aboutsummaryrefslogtreecommitdiff
path: root/openssl-1.1.0h/test/ssl-tests/05-sni.conf.in
blob: 76003e7623c82ce21dded75e959e209851e16c8b (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
# -*- mode: perl; -*-
# Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
#
# Licensed under the OpenSSL license (the "License").  You may not use
# this file except in compliance with the License.  You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html


## SSL test configurations

use strict;
use warnings;

package ssltests;

our @tests = (
    {
        name => "SNI-switch-context",
        server => {
            extra => {
                "ServerNameCallback" => "IgnoreMismatch",
            },
        },
        client => {
            extra => {
                "ServerName" => "server2",
            },
        },
        test   => {
            "ExpectedServerName" => "server2",
            "ExpectedResult" => "Success"
        },
    },
    {
        name => "SNI-keep-context",
        server => {
            extra => {
                "ServerNameCallback" => "IgnoreMismatch",
            },
        },
        client => {
            extra => {
                "ServerName" => "server1",
            },
        },
        test   => {
            "ExpectedServerName" => "server1",
            "ExpectedResult" => "Success"
        },
    },
    {
        name => "SNI-no-server-support",
        server => { },
        client => {
            extra => {
                "ServerName" => "server1",
            },
        },
        test   => { "ExpectedResult" => "Success" },
    },
    {
        name => "SNI-no-client-support",
        server => {
            extra => {
                "ServerNameCallback" => "IgnoreMismatch",
            },
        },
        client => { },
        test   => {
            # We expect that the callback is still called
            # to let the application decide whether they tolerate
            # missing SNI (as our test callback does).
            "ExpectedServerName" => "server1",
            "ExpectedResult" => "Success"
        },
    },
    {
        name => "SNI-bad-sni-ignore-mismatch",
        server => {
            extra => {
                "ServerNameCallback" => "IgnoreMismatch",
            },
        },
        client => {
            extra => {
                "ServerName" => "invalid",
            },
        },
        test   => {
            "ExpectedServerName" => "server1",
            "ExpectedResult" => "Success"
        },
    },
    {
        name => "SNI-bad-sni-reject-mismatch",
        server => {
            extra => {
                "ServerNameCallback" => "RejectMismatch",
            },
        },
        client => {
            extra => {
                "ServerName" => "invalid",
            },
        },
        test   => {
            "ExpectedResult" => "ServerFail",
            "ExpectedServerAlert" => "UnrecognizedName"
        },
    },
);