horstmann184c4f02024-07-01 17:01:28 +010014005 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key
Jerry Yuaae28f12022-06-29 16:21:32 +080014006 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
David Horstmann184c4f02024-07-01 17:01:28 +010014007 "$G_NEXT_CLI_NO_CERT localhost -d 4 --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt \
Jerry Yuaae28f12022-06-29 16:21:32 +080014008 --priority=NORMAL:-SIGN-ALL:+SIGN-ECDSA-SECP521R1-SHA512:+SIGN-ECDSA-SECP256R1-SHA256" \
14009 1 \
14010 -s "ssl_tls13_pick_key_cert:no suitable certificate found"
14011
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020014012requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080014013requires_config_enabled MBEDTLS_DEBUG_C
14014requires_config_enabled MBEDTLS_SSL_SRV_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020014015requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080014016run_test "TLS 1.3: Check server no suitable certificate, O->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010014017 "$P_SRV debug_level=4
David Horstmann184c4f02024-07-01 17:01:28 +010014018 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key
Jerry Yuaae28f12022-06-29 16:21:32 +080014019 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
David Horstmann184c4f02024-07-01 17:01:28 +010014020 "$O_NEXT_CLI_NO_CERT -msg -CAfile $DATA_FILES_PATH/test-ca_cat12.crt \
Jerry Yuaae28f12022-06-29 16:21:32 +080014021 -sigalgs ecdsa_secp521r1_sha512:ecdsa_secp256r1_sha256" \
14022 1 \
14023 -s "ssl_tls13_pick_key_cert:no suitable certificate found"
14024
Jerry Yuaae28f12022-06-29 16:21:32 +080014025requires_config_enabled MBEDTLS_DEBUG_C
14026requires_config_enabled MBEDTLS_SSL_SRV_C
14027requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020014028requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080014029run_test "TLS 1.3: Check server no suitable certificate, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010014030 "$P_SRV debug_level=4
David Horstmann184c4f02024-07-01 17:01:28 +010014031 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key
Jerry Yuaae28f12022-06-29 16:21:32 +080014032 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
14033 "$P_CLI allow_sha1=0 debug_level=4 \
Jerry Yu7ac0d492022-07-01 19:29:30 +080014034 sig_algs=ecdsa_secp521r1_sha512,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080014035 1 \
14036 -s "ssl_tls13_pick_key_cert:no suitable certificate found"
14037
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020014038requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080014039requires_config_enabled MBEDTLS_DEBUG_C
14040requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020014041requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080014042run_test "TLS 1.3: Check client no signature algorithm, m->O" \
David Horstmann184c4f02024-07-01 17:01:28 +010014043 "$O_NEXT_SRV_NO_CERT -cert $DATA_FILES_PATH/server2-sha256.crt -key $DATA_FILES_PATH/server2.key
Jerry Yuaae28f12022-06-29 16:21:32 +080014044 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache
14045 -Verify 10 -sigalgs rsa_pkcs1_sha512:rsa_pss_rsae_sha512:rsa_pss_rsae_sha384:ecdsa_secp521r1_sha512" \
David Horstmann184c4f02024-07-01 17:01:28 +010014046 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080014047 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080014048 1 \
Ronald Cron067a1e72022-09-16 13:44:49 +020014049 -c "no suitable signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080014050
14051requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080014052requires_config_enabled MBEDTLS_DEBUG_C
14053requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020014054requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080014055run_test "TLS 1.3: Check client no signature algorithm, m->G" \
David Horstmann184c4f02024-07-01 17:01:28 +010014056 "$G_NEXT_SRV_NO_CERT --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key
Jerry Yuaae28f12022-06-29 16:21:32 +080014057 -d 4
14058 --priority=NORMAL:-VERS-ALL:-SIGN-ALL:+SIGN-RSA-SHA512:+SIGN-RSA-PSS-RSAE-SHA512:+SIGN-RSA-PSS-RSAE-SHA384:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS " \
David Horstmann184c4f02024-07-01 17:01:28 +010014059 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080014060 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080014061 1 \
Ronald Cron067a1e72022-09-16 13:44:49 +020014062 -c "no suitable signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080014063
Jerry Yuaae28f12022-06-29 16:21:32 +080014064requires_config_enabled MBEDTLS_DEBUG_C
14065requires_config_enabled MBEDTLS_SSL_SRV_C
14066requires_config_enabled MBEDTLS_SSL_CLI_C
Gilles Peskine7b02c1f2024-09-13 14:15:46 +020014067requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080014068run_test "TLS 1.3: Check client no signature algorithm, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010014069 "$P_SRV debug_level=4 auth_mode=required
David Horstmann184c4f02024-07-01 17:01:28 +010014070 crt_file2=$DATA_FILES_PATH/server2-sha256.crt key_file2=$DATA_FILES_PATH/server2.key
14071 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key
Jerry Yuaae28f12022-06-29 16:21:32 +080014072 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp521r1_sha512" \
David Horstmann184c4f02024-07-01 17:01:28 +010014073 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server5.crt key_file=$DATA_FILES_PATH/server5.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080014074 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080014075 1 \
Ronald Cron067a1e72022-09-16 13:44:49 +020014076 -c "no suitable signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080014077
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020014078requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu6455b682022-06-27 14:18:29 +080014079requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
14080requires_config_enabled MBEDTLS_DEBUG_C
14081requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yueec4f032022-07-23 11:31:51 +080014082run_test "TLS 1.2: Check rsa_pss_rsae compatibility issue, m->O" \
David Horstmann184c4f02024-07-01 17:01:28 +010014083 "$O_NEXT_SRV_NO_CERT -cert $DATA_FILES_PATH/server2-sha256.crt -key $DATA_FILES_PATH/server2.key
Jerry Yu6455b682022-06-27 14:18:29 +080014084 -msg -tls1_2
14085 -Verify 10 " \
David Horstmann184c4f02024-07-01 17:01:28 +010014086 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key
Jerry Yu6455b682022-06-27 14:18:29 +080014087 sig_algs=rsa_pss_rsae_sha512,rsa_pkcs1_sha512
14088 min_version=tls12 max_version=tls13 " \
14089 0 \
14090 -c "Protocol is TLSv1.2" \
14091 -c "HTTP/1.0 200 [Oo][Kk]"
14092
14093
14094requires_gnutls_tls1_3
14095requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
14096requires_config_enabled MBEDTLS_DEBUG_C
14097requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yueec4f032022-07-23 11:31:51 +080014098run_test "TLS 1.2: Check rsa_pss_rsae compatibility issue, m->G" \
David Horstmann184c4f02024-07-01 17:01:28 +010014099 "$G_NEXT_SRV_NO_CERT --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key
Jerry Yu6455b682022-06-27 14:18:29 +080014100 -d 4
14101 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2" \
David Horstmann184c4f02024-07-01 17:01:28 +010014102 "$P_CLI debug_level=4 crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key
Jerry Yu6455b682022-06-27 14:18:29 +080014103 sig_algs=rsa_pss_rsae_sha512,rsa_pkcs1_sha512
14104 min_version=tls12 max_version=tls13 " \
14105 0 \
14106 -c "Protocol is TLSv1.2" \
14107 -c "HTTP/1.0 200 [Oo][Kk]"
14108
Przemek Stekiel3484db42023-06-28 13:31:38 +020014109requires_config_enabled MBEDTLS_SSL_SRV_C
14110requires_config_enabled MBEDTLS_DEBUG_C
14111requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekiel3484db42023-06-28 13:31:38 +020014112requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
14113requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti05754d82024-01-18 09:47:00 +010014114requires_config_enabled PSA_WANT_DH_RFC7919_3072
Przemek Stekiel3484db42023-06-28 13:31:38 +020014115requires_gnutls_tls1_3
14116requires_gnutls_next_no_ticket
14117requires_gnutls_next_disable_tls13_compat
