mirror of
				https://github.com/yuzu-emu/mbedtls.git
				synced 2025-11-04 09:54:49 +00:00 
			
		
		
		
	Add ECC extensions test in ssl-opts.sh
Add test to verify if an ecc based extension exists or not if an ecc based ciphersuite is used or not.
This commit is contained in:
		
							parent
							
								
									6a5d6e2295
								
							
						
					
					
						commit
						c7f1523a9e
					
				| 
						 | 
					@ -4085,6 +4085,40 @@ run_test    "Large packet TLS 1.2 AEAD shorter tag" \
 | 
				
			||||||
            -c "16384 bytes written in 1 fragments" \
 | 
					            -c "16384 bytes written in 1 fragments" \
 | 
				
			||||||
            -s "Read from client: 16384 bytes read"
 | 
					            -s "Read from client: 16384 bytes read"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					# Tests for ECC extensions (rfc 4492)
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					run_test    "Force a non ECC ciphersuite in the client side" \
 | 
				
			||||||
 | 
					            "$P_SRV debug_level=3" \
 | 
				
			||||||
 | 
					            "$P_CLI debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
 | 
				
			||||||
 | 
					            0 \
 | 
				
			||||||
 | 
					            -C "client hello, adding supported_elliptic_curves extension" \
 | 
				
			||||||
 | 
					            -C "client hello, adding supported_point_formats extension" \
 | 
				
			||||||
 | 
					            -S "found supported elliptic curves extension" \
 | 
				
			||||||
 | 
					            -S "found supported point formats extension"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					run_test    "Force a non ECC ciphersuite in the server side" \
 | 
				
			||||||
 | 
					            "$P_SRV debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
 | 
				
			||||||
 | 
					            "$P_CLI debug_level=3" \
 | 
				
			||||||
 | 
					            0 \
 | 
				
			||||||
 | 
					            -C "found supported_point_formats extension" \
 | 
				
			||||||
 | 
					            -S "server hello, supported_point_formats extension"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					run_test    "Force an ECC ciphersuite in the client side" \
 | 
				
			||||||
 | 
					            "$P_SRV debug_level=3" \
 | 
				
			||||||
 | 
					            "$P_CLI debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
 | 
				
			||||||
 | 
					            0 \
 | 
				
			||||||
 | 
					            -c "client hello, adding supported_elliptic_curves extension" \
 | 
				
			||||||
 | 
					            -c "client hello, adding supported_point_formats extension" \
 | 
				
			||||||
 | 
					            -s "found supported elliptic curves extension" \
 | 
				
			||||||
 | 
					            -s "found supported point formats extension"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					run_test    "Force an ECC ciphersuite in the server side" \
 | 
				
			||||||
 | 
					            "$P_SRV debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
 | 
				
			||||||
 | 
					            "$P_CLI debug_level=3" \
 | 
				
			||||||
 | 
					            0 \
 | 
				
			||||||
 | 
					            -c "found supported_point_formats extension" \
 | 
				
			||||||
 | 
					            -s "server hello, supported_point_formats extension"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Tests for DTLS HelloVerifyRequest
 | 
					# Tests for DTLS HelloVerifyRequest
 | 
				
			||||||
 | 
					
 | 
				
			||||||
run_test    "DTLS cookie: enabled" \
 | 
					run_test    "DTLS cookie: enabled" \
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in a new issue