blob: b6911ae4d5a4eae472d9b7128ac8348f23bbe477 [file] [log] [blame]
Minos Galanakis22098d42025-03-20 09:33:09 +00001# Miscellaneous tests related to the TLS handshake layer.
2#
3# Automatically generated by generate_tls_handshake_tests.py. Do not edit!
4
5# Copyright The Mbed TLS Contributors
6# SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
7
8run_test "Handshake defragmentation on client: no fragmentation, for reference" \
9 "$O_NEXT_SRV -allow_no_dhe_kex" \
10 "$P_CLI debug_level=4" \
11 0 \
12 -C "waiting for more fragments"
13
14requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
15requires_certificate_authentication
16run_test "Handshake defragmentation on client: len=512, TLS 1.3" \
17 "$O_NEXT_SRV -tls1_3 -split_send_frag 512" \
18 "$P_CLI debug_level=4" \
19 0 \
20 -c "reassembled record" \
21 -c "initial handshake fragment: 512, 0\\.\\.512 of [0-9]\\+" \
22 -c "subsequent handshake fragment: [0-9]\\+, 512\\.\\." \
23 -c "Prepare: waiting for more handshake fragments 512/" \
24 -c "Consume: waiting for more handshake fragments 512/"
25
26requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
27requires_certificate_authentication
28requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
29run_test "Handshake defragmentation on client: len=512, TLS 1.2" \
30 "$O_NEXT_SRV -tls1_2 -split_send_frag 512" \
31 "$P_CLI debug_level=4" \
32 0 \
33 -c "reassembled record" \
34 -c "initial handshake fragment: 512, 0\\.\\.512 of [0-9]\\+" \
35 -c "subsequent handshake fragment: [0-9]\\+, 512\\.\\." \
36 -c "Prepare: waiting for more handshake fragments 512/" \
37 -c "Consume: waiting for more handshake fragments 512/"
38
39requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
40requires_certificate_authentication
41run_test "Handshake defragmentation on client: len=513, TLS 1.3" \
42 "$O_NEXT_SRV -tls1_3 -split_send_frag 513" \
43 "$P_CLI debug_level=4" \
44 0 \
45 -c "reassembled record" \
46 -c "initial handshake fragment: 513, 0\\.\\.513 of [0-9]\\+" \
47 -c "subsequent handshake fragment: [0-9]\\+, 513\\.\\." \
48 -c "Prepare: waiting for more handshake fragments 513/" \
49 -c "Consume: waiting for more handshake fragments 513/"
50
51requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
52requires_certificate_authentication
53requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
54run_test "Handshake defragmentation on client: len=513, TLS 1.2" \
55 "$O_NEXT_SRV -tls1_2 -split_send_frag 513" \
56 "$P_CLI debug_level=4" \
57 0 \
58 -c "reassembled record" \
59 -c "initial handshake fragment: 513, 0\\.\\.513 of [0-9]\\+" \
60 -c "subsequent handshake fragment: [0-9]\\+, 513\\.\\." \
61 -c "Prepare: waiting for more handshake fragments 513/" \
62 -c "Consume: waiting for more handshake fragments 513/"
63
64requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
65requires_certificate_authentication
66run_test "Handshake defragmentation on client: len=256, TLS 1.3" \
67 "$O_NEXT_SRV -tls1_3 -split_send_frag 256" \
68 "$P_CLI debug_level=4" \
69 0 \
70 -c "reassembled record" \
71 -c "initial handshake fragment: 256, 0\\.\\.256 of [0-9]\\+" \
72 -c "subsequent handshake fragment: [0-9]\\+, 256\\.\\." \
73 -c "Prepare: waiting for more handshake fragments 256/" \
74 -c "Consume: waiting for more handshake fragments 256/"
75
76requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
77requires_certificate_authentication
78requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
79run_test "Handshake defragmentation on client: len=256, TLS 1.2" \
80 "$O_NEXT_SRV -tls1_2 -split_send_frag 256" \
81 "$P_CLI debug_level=4" \
82 0 \
83 -c "reassembled record" \
84 -c "initial handshake fragment: 256, 0\\.\\.256 of [0-9]\\+" \
85 -c "subsequent handshake fragment: [0-9]\\+, 256\\.\\." \
86 -c "Prepare: waiting for more handshake fragments 256/" \
87 -c "Consume: waiting for more handshake fragments 256/"
88
89requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
90requires_certificate_authentication
91run_test "Handshake defragmentation on client: len=128, TLS 1.3" \
92 "$O_NEXT_SRV -tls1_3 -split_send_frag 128" \
93 "$P_CLI debug_level=4" \
94 0 \
95 -c "reassembled record" \
96 -c "initial handshake fragment: 128, 0\\.\\.128 of [0-9]\\+" \
97 -c "subsequent handshake fragment: [0-9]\\+, 128\\.\\." \
98 -c "Prepare: waiting for more handshake fragments 128/" \
99 -c "Consume: waiting for more handshake fragments 128/"
100
101requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
102requires_certificate_authentication
103requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
104run_test "Handshake defragmentation on client: len=128, TLS 1.2" \
105 "$O_NEXT_SRV -tls1_2 -split_send_frag 128" \
106 "$P_CLI debug_level=4" \
107 0 \
108 -c "reassembled record" \
109 -c "initial handshake fragment: 128, 0\\.\\.128 of [0-9]\\+" \
110 -c "subsequent handshake fragment: [0-9]\\+, 128\\.\\." \
111 -c "Prepare: waiting for more handshake fragments 128/" \
112 -c "Consume: waiting for more handshake fragments 128/"
113
114requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
115requires_certificate_authentication
116run_test "Handshake defragmentation on client: len=64, TLS 1.3" \
117 "$O_NEXT_SRV -tls1_3 -split_send_frag 64" \
118 "$P_CLI debug_level=4" \
119 0 \
120 -c "reassembled record" \
121 -c "initial handshake fragment: 64, 0\\.\\.64 of [0-9]\\+" \
122 -c "subsequent handshake fragment: [0-9]\\+, 64\\.\\." \
123 -c "Prepare: waiting for more handshake fragments 64/" \
124 -c "Consume: waiting for more handshake fragments 64/"
125
126requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
127requires_certificate_authentication
128requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
129run_test "Handshake defragmentation on client: len=64, TLS 1.2" \
130 "$O_NEXT_SRV -tls1_2 -split_send_frag 64" \
131 "$P_CLI debug_level=4" \
132 0 \
133 -c "reassembled record" \
134 -c "initial handshake fragment: 64, 0\\.\\.64 of [0-9]\\+" \
135 -c "subsequent handshake fragment: [0-9]\\+, 64\\.\\." \
136 -c "Prepare: waiting for more handshake fragments 64/" \
137 -c "Consume: waiting for more handshake fragments 64/"
138
139requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
140requires_certificate_authentication
141run_test "Handshake defragmentation on client: len=36, TLS 1.3" \
142 "$O_NEXT_SRV -tls1_3 -split_send_frag 36" \
143 "$P_CLI debug_level=4" \
144 0 \
145 -c "reassembled record" \
146 -c "initial handshake fragment: 36, 0\\.\\.36 of [0-9]\\+" \
147 -c "subsequent handshake fragment: [0-9]\\+, 36\\.\\." \
148 -c "Prepare: waiting for more handshake fragments 36/" \
149 -c "Consume: waiting for more handshake fragments 36/"
150
151requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
152requires_certificate_authentication
153requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
154run_test "Handshake defragmentation on client: len=36, TLS 1.2" \
155 "$O_NEXT_SRV -tls1_2 -split_send_frag 36" \
156 "$P_CLI debug_level=4" \
157 0 \
158 -c "reassembled record" \
159 -c "initial handshake fragment: 36, 0\\.\\.36 of [0-9]\\+" \
160 -c "subsequent handshake fragment: [0-9]\\+, 36\\.\\." \
161 -c "Prepare: waiting for more handshake fragments 36/" \
162 -c "Consume: waiting for more handshake fragments 36/"
163
164requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
165requires_certificate_authentication
166run_test "Handshake defragmentation on client: len=32, TLS 1.3" \
167 "$O_NEXT_SRV -tls1_3 -split_send_frag 32" \
168 "$P_CLI debug_level=4" \
169 0 \
170 -c "reassembled record" \
171 -c "initial handshake fragment: 32, 0\\.\\.32 of [0-9]\\+" \
172 -c "subsequent handshake fragment: [0-9]\\+, 32\\.\\." \
173 -c "Prepare: waiting for more handshake fragments 32/" \
174 -c "Consume: waiting for more handshake fragments 32/"
175
176requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
177requires_certificate_authentication
178requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
179run_test "Handshake defragmentation on client: len=32, TLS 1.2" \
180 "$O_NEXT_SRV -tls1_2 -split_send_frag 32" \
181 "$P_CLI debug_level=4" \
182 0 \
183 -c "reassembled record" \
184 -c "initial handshake fragment: 32, 0\\.\\.32 of [0-9]\\+" \
185 -c "subsequent handshake fragment: [0-9]\\+, 32\\.\\." \
186 -c "Prepare: waiting for more handshake fragments 32/" \
187 -c "Consume: waiting for more handshake fragments 32/"
188
189requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
190requires_certificate_authentication
191run_test "Handshake defragmentation on client: len=16, TLS 1.3" \
192 "$O_NEXT_SRV -tls1_3 -split_send_frag 16" \
193 "$P_CLI debug_level=4" \
194 0 \
195 -c "reassembled record" \
196 -c "initial handshake fragment: 16, 0\\.\\.16 of [0-9]\\+" \
197 -c "subsequent handshake fragment: [0-9]\\+, 16\\.\\." \
198 -c "Prepare: waiting for more handshake fragments 16/" \
199 -c "Consume: waiting for more handshake fragments 16/"
200
201requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
202requires_certificate_authentication
203requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
