Add simple interop tests (reliable connection)
This commit is contained in:
Manuel Pégourié-Gonnard
parent
3879fdfece
commit
1218bc0f74
1 changed files with 114 additions and 0 deletions
114
tests/ssl-opt.sh
114
tests/ssl-opt.sh
|
|
@ -5253,6 +5253,120 @@ run_test "DTLS fragmenting: proxy MTU + 3d" \
|
||||||
-c "found fragmented DTLS handshake message" \
|
-c "found fragmented DTLS handshake message" \
|
||||||
-C "error"
|
-C "error"
|
||||||
|
|
||||||
|
# here and below we just want to test that the we fragment in a way that
|
||||||
|
# pleases other implementations, so we don't need the peer to fragment
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
|
||||||
|
requires_config_enabled MBEDTLS_RSA_C
|
||||||
|
requires_config_enabled MBEDTLS_ECDSA_C
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
|
||||||
|
run_test "DTLS fragmenting: gnutls server, DTLS 1.2" \
|
||||||
|
"$G_SRV -u" \
|
||||||
|
"$P_CLI dtls=1 debug_level=2 \
|
||||||
|
crt_file=data_files/server8_int-ca2.crt \
|
||||||
|
key_file=data_files/server8.key \
|
||||||
|
mtu=512 force_version=dtls1_2" \
|
||||||
|
0 \
|
||||||
|
-c "fragmenting handshake message" \
|
||||||
|
-C "error"
|
||||||
|
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
|
||||||
|
requires_config_enabled MBEDTLS_RSA_C
|
||||||
|
requires_config_enabled MBEDTLS_ECDSA_C
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
|
||||||
|
run_test "DTLS fragmenting: gnutls server, DTLS 1.0" \
|
||||||
|
"$G_SRV -u" \
|
||||||
|
"$P_CLI dtls=1 debug_level=2 \
|
||||||
|
crt_file=data_files/server8_int-ca2.crt \
|
||||||
|
key_file=data_files/server8.key \
|
||||||
|
mtu=512 force_version=dtls1_2" \
|
||||||
|
0 \
|
||||||
|
-c "fragmenting handshake message" \
|
||||||
|
-C "error"
|
||||||
|
|
||||||
|
# gnutls-cli always tries IPv6 first, and doesn't fall back to IPv4 with DTLS
|
||||||
|
requires_ipv6
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
|
||||||
|
requires_config_enabled MBEDTLS_RSA_C
|
||||||
|
requires_config_enabled MBEDTLS_ECDSA_C
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
|
||||||
|
run_test "DTLS fragmenting: gnutls client, DTLS 1.2" \
|
||||||
|
"$P_SRV dtls=1 debug_level=2 server_addr=::1 \
|
||||||
|
crt_file=data_files/server7_int-ca.crt \
|
||||||
|
key_file=data_files/server7.key \
|
||||||
|
mtu=512 force_version=dtls1_2" \
|
||||||
|
"$G_CLI -u" \
|
||||||
|
0 \
|
||||||
|
-s "fragmenting handshake message"
|
||||||
|
|
||||||
|
# gnutls-cli always tries IPv6 first, and doesn't fall back to IPv4 with DTLS
|
||||||
|
requires_ipv6
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
|
||||||
|
requires_config_enabled MBEDTLS_RSA_C
|
||||||
|
requires_config_enabled MBEDTLS_ECDSA_C
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
|
||||||
|
run_test "DTLS fragmenting: gnutls client, DTLS 1.0" \
|
||||||
|
"$P_SRV dtls=1 debug_level=2 server_addr=::1 \
|
||||||
|
crt_file=data_files/server7_int-ca.crt \
|
||||||
|
key_file=data_files/server7.key \
|
||||||
|
mtu=512 force_version=dtls1" \
|
||||||
|
"$G_CLI -u" \
|
||||||
|
0 \
|
||||||
|
-s "fragmenting handshake message"
|
||||||
|
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
|
||||||
|
requires_config_enabled MBEDTLS_RSA_C
|
||||||
|
requires_config_enabled MBEDTLS_ECDSA_C
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
|
||||||
|
run_test "DTLS fragmenting: openssl server, DTLS 1.2" \
|
||||||
|
"$O_SRV -dtls1_2 -verify 10" \
|
||||||
|
"$P_CLI dtls=1 debug_level=2 \
|
||||||
|
crt_file=data_files/server8_int-ca2.crt \
|
||||||
|
key_file=data_files/server8.key \
|
||||||
|
mtu=512 force_version=dtls1_2" \
|
||||||
|
0 \
|
||||||
|
-c "fragmenting handshake message" \
|
||||||
|
-C "error"
|
||||||
|
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
|
||||||
|
requires_config_enabled MBEDTLS_RSA_C
|
||||||
|
requires_config_enabled MBEDTLS_ECDSA_C
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
|
||||||
|
run_test "DTLS fragmenting: openssl server, DTLS 1.0" \
|
||||||
|
"$O_SRV -dtls1 -verify 10" \
|
||||||
|
"$P_CLI dtls=1 debug_level=2 \
|
||||||
|
crt_file=data_files/server8_int-ca2.crt \
|
||||||
|
key_file=data_files/server8.key \
|
||||||
|
mtu=512 force_version=dtls1" \
|
||||||
|
0 \
|
||||||
|
-c "fragmenting handshake message" \
|
||||||
|
-C "error"
|
||||||
|
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
|
||||||
|
requires_config_enabled MBEDTLS_RSA_C
|
||||||
|
requires_config_enabled MBEDTLS_ECDSA_C
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
|
||||||
|
run_test "DTLS fragmenting: openssl client, DTLS 1.2" \
|
||||||
|
"$P_SRV dtls=1 debug_level=2 \
|
||||||
|
crt_file=data_files/server7_int-ca.crt \
|
||||||
|
key_file=data_files/server7.key \
|
||||||
|
mtu=512 force_version=dtls1_2" \
|
||||||
|
"$O_CLI -dtls1_2" \
|
||||||
|
0 \
|
||||||
|
-s "fragmenting handshake message"
|
||||||
|
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
|
||||||
|
requires_config_enabled MBEDTLS_RSA_C
|
||||||
|
requires_config_enabled MBEDTLS_ECDSA_C
|
||||||
|
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
|
||||||
|
run_test "DTLS fragmenting: openssl client, DTLS 1.0" \
|
||||||
|
"$P_SRV dtls=1 debug_level=2 \
|
||||||
|
crt_file=data_files/server7_int-ca.crt \
|
||||||
|
key_file=data_files/server7.key \
|
||||||
|
mtu=512 force_version=dtls1" \
|
||||||
|
"$O_CLI -dtls1" \
|
||||||
|
0 \
|
||||||
|
-s "fragmenting handshake message"
|
||||||
|
|
||||||
# Tests for specific things with "unreliable" UDP connection
|
# Tests for specific things with "unreliable" UDP connection
|
||||||
|
|
||||||
not_with_valgrind # spurious resend due to timeout
|
not_with_valgrind # spurious resend due to timeout
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue