mirror of
https://github.com/guanzhi/GmSSL.git
synced 2026-05-07 08:56:17 +08:00
update
This commit is contained in:
Zhi Guan
133
test/testssl
133
test/testssl
@@ -30,6 +30,8 @@ else
|
||||
extra="$4"
|
||||
fi
|
||||
|
||||
serverinfo="./serverinfo.pem"
|
||||
|
||||
#############################################################################
|
||||
|
||||
echo test sslv2
|
||||
@@ -99,9 +101,33 @@ $ssltest -bio_pair -ssl3 -server_auth -client_auth $CA $extra || exit 1
|
||||
echo test sslv2/sslv3 via BIO pair
|
||||
$ssltest $extra || exit 1
|
||||
|
||||
echo test dtlsv1
|
||||
$ssltest -dtls1 $extra || exit 1
|
||||
|
||||
echo test dtlsv1 with server authentication
|
||||
$ssltest -dtls1 -server_auth $CA $extra || exit 1
|
||||
|
||||
echo test dtlsv1 with client authentication
|
||||
$ssltest -dtls1 -client_auth $CA $extra || exit 1
|
||||
|
||||
echo test dtlsv1 with both client and server authentication
|
||||
$ssltest -dtls1 -server_auth -client_auth $CA $extra || exit 1
|
||||
|
||||
echo test dtlsv1.2
|
||||
$ssltest -dtls12 $extra || exit 1
|
||||
|
||||
echo test dtlsv1.2 with server authentication
|
||||
$ssltest -dtls12 -server_auth $CA $extra || exit 1
|
||||
|
||||
echo test dtlsv1.2 with client authentication
|
||||
$ssltest -dtls12 -client_auth $CA $extra || exit 1
|
||||
|
||||
echo test dtlsv1.2 with both client and server authentication
|
||||
$ssltest -dtls12 -server_auth -client_auth $CA $extra || exit 1
|
||||
|
||||
if [ $dsa_cert = NO ]; then
|
||||
echo test sslv2/sslv3 w/o DHE via BIO pair
|
||||
$ssltest -bio_pair -no_dhe $extra || exit 1
|
||||
echo 'test sslv2/sslv3 w/o (EC)DHE via BIO pair'
|
||||
$ssltest -bio_pair -no_dhe -no_ecdhe $extra || exit 1
|
||||
fi
|
||||
|
||||
echo test sslv2/sslv3 with 1024bit DHE via BIO pair
|
||||
@@ -119,6 +145,52 @@ $ssltest -bio_pair -server_auth -client_auth $CA $extra || exit 1
|
||||
echo test sslv2/sslv3 with both client and server authentication via BIO pair and app verify
|
||||
$ssltest -bio_pair -server_auth -client_auth -app_verify $CA $extra || exit 1
|
||||
|
||||
test_cipher() {
|
||||
_cipher=$1
|
||||
echo "Testing $_cipher"
|
||||
prot=""
|
||||
if [ $2 = "SSLv3" ] ; then
|
||||
prot="-ssl3"
|
||||
fi
|
||||
$ssltest -cipher $_cipher $prot
|
||||
if [ $? -ne 0 ] ; then
|
||||
echo "Failed $_cipher"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
echo "Testing ciphersuites"
|
||||
for protocol in TLSv1.2 SSLv3; do
|
||||
echo "Testing ciphersuites for $protocol"
|
||||
for cipher in `../util/shlib_wrap.sh ../apps/openssl ciphers "RSA+$protocol" | tr ':' ' '`; do
|
||||
test_cipher $cipher $protocol
|
||||
done
|
||||
if ../util/shlib_wrap.sh ../apps/openssl no-dh; then
|
||||
echo "skipping RSA+DHE tests"
|
||||
else
|
||||
for cipher in `../util/shlib_wrap.sh ../apps/openssl ciphers "EDH+aRSA+$protocol:-EXP" | tr ':' ' '`; do
|
||||
test_cipher $cipher $protocol
|
||||
done
|
||||
echo "testing connection with weak DH, expecting failure"
|
||||
if [ $protocol = "SSLv3" ] ; then
|
||||
$ssltest -cipher EDH -dhe512 -ssl3
|
||||
else
|
||||
$ssltest -cipher EDH -dhe512
|
||||
fi
|
||||
if [ $? -eq 0 ]; then
|
||||
echo "FAIL: connection with weak DH succeeded"
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
if ../util/shlib_wrap.sh ../apps/openssl no-ec; then
|
||||
echo "skipping RSA+ECDHE tests"
|
||||
else
|
||||
for cipher in `../util/shlib_wrap.sh ../apps/openssl ciphers "EECDH+aRSA+$protocol:-EXP" | tr ':' ' '`; do
|
||||
test_cipher $cipher $protocol
|
||||
done
|
||||
fi
|
||||
done
|
||||
|
||||
#############################################################################
|
||||
|
||||
if ../util/shlib_wrap.sh ../apps/openssl no-dh; then
|
||||
@@ -131,8 +203,8 @@ fi
|
||||
if ../util/shlib_wrap.sh ../apps/openssl no-rsa; then
|
||||
echo skipping RSA tests
|
||||
else
|
||||
echo test tls1 with 1024bit RSA, no DHE, multiple handshakes
|
||||
../util/shlib_wrap.sh ./ssltest -v -bio_pair -tls1 -cert ../apps/server2.pem -no_dhe -num 10 -f -time $extra || exit 1
|
||||
echo 'test tls1 with 1024bit RSA, no (EC)DHE, multiple handshakes'
|
||||
../util/shlib_wrap.sh ./ssltest -v -bio_pair -tls1 -cert ../apps/server2.pem -no_dhe -no_ecdhe -num 10 -f -time $extra || exit 1
|
||||
|
||||
if ../util/shlib_wrap.sh ../apps/openssl no-dh; then
|
||||
echo skipping RSA+DHE tests
|
||||
@@ -148,4 +220,57 @@ $ssltest -tls1 -cipher PSK -psk abc123 $extra || exit 1
|
||||
echo test tls1 with PSK via BIO pair
|
||||
$ssltest -bio_pair -tls1 -cipher PSK -psk abc123 $extra || exit 1
|
||||
|
||||
#############################################################################
|
||||
# Custom Extension tests
|
||||
|
||||
echo test tls1 with custom extensions
|
||||
$ssltest -bio_pair -tls1 -custom_ext || exit 1
|
||||
|
||||
#############################################################################
|
||||
# Serverinfo tests
|
||||
|
||||
echo test tls1 with serverinfo
|
||||
$ssltest -bio_pair -tls1 -serverinfo_file $serverinfo || exit 1
|
||||
$ssltest -bio_pair -tls1 -serverinfo_file $serverinfo -serverinfo_sct || exit 1
|
||||
$ssltest -bio_pair -tls1 -serverinfo_file $serverinfo -serverinfo_tack || exit 1
|
||||
$ssltest -bio_pair -tls1 -serverinfo_file $serverinfo -serverinfo_sct -serverinfo_tack || exit 1
|
||||
$ssltest -bio_pair -tls1 -custom_ext -serverinfo_file $serverinfo -serverinfo_sct -serverinfo_tack || exit 1
|
||||
|
||||
|
||||
#############################################################################
|
||||
# ALPN tests
|
||||
|
||||
$ssltest -bio_pair -tls1 -alpn_client foo -alpn_server bar || exit 1
|
||||
$ssltest -bio_pair -tls1 -alpn_client foo -alpn_server foo -alpn_expected foo || exit 1
|
||||
$ssltest -bio_pair -tls1 -alpn_client foo,bar -alpn_server foo -alpn_expected foo || exit 1
|
||||
$ssltest -bio_pair -tls1 -alpn_client bar,foo -alpn_server foo -alpn_expected foo || exit 1
|
||||
$ssltest -bio_pair -tls1 -alpn_client bar,foo -alpn_server foo,bar -alpn_expected foo || exit 1
|
||||
$ssltest -bio_pair -tls1 -alpn_client bar,foo -alpn_server bar,foo -alpn_expected bar || exit 1
|
||||
$ssltest -bio_pair -tls1 -alpn_client foo,bar -alpn_server bar,foo -alpn_expected bar || exit 1
|
||||
$ssltest -bio_pair -tls1 -alpn_client baz -alpn_server bar,foo || exit 1
|
||||
|
||||
if ../util/shlib_wrap.sh ../apps/openssl no-srp; then
|
||||
echo skipping SRP tests
|
||||
else
|
||||
echo test tls1 with SRP
|
||||
$ssltest -tls1 -cipher SRP -srpuser test -srppass abc123 || exit 1
|
||||
|
||||
echo test tls1 with SRP via BIO pair
|
||||
$ssltest -bio_pair -tls1 -cipher SRP -srpuser test -srppass abc123 || exit 1
|
||||
|
||||
echo test tls1 with SRP auth
|
||||
$ssltest -tls1 -cipher aSRP -srpuser test -srppass abc123 || exit 1
|
||||
|
||||
echo test tls1 with SRP auth via BIO pair
|
||||
$ssltest -bio_pair -tls1 -cipher aSRP -srpuser test -srppass abc123 || exit 1
|
||||
fi
|
||||
|
||||
#############################################################################
|
||||
# Multi-buffer tests
|
||||
|
||||
if [ -z "$extra" -a `uname -m` = "x86_64" ]; then
|
||||
$ssltest -cipher AES128-SHA -bytes 8m || exit 1
|
||||
$ssltest -cipher AES128-SHA256 -bytes 8m || exit 1
|
||||
fi
|
||||
|
||||
exit 0
|
||||
|
||||
Reference in New Issue
Block a user