204run_test "Handshake defragmentation on client: len=16, TLS 1.2" \
205 "$O_NEXT_SRV -tls1_2 -split_send_frag 16" \
206 "$P_CLI debug_level=4" \
207 0 \
208 -c "reassembled record" \
209 -c "initial handshake fragment: 16, 0\\.\\.16 of [0-9]\\+" \
210 -c "subsequent handshake fragment: [0-9]\\+, 16\\.\\." \
211 -c "Prepare: waiting for more handshake fragments 16/" \
212 -c "Consume: waiting for more handshake fragments 16/"
213
214requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
215requires_certificate_authentication
216run_test "Handshake defragmentation on client: len=13, TLS 1.3" \
217 "$O_NEXT_SRV -tls1_3 -split_send_frag 13" \
218 "$P_CLI debug_level=4" \
219 0 \
220 -c "reassembled record" \
221 -c "initial handshake fragment: 13, 0\\.\\.13 of [0-9]\\+" \
222 -c "subsequent handshake fragment: [0-9]\\+, 13\\.\\." \
223 -c "Prepare: waiting for more handshake fragments 13/" \
224 -c "Consume: waiting for more handshake fragments 13/"
225
226requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
227requires_certificate_authentication
228requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
229run_test "Handshake defragmentation on client: len=13, TLS 1.2" \
230 "$O_NEXT_SRV -tls1_2 -split_send_frag 13" \
231 "$P_CLI debug_level=4" \
232 0 \
233 -c "reassembled record" \
234 -c "initial handshake fragment: 13, 0\\.\\.13 of [0-9]\\+" \
235 -c "subsequent handshake fragment: [0-9]\\+, 13\\.\\." \
236 -c "Prepare: waiting for more handshake fragments 13/" \
237 -c "Consume: waiting for more handshake fragments 13/"
238
239requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
240requires_certificate_authentication
241run_test "Handshake defragmentation on client: len=5, TLS 1.3" \
242 "$O_NEXT_SRV -tls1_3 -split_send_frag 5" \
243 "$P_CLI debug_level=4" \
244 0 \
245 -c "reassembled record" \
246 -c "initial handshake fragment: 5, 0\\.\\.5 of [0-9]\\+" \
247 -c "subsequent handshake fragment: [0-9]\\+, 5\\.\\." \
248 -c "Prepare: waiting for more handshake fragments 5/" \
249 -c "Consume: waiting for more handshake fragments 5/"
250
251requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
252requires_certificate_authentication
253requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
254run_test "Handshake defragmentation on client: len=5, TLS 1.2" \
255 "$O_NEXT_SRV -tls1_2 -split_send_frag 5" \
256 "$P_CLI debug_level=4" \
257 0 \
258 -c "reassembled record" \
259 -c "initial handshake fragment: 5, 0\\.\\.5 of [0-9]\\+" \
260 -c "subsequent handshake fragment: [0-9]\\+, 5\\.\\." \
261 -c "Prepare: waiting for more handshake fragments 5/" \
262 -c "Consume: waiting for more handshake fragments 5/"
263
264requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
265requires_certificate_authentication
266run_test "Handshake defragmentation on client: len=4, TLS 1.3" \
267 "$O_NEXT_SRV -tls1_3 -split_send_frag 4" \
268 "$P_CLI debug_level=4" \
269 0 \
270 -c "reassembled record" \
271 -c "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
272 -c "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
273 -c "Prepare: waiting for more handshake fragments 4/" \
274 -c "Consume: waiting for more handshake fragments 4/"
275
276requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
277requires_certificate_authentication
278requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
279run_test "Handshake defragmentation on client: len=4, TLS 1.2, default" \
280 "$O_NEXT_SRV -tls1_2 -split_send_frag 4" \
281 "$P_CLI debug_level=4" \
282 0 \
283 -c "reassembled record" \
284 -c "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
285 -c "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
286 -c "Prepare: waiting for more handshake fragments 4/" \
287 -c "Consume: waiting for more handshake fragments 4/"
288
289requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
290requires_certificate_authentication
291requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
292run_test "Handshake defragmentation on client: len=4, TLS 1.2, null" \
293 "$O_NEXT_SRV -tls1_2 -split_send_frag 4 -cipher ALL@SECLEVEL=0:COMPLEMENTOFALL@SECLEVEL=0" \
294 "$P_CLI debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-NULL-SHA" \
295 0 \
296 -c "reassembled record" \
297 -c "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
298 -c "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
299 -c "Prepare: waiting for more handshake fragments 4/" \
300 -c "Consume: waiting for more handshake fragments 4/"
301
302requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
303requires_certificate_authentication
304requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
305run_test "Handshake defragmentation on client: len=4, TLS 1.2, ChachaPoly" \
306 "$O_NEXT_SRV -tls1_2 -split_send_frag 4" \
307 "$P_CLI debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
308 0 \
309 -c "reassembled record" \
310 -c "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
311 -c "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
312 -c "Prepare: waiting for more handshake fragments 4/" \
313 -c "Consume: waiting for more handshake fragments 4/"
314
315requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
316requires_certificate_authentication
317requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
318run_test "Handshake defragmentation on client: len=4, TLS 1.2, GCM" \
319 "$O_NEXT_SRV -tls1_2 -split_send_frag 4" \
320 "$P_CLI debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
321 0 \
322 -c "reassembled record" \
323 -c "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
324 -c "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
325 -c "Prepare: waiting for more handshake fragments 4/" \
326 -c "Consume: waiting for more handshake fragments 4/"
327
328requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
329requires_certificate_authentication
330requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
331run_test "Handshake defragmentation on client: len=4, TLS 1.2, CBC, etm=n" \
332 "$O_NEXT_SRV -tls1_2 -split_send_frag 4" \
333 "$P_CLI debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 etm=0" \
334 0 \
335 -c "reassembled record" \
336 -c "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
337 -c "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
338 -c "Prepare: waiting for more handshake fragments 4/" \
339 -c "Consume: waiting for more handshake fragments 4/" \
340 -C "using encrypt then mac"
341
342requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
343requires_certificate_authentication
344requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
345requires_config_enabled MBEDTLS_SSL_ENCRYPT_THEN_MAC
346run_test "Handshake defragmentation on client: len=4, TLS 1.2, CBC, etm=y" \
347 "$O_NEXT_SRV -tls1_2 -split_send_frag 4" \
348 "$P_CLI debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 etm=1" \
349 0 \
350 -c "using encrypt then mac" \
351 -c "reassembled record" \
352 -c "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
353 -c "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
354 -c "Prepare: waiting for more handshake fragments 4/" \
355 -c "Consume: waiting for more handshake fragments 4/"
356
357requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
358run_test "Handshake defragmentation on client: len=3, TLS 1.3" \
359 "$O_NEXT_SRV -tls1_3 -allow_no_dhe_kex -split_send_frag 3" \
360 "$P_CLI debug_level=4" \
361 1 \
362 -c "=> ssl_tls13_process_server_hello" \
363 -c "handshake message too short: 3" \
364 -c "SSL - An invalid SSL record was received"
365
366requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
367run_test "Handshake defragmentation on client: len=3, TLS 1.2" \
368 "$O_NEXT_SRV -tls1_2 -allow_no_dhe_kex -split_send_frag 3" \
369 "$P_CLI debug_level=4" \
370 1 \
371 -c "handshake message too short: 3" \
372 -c "SSL - An invalid SSL record was received"
373
374run_test "Handshake defragmentation on server: no fragmentation, for reference" \
375 "$P_SRV debug_level=4 auth_mode=required" \
376 "$O_NEXT_CLI -allow_no_dhe_kex -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
377 0 \
378 -S "waiting for more fragments"
379
380requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
381requires_certificate_authentication
382run_test "Handshake defragmentation on server: len=512, TLS 1.3" \
383 "$P_SRV debug_level=4 auth_mode=required" \
384 "$O_NEXT_CLI -tls1_3 -split_send_frag 512 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
385 0 \
386 -s "reassembled record" \
387 -s "initial handshake fragment: 512, 0\\.\\.512 of [0-9]\\+" \
388 -s "subsequent handshake fragment: [0-9]\\+, 512\\.\\." \
389 -s "Prepare: waiting for more handshake fragments 512/" \
390 -s "Consume: waiting for more handshake fragments 512/"
391
392requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
393requires_certificate_authentication
394run_test "Handshake defragmentation on server: len=512, TLS 1.2" \
395 "$P_SRV debug_level=4 auth_mode=required" \
396 "$O_NEXT_CLI -tls1_2 -split_send_frag 512 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
397 0 \
398 -s "reassembled record" \
399 -s "initial handshake fragment: 512, 0\\.\\.512 of [0-9]\\+" \
400 -s "subsequent handshake fragment: [0-9]\\+, 512\\.\\." \
401 -s "Prepare: waiting for more handshake fragments 512/" \
402 -s "Consume: waiting for more handshake fragments 512/"
403
404requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
405requires_certificate_authentication
406run_test "Handshake defragmentation on server: len=513, TLS 1.3" \
407 "$P_SRV debug_level=4 auth_mode=required" \
408 "$O_NEXT_CLI -tls1_3 -split_send_frag 513 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
409 0 \
410 -s "reassembled record" \
411 -s "initial handshake fragment: 513, 0\\.\\.513 of [0-9]\\+" \
412 -s "subsequent handshake fragment: [0-9]\\+, 513\\.\\." \
413 -s "Prepare: waiting for more handshake fragments 513/" \
414 -s "Consume: waiting for more handshake fragments 513/"
415
416requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
417requires_certificate_authentication
418run_test "Handshake defragmentation on server: len=513, TLS 1.2" \
419 "$P_SRV debug_level=4 auth_mode=required" \
420 "$O_NEXT_CLI -tls1_2 -split_send_frag 513 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
421 0 \
422 -s "reassembled record" \
423 -s "initial handshake fragment: 513, 0\\.\\.513 of [0-9]\\+" \
424 -s "subsequent handshake fragment: [0-9]\\+, 513\\.\\." \
425 -s "Prepare: waiting for more handshake fragments 513/" \
426 -s "Consume: waiting for more handshake fragments 513/"
427
428requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
429requires_certificate_authentication
430run_test "Handshake defragmentation on server: len=256, TLS 1.3" \
431 "$P_SRV debug_level=4 auth_mode=required" \
432 "$O_NEXT_CLI -tls1_3 -split_send_frag 256 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
433 0 \
434 -s "reassembled record" \
435 -s "initial handshake fragment: 256, 0\\.\\.256 of [0-9]\\+" \
436 -s "subsequent handshake fragment: [0-9]\\+, 256\\.\\." \
437 -s "Prepare: waiting for more handshake fragments 256/" \
438 -s "Consume: waiting for more handshake fragments 256/"
439
440requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
441requires_certificate_authentication
442run_test "Handshake defragmentation on server: len=256, TLS 1.2" \
443 "$P_SRV debug_level=4 auth_mode=required" \
444 "$O_NEXT_CLI -tls1_2 -split_send_frag 256 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
445 0 \
446 -s "reassembled record" \
447 -s "initial handshake fragment: 256, 0\\.\\.256 of [0-9]\\+" \
448 -s "subsequent handshake fragment: [0-9]\\+, 256\\.\\." \
449 -s "Prepare: waiting for more handshake fragments 256/" \
450 -s "Consume: waiting for more handshake fragments 256/"
451
452requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
453requires_certificate_authentication
454run_test "Handshake defragmentation on server: len=128, TLS 1.3" \
455 "$P_SRV debug_level=4 auth_mode=required" \
456 "$O_NEXT_CLI -tls1_3 -split_send_frag 128 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
457 0 \
458 -s "reassembled record" \
459 -s "initial handshake fragment: 128, 0\\.\\.128 of [0-9]\\+" \
460 -s "subsequent handshake fragment: [0-9]\\+, 128\\.\\." \
461 -s "Prepare: waiting for more handshake fragments 128/" \
462 -s "Consume: waiting for more handshake fragments 128/"
463
464requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
465requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
466requires_certificate_authentication
467run_test "Handshake defragmentation on server: len=128, TLS 1.2 with 1.3 support" \
468 "$P_SRV debug_level=4 auth_mode=required" \
469 "$O_NEXT_CLI -tls1_2 -split_send_frag 128 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
470 0 \
471 -s "reassembled record" \
472 -s "initial handshake fragment: 128, 0\\.\\.128 of [0-9]\\+" \
473 -s "subsequent handshake fragment: [0-9]\\+, 128\\.\\." \
474 -s "Prepare: waiting for more handshake fragments 128/" \
475 -s "Consume: waiting for more handshake fragments 128/"
476
477requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
478requires_certificate_authentication
479run_test "Handshake defragmentation on server: len=64, TLS 1.3" \
480 "$P_SRV debug_level=4 auth_mode=required" \
481 "$O_NEXT_CLI -tls1_3 -split_send_frag 64 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
482 0 \
483 -s "reassembled record" \
484 -s "initial handshake fragment: 64, 0\\.\\.64 of [0-9]\\+" \
485 -s "subsequent handshake fragment: [0-9]\\+, 64\\.\\." \
486 -s "Prepare: waiting for more handshake fragments 64/" \
487 -s "Consume: waiting for more handshake fragments 64/"
488
489requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
490requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
491requires_certificate_authentication
492run_test "Handshake defragmentation on server: len=64, TLS 1.2 with 1.3 support" \
493 "$P_SRV debug_level=4 auth_mode=required" \
494 "$O_NEXT_CLI -tls1_2 -split_send_frag 64 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
495 0 \
496 -s "reassembled record" \
497 -s "initial handshake fragment: 64, 0\\.\\.64 of [0-9]\\+" \
498 -s "subsequent handshake fragment: [0-9]\\+, 64\\.\\." \
499 -s "Prepare: waiting for more handshake fragments 64/" \
500 -s "Consume: waiting for more handshake fragments 64/"
501
502requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
503requires_certificate_authentication
504run_test "Handshake defragmentation on server: len=36, TLS 1.3" \
505 "$P_SRV debug_level=4 auth_mode=required" \
506 "$O_NEXT_CLI -tls1_3 -split_send_frag 36 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
507 0 \
508 -s "reassembled record" \
509 -s "initial handshake fragment: 36, 0\\.\\.36 of [0-9]\\+" \
510 -s "subsequent handshake fragment: [0-9]\\+, 36\\.\\." \
511 -s "Prepare: waiting for more handshake fragments 36/" \
512 -s "Consume: waiting for more handshake fragments 36/"
513
514requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
515requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
516requires_certificate_authentication
517run_test "Handshake defragmentation on server: len=36, TLS 1.2 with 1.3 support" \
518 "$P_SRV debug_level=4 auth_mode=required" \
519 "$O_NEXT_CLI -tls1_2 -split_send_frag 36 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
520 0 \
521 -s "reassembled record" \
522 -s "initial handshake fragment: 36, 0\\.\\.36 of [0-9]\\+" \
523 -s "subsequent handshake fragment: [0-9]\\+, 36\\.\\." \
524 -s "Prepare: waiting for more handshake fragments 36/" \
525 -s "Consume: waiting for more handshake fragments 36/"
526
527requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
528requires_certificate_authentication
529run_test "Handshake defragmentation on server: len=32, TLS 1.3" \
530 "$P_SRV debug_level=4 auth_mode=required" \
531 "$O_NEXT_CLI -tls1_3 -split_send_frag 32 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
532 0 \
533 -s "reassembled record" \
534 -s "initial handshake fragment: 32, 0\\.\\.32 of [0-9]\\+" \
535 -s "subsequent handshake fragment: [0-9]\\+, 32\\.\\." \
536 -s "Prepare: waiting for more handshake fragments 32/" \
537 -s "Consume: waiting for more handshake fragments 32/"
538
539requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
540requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
541requires_certificate_authentication
542run_test "Handshake defragmentation on server: len=32, TLS 1.2 with 1.3 support" \
543 "$P_SRV debug_level=4 auth_mode=required" \
544 "$O_NEXT_CLI -tls1_2 -split_send_frag 32 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
545 0 \
546 -s "reassembled record" \
547 -s "initial handshake fragment: 32, 0\\.\\.32 of [0-9]\\+" \
548 -s "subsequent handshake fragment: [0-9]\\+, 32\\.\\." \
549 -s "Prepare: waiting for more handshake fragments 32/" \
550 -s "Consume: waiting for more handshake fragments 32/"
551
552requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
553requires_certificate_authentication
554run_test "Handshake defragmentation on server: len=16, TLS 1.3" \
555 "$P_SRV debug_level=4 auth_mode=required" \
556 "$O_NEXT_CLI -tls1_3 -split_send_frag 16 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
557 0 \
558 -s "reassembled record" \
559 -s "initial handshake fragment: 16, 0\\.\\.16 of [0-9]\\+" \
560 -s "subsequent handshake fragment: [0-9]\\+, 16\\.\\." \
561 -s "Prepare: waiting for more handshake fragments 16/" \
562 -s "Consume: waiting for more handshake fragments 16/"
563
564requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
565requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
566requires_certificate_authentication
567run_test "Handshake defragmentation on server: len=16, TLS 1.2 with 1.3 support" \
568 "$P_SRV debug_level=4 auth_mode=required" \
569 "$O_NEXT_CLI -tls1_2 -split_send_frag 16 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
570 0 \
571 -s "reassembled record" \
572 -s "initial handshake fragment: 16, 0\\.\\.16 of [0-9]\\+" \
573 -s "subsequent handshake fragment: [0-9]\\+, 16\\.\\." \