14118run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010014119 "$P_SRV crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14120 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020014121 0 \
14122 -s "Protocol is TLSv1.3" \
14123 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
14124 -s "received signature algorithm: 0x804" \
14125 -s "got named group: ffdhe3072(0101)" \
14126 -s "Certificate verification was skipped" \
14127 -C "received HelloRetryRequest message"
14128
14129
14130requires_gnutls_tls1_3
14131requires_gnutls_next_no_ticket
14132requires_gnutls_next_disable_tls13_compat
14133requires_config_enabled MBEDTLS_SSL_CLI_C
14134requires_config_enabled MBEDTLS_DEBUG_C
14135requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekiel3484db42023-06-28 13:31:38 +020014136requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
14137requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti05754d82024-01-18 09:47:00 +010014138requires_config_enabled PSA_WANT_DH_RFC7919_3072
Przemek Stekiel3484db42023-06-28 13:31:38 +020014139run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010014140 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
14141 "$P_CLI ca_file=$DATA_FILES_PATH/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe3072" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020014142 0 \
14143 -c "HTTP/1.0 200 OK" \
14144 -c "Protocol is TLSv1.3" \
14145 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
14146 -c "Certificate Verify: Signature algorithm ( 0804 )" \
14147 -c "NamedGroup: ffdhe3072 ( 101 )" \
14148 -c "Verifying peer X.509 certificate... ok" \
14149 -C "received HelloRetryRequest message"
14150
14151requires_config_enabled MBEDTLS_SSL_SRV_C
14152requires_config_enabled MBEDTLS_DEBUG_C
14153requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekiel3484db42023-06-28 13:31:38 +020014154requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
14155requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti05754d82024-01-18 09:47:00 +010014156requires_config_enabled PSA_WANT_DH_RFC7919_4096
Przemek Stekiel3484db42023-06-28 13:31:38 +020014157requires_gnutls_tls1_3
14158requires_gnutls_next_no_ticket
14159requires_gnutls_next_disable_tls13_compat
14160run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010014161 "$P_SRV crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14162 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020014163 0 \
14164 -s "Protocol is TLSv1.3" \
14165 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
14166 -s "received signature algorithm: 0x804" \
14167 -s "got named group: ffdhe4096(0102)" \
14168 -s "Certificate verification was skipped" \
14169 -C "received HelloRetryRequest message"
14170
14171
14172requires_gnutls_tls1_3
14173requires_gnutls_next_no_ticket
14174requires_gnutls_next_disable_tls13_compat
14175requires_config_enabled MBEDTLS_SSL_CLI_C
14176requires_config_enabled MBEDTLS_DEBUG_C
14177requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekiel3484db42023-06-28 13:31:38 +020014178requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
14179requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti05754d82024-01-18 09:47:00 +010014180requires_config_enabled PSA_WANT_DH_RFC7919_4096
Przemek Stekiel3484db42023-06-28 13:31:38 +020014181run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010014182 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
14183 "$P_CLI ca_file=$DATA_FILES_PATH/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe4096" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020014184 0 \
14185 -c "HTTP/1.0 200 OK" \
14186 -c "Protocol is TLSv1.3" \
14187 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
14188 -c "Certificate Verify: Signature algorithm ( 0804 )" \
14189 -c "NamedGroup: ffdhe4096 ( 102 )" \
14190 -c "Verifying peer X.509 certificate... ok" \
14191 -C "received HelloRetryRequest message"
14192
14193requires_config_enabled MBEDTLS_SSL_SRV_C
14194requires_config_enabled MBEDTLS_DEBUG_C