574 -s "Prepare: waiting for more handshake fragments 16/" \
575 -s "Consume: waiting for more handshake fragments 16/"
576
577requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
578requires_certificate_authentication
579run_test "Handshake defragmentation on server: len=13, TLS 1.3" \
580 "$P_SRV debug_level=4 auth_mode=required" \
581 "$O_NEXT_CLI -tls1_3 -split_send_frag 13 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
582 0 \
583 -s "reassembled record" \
584 -s "initial handshake fragment: 13, 0\\.\\.13 of [0-9]\\+" \
585 -s "subsequent handshake fragment: [0-9]\\+, 13\\.\\." \
586 -s "Prepare: waiting for more handshake fragments 13/" \
587 -s "Consume: waiting for more handshake fragments 13/"
588
589requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
590requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
591requires_certificate_authentication
592run_test "Handshake defragmentation on server: len=13, TLS 1.2 with 1.3 support" \
593 "$P_SRV debug_level=4 auth_mode=required" \
594 "$O_NEXT_CLI -tls1_2 -split_send_frag 13 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
595 0 \
596 -s "reassembled record" \
597 -s "initial handshake fragment: 13, 0\\.\\.13 of [0-9]\\+" \
598 -s "subsequent handshake fragment: [0-9]\\+, 13\\.\\." \
599 -s "Prepare: waiting for more handshake fragments 13/" \
600 -s "Consume: waiting for more handshake fragments 13/"
601
602requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
603requires_certificate_authentication
604run_test "Handshake defragmentation on server: len=5, TLS 1.3" \
605 "$P_SRV debug_level=4 auth_mode=required" \
606 "$O_NEXT_CLI -tls1_3 -split_send_frag 5 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
607 0 \
608 -s "reassembled record" \
609 -s "initial handshake fragment: 5, 0\\.\\.5 of [0-9]\\+" \
610 -s "subsequent handshake fragment: [0-9]\\+, 5\\.\\." \
611 -s "Prepare: waiting for more handshake fragments 5/" \
612 -s "Consume: waiting for more handshake fragments 5/"
613
614requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
615requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
616requires_certificate_authentication
617run_test "Handshake defragmentation on server: len=5, TLS 1.2 with 1.3 support" \
618 "$P_SRV debug_level=4 auth_mode=required" \
619 "$O_NEXT_CLI -tls1_2 -split_send_frag 5 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
620 0 \
621 -s "reassembled record" \
622 -s "initial handshake fragment: 5, 0\\.\\.5 of [0-9]\\+" \
623 -s "subsequent handshake fragment: [0-9]\\+, 5\\.\\." \
624 -s "Prepare: waiting for more handshake fragments 5/" \
625 -s "Consume: waiting for more handshake fragments 5/"
626
627requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
628requires_certificate_authentication
629run_test "Handshake defragmentation on server: len=4, TLS 1.3" \
630 "$P_SRV debug_level=4 auth_mode=required" \
631 "$O_NEXT_CLI -tls1_3 -split_send_frag 4 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
632 0 \
633 -s "reassembled record" \
634 -s "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
635 -s "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
636 -s "Prepare: waiting for more handshake fragments 4/" \
637 -s "Consume: waiting for more handshake fragments 4/"
638
639requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
640requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
641requires_certificate_authentication
642run_test "Handshake defragmentation on server: len=4, TLS 1.2 with 1.3 support, default" \
643 "$P_SRV debug_level=4 auth_mode=required" \
644 "$O_NEXT_CLI -tls1_2 -split_send_frag 4 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
645 0 \
646 -s "reassembled record" \
647 -s "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
648 -s "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
649 -s "Prepare: waiting for more handshake fragments 4/" \
650 -s "Consume: waiting for more handshake fragments 4/"
651
652requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
653requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
654requires_certificate_authentication
655requires_ciphersuite_enabled TLS-ECDHE-ECDSA-WITH-NULL-SHA
656run_test "Handshake defragmentation on server: len=4, TLS 1.2 with 1.3 support, null" \
657 "$P_SRV debug_level=4 auth_mode=required" \
658 "$O_NEXT_CLI -tls1_2 -split_send_frag 4 -cipher ECDHE-ECDSA-NULL-SHA@SECLEVEL=0 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
659 0 \
660 -s "reassembled record" \
661 -s "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
662 -s "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
663 -s "Prepare: waiting for more handshake fragments 4/" \
664 -s "Consume: waiting for more handshake fragments 4/"
665
666requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
667requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
668requires_certificate_authentication
669requires_ciphersuite_enabled TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256
670run_test "Handshake defragmentation on server: len=4, TLS 1.2 with 1.3 support, ChachaPoly" \
671 "$P_SRV debug_level=4 auth_mode=required" \
672 "$O_NEXT_CLI -tls1_2 -split_send_frag 4 -cipher ECDHE-ECDSA-CHACHA20-POLY1305 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
673 0 \
674 -s "reassembled record" \
675 -s "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
676 -s "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
677 -s "Prepare: waiting for more handshake fragments 4/" \
678 -s "Consume: waiting for more handshake fragments 4/"
679
680requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
681requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
682requires_certificate_authentication
683requires_ciphersuite_enabled TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
684run_test "Handshake defragmentation on server: len=4, TLS 1.2 with 1.3 support, GCM" \
685 "$P_SRV debug_level=4 auth_mode=required" \
686 "$O_NEXT_CLI -tls1_2 -split_send_frag 4 -cipher ECDHE-ECDSA-AES128-GCM-SHA256 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
687 0 \
688 -s "reassembled record" \
689 -s "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
690 -s "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
691 -s "Prepare: waiting for more handshake fragments 4/" \
692 -s "Consume: waiting for more handshake fragments 4/"
693
694requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
695requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
696requires_certificate_authentication
697requires_ciphersuite_enabled TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
698run_test "Handshake defragmentation on server: len=4, TLS 1.2 with 1.3 support, CBC, etm=n" \
699 "$P_SRV debug_level=4 etm=0 auth_mode=required" \
700 "$O_NEXT_CLI -tls1_2 -split_send_frag 4 -cipher ECDHE-ECDSA-AES128-SHA256 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
701 0 \
702 -s "reassembled record" \
703 -s "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
704 -s "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
705 -s "Prepare: waiting for more handshake fragments 4/" \
706 -s "Consume: waiting for more handshake fragments 4/" \
707 -S "using encrypt then mac"
708
709requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
710requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
711requires_certificate_authentication
712requires_ciphersuite_enabled TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
713requires_config_enabled MBEDTLS_SSL_ENCRYPT_THEN_MAC
714run_test "Handshake defragmentation on server: len=4, TLS 1.2 with 1.3 support, CBC, etm=y" \
715 "$P_SRV debug_level=4 etm=1 auth_mode=required" \
716 "$O_NEXT_CLI -tls1_2 -split_send_frag 4 -cipher ECDHE-ECDSA-AES128-SHA256 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
717 0 \
718 -s "using encrypt then mac" \
719 -s "reassembled record" \
720 -s "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
721 -s "subsequent handshake fragment: [0-9]\\+, 4\\.\\." \
722 -s "Prepare: waiting for more handshake fragments 4/" \
723 -s "Consume: waiting for more handshake fragments 4/"
724
725requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
726run_test "Handshake defragmentation on server: len=3, TLS 1.3" \
727 "$P_SRV debug_level=4 auth_mode=required" \
728 "$O_NEXT_CLI -tls1_3 -allow_no_dhe_kex -split_send_frag 3 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
729 1 \
730 -s "<= parse client hello" \
731 -s "handshake message too short: 3" \
732 -s "SSL - An invalid SSL record was received"
733
734requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
735requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
736run_test "Handshake defragmentation on server: len=3, TLS 1.2 with 1.3 support" \
737 "$P_SRV debug_level=4 auth_mode=required" \
738 "$O_NEXT_CLI -tls1_2 -allow_no_dhe_kex -split_send_frag 3 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
739 1 \
740 -s "<= parse client hello" \
741 -s "handshake message too short: 3" \
742 -s "SSL - An invalid SSL record was received"
743
744# End of automatically generated file.