14195requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekiel3484db42023-06-28 13:31:38 +020014196requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
14197requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti05754d82024-01-18 09:47:00 +010014198requires_config_enabled PSA_WANT_DH_RFC7919_6144
Przemek Stekiel3484db42023-06-28 13:31:38 +020014199requires_gnutls_tls1_3
14200requires_gnutls_next_no_ticket
14201requires_gnutls_next_disable_tls13_compat
14202run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010014203 "$P_SRV crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14204 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020014205 0 \
14206 -s "Protocol is TLSv1.3" \
14207 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
14208 -s "received signature algorithm: 0x804" \
14209 -s "got named group: ffdhe6144(0103)" \
14210 -s "Certificate verification was skipped" \
14211 -C "received HelloRetryRequest message"
14212
14213requires_gnutls_tls1_3
14214requires_gnutls_next_no_ticket
14215requires_gnutls_next_disable_tls13_compat
14216requires_config_enabled MBEDTLS_SSL_CLI_C
14217requires_config_enabled MBEDTLS_DEBUG_C
14218requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekiel3484db42023-06-28 13:31:38 +020014219requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
14220requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti05754d82024-01-18 09:47:00 +010014221requires_config_enabled PSA_WANT_DH_RFC7919_6144
Przemek Stekiel3484db42023-06-28 13:31:38 +020014222run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010014223 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
14224 "$P_CLI ca_file=$DATA_FILES_PATH/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe6144" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020014225 0 \
14226 -c "HTTP/1.0 200 OK" \
14227 -c "Protocol is TLSv1.3" \
14228 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
14229 -c "Certificate Verify: Signature algorithm ( 0804 )" \
14230 -c "NamedGroup: ffdhe6144 ( 103 )" \
14231 -c "Verifying peer X.509 certificate... ok" \
14232 -C "received HelloRetryRequest message"
14233
14234requires_config_enabled MBEDTLS_SSL_SRV_C
14235requires_config_enabled MBEDTLS_DEBUG_C
14236requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekiel3484db42023-06-28 13:31:38 +020014237requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
14238requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti05754d82024-01-18 09:47:00 +010014239requires_config_enabled PSA_WANT_DH_RFC7919_8192
Przemek Stekiel3484db42023-06-28 13:31:38 +020014240requires_gnutls_tls1_3
14241requires_gnutls_next_no_ticket
14242requires_gnutls_next_disable_tls13_compat
14243client_needs_more_time 4
14244run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010014245 "$P_SRV crt_file=$DATA_FILES_PATH/server2-sha256.crt key_file=$DATA_FILES_PATH/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14246 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile $DATA_FILES_PATH/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020014247 0 \
14248 -s "Protocol is TLSv1.3" \
14249 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
14250 -s "received signature algorithm: 0x804" \
14251 -s "got named group: ffdhe8192(0104)" \
14252 -s "Certificate verification was skipped" \
14253 -C "received HelloRetryRequest message"
14254
14255requires_gnutls_tls1_3
14256requires_gnutls_next_no_ticket
14257requires_gnutls_next_disable_tls13_compat
14258requires_config_enabled MBEDTLS_SSL_CLI_C
14259requires_config_enabled MBEDTLS_DEBUG_C
14260requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekiel3484db42023-06-28 13:31:38 +020014261requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
14262requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti05754d82024-01-18 09:47:00 +010014263requires_config_enabled PSA_WANT_DH_RFC7919_8192
Przemek Stekiel3484db42023-06-28 13:31:38 +020014264client_needs_more_time 4
14265run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
David Horstmann184c4f02024-07-01 17:01:28 +010014266 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile $DATA_FILES_PATH/server2-sha256.crt --x509keyfile $DATA_FILES_PATH/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
14267 "$P_CLI ca_file=$DATA_FILES_PATH/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe8192" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020014268 0 \
14269 -c "HTTP/1.0 200 OK" \
14270 -c "Protocol is TLSv1.3" \
14271 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
14272 -c "Certificate Verify: Signature algorithm ( 0804 )" \
14273 -c "NamedGroup: ffdhe8192 ( 104 )" \
14274 -c "Verifying peer X.509 certificate... ok" \
14275 -C "received HelloRetryRequest message"
14276
Ronald Cron8a74f072023-06-14 17:59:29 +020014277requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
14278requires_config_enabled MBEDTLS_SSL_SRV_C
14279requires_config_enabled MBEDTLS_SSL_CLI_C
14280requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
14281requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14282run_test "TLS 1.3: no HRR in case of PSK key exchange mode" \
Gilles Peskinef9f3d212024-05-13 21:06:26 +020014283 "$P_SRV nbio=2 psk=73776f726466697368 psk_identity=0a0b0c tls13_kex_modes=psk groups=none" \
14284 "$P_CLI nbio=2 debug_level=3 psk=73776f726466697368 psk_identity=0a0b0c tls13_kex_modes=all" \
Ronald Cron8a74f072023-06-14 17:59:29 +020014285 0 \
14286 -C "received HelloRetryRequest message" \
14287 -c "Selected key exchange mode: psk$" \
14288 -c "HTTP/1.0 200 OK"
14289
Waleed Elmelegy0b190f12024-07-04 16:38:04 +000014290# Legacy_compression_methods testing
14291
14292requires_gnutls
Waleed Elmelegydc99c892024-07-15 17:25:04 +000014293requires_config_enabled MBEDTLS_SSL_SRV_C
Waleed Elmelegy0b190f12024-07-04 16:38:04 +000014294requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Waleed Elmelegydc99c892024-07-15 17:25:04 +000014295run_test "TLS 1.2 ClientHello indicating support for deflate compression method" \
14296 "$P_SRV debug_level=3" \
14297 "$G_CLI --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:+COMP-DEFLATE localhost" \
14298 0 \
14299 -c "Handshake was completed" \
14300 -s "dumping .client hello, compression. (2 bytes)"
Waleed Elmelegy0b190f12024-07-04 16:38:04 +000014301
Piotr Nowicki0937ed22019-11-26 16:32:40 +010014302# Test heap memory usage after handshake
Jerry Yuab082902021-12-23 18:02:22 +080014303requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Piotr Nowicki0937ed22019-11-26 16:32:40 +010014304requires_config_enabled MBEDTLS_MEMORY_DEBUG
14305requires_config_enabled MBEDTLS_MEMORY_BUFFER_ALLOC_C
14306requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010014307requires_max_content_len 16384
Wenxing Houb4d03cc2024-06-19 11:04:13 +080014308run_tests_memory_after_handshake
Piotr Nowicki0937ed22019-11-26 16:32:40 +010014309
Tomás González24552ff2023-08-17 15:10:03 +010014310if [ "$LIST_TESTS" -eq 0 ]; then
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010014311
Tomás González24552ff2023-08-17 15:10:03 +010014312 # Final report
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010014313
Tomás González24552ff2023-08-17 15:10:03 +010014314 echo "------------------------------------------------------------------------"
14315
14316 if [ $FAILS = 0 ]; then
14317 printf "PASSED"
14318 else
14319 printf "FAILED"
14320 fi
14321 PASSES=$(( $TESTS - $FAILS ))
14322 echo " ($PASSES / $TESTS tests ($SKIPS skipped))"
14323
Gilles Peskine39c52072024-05-17 11:55:15 +020014324 if [ $((TESTS - SKIPS)) -lt $MIN_TESTS ]; then
14325 cat <<EOF
14326Error: Expected to run at least $MIN_TESTS, but only ran $((TESTS - SKIPS)).
14327Maybe a bad filter ('$FILTER') or a bad configuration?
14328EOF
14329 if [ $FAILS -eq 0 ]; then
14330 FAILS=1
14331 fi
14332 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010014333fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010014334
Tom Cosgrovefc0e79e2023-01-13 12:13:41 +000014335if [ $FAILS -gt 255 ]; then
14336 # Clamp at 255 as caller gets exit code & 0xFF
14337 # (so 256 would be 0, or success, etc)
14338 FAILS=255
14339fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010014340exit $FAILS