OLD | NEW |
| (Empty) |
1 #!/bin/sh | |
2 | |
3 if [ "$1" = "" ]; then | |
4 key=../apps/server.pem | |
5 else | |
6 key="$1" | |
7 fi | |
8 if [ "$2" = "" ]; then | |
9 cert=../apps/server.pem | |
10 else | |
11 cert="$2" | |
12 fi | |
13 | |
14 ciphers="DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:E
DH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SH
A:EXP1024-DHE-DSS-DES-CBC-SHA:EXP1024-DES-CBC-SHA:EDH-RSA-DES-CBC-SHA:EDH-DSS-DE
S-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CB
C-SHA" | |
15 | |
16 ssltest="../util/shlib_wrap.sh ./ssltest -F -key $key -cert $cert -c_key $key -c
_cert $cert -cipher $ciphers" | |
17 | |
18 if ../util/shlib_wrap.sh ../apps/openssl x509 -in $cert -text -noout | fgrep 'DS
A Public Key' >/dev/null; then | |
19 dsa_cert=YES | |
20 else | |
21 dsa_cert=NO | |
22 fi | |
23 | |
24 if [ "$3" = "" ]; then | |
25 CA="-CApath ../certs" | |
26 else | |
27 CA="-CAfile $3" | |
28 fi | |
29 | |
30 if [ "$4" = "" ]; then | |
31 extra="" | |
32 else | |
33 extra="$4" | |
34 fi | |
35 | |
36 ############################################################################# | |
37 | |
38 echo test ssl3 is forbidden in FIPS mode | |
39 $ssltest -ssl3 $extra && exit 1 | |
40 | |
41 echo test ssl2 is forbidden in FIPS mode | |
42 $ssltest -ssl2 $extra && exit 1 | |
43 | |
44 echo test tls1 | |
45 $ssltest -tls1 $extra || exit 1 | |
46 | |
47 echo test tls1 with server authentication | |
48 $ssltest -tls1 -server_auth $CA $extra || exit 1 | |
49 | |
50 echo test tls1 with client authentication | |
51 $ssltest -tls1 -client_auth $CA $extra || exit 1 | |
52 | |
53 echo test tls1 with both client and server authentication | |
54 $ssltest -tls1 -server_auth -client_auth $CA $extra || exit 1 | |
55 | |
56 echo test tls1 via BIO pair | |
57 $ssltest -bio_pair -tls1 $extra || exit 1 | |
58 | |
59 echo test tls1 with server authentication via BIO pair | |
60 $ssltest -bio_pair -tls1 -server_auth $CA $extra || exit 1 | |
61 | |
62 echo test tls1 with client authentication via BIO pair | |
63 $ssltest -bio_pair -tls1 -client_auth $CA $extra || exit 1 | |
64 | |
65 echo test tls1 with both client and server authentication via BIO pair | |
66 $ssltest -bio_pair -tls1 -server_auth -client_auth $CA $extra || exit 1 | |
67 | |
68 # note that all the below actually choose TLS... | |
69 | |
70 if [ $dsa_cert = NO ]; then | |
71 echo test sslv2/sslv3 w/o DHE via BIO pair | |
72 $ssltest -bio_pair -no_dhe $extra || exit 1 | |
73 fi | |
74 | |
75 echo test sslv2/sslv3 with 1024bit DHE via BIO pair | |
76 $ssltest -bio_pair -dhe1024dsa -v $extra || exit 1 | |
77 | |
78 echo test sslv2/sslv3 with server authentication | |
79 $ssltest -bio_pair -server_auth $CA $extra || exit 1 | |
80 | |
81 echo test sslv2/sslv3 with client authentication via BIO pair | |
82 $ssltest -bio_pair -client_auth $CA $extra || exit 1 | |
83 | |
84 echo test sslv2/sslv3 with both client and server authentication via BIO pair | |
85 $ssltest -bio_pair -server_auth -client_auth $CA $extra || exit 1 | |
86 | |
87 echo test sslv2/sslv3 with both client and server authentication via BIO pair an
d app verify | |
88 $ssltest -bio_pair -server_auth -client_auth -app_verify $CA $extra || exit 1 | |
89 | |
90 ############################################################################# | |
91 | |
92 if ../util/shlib_wrap.sh ../apps/openssl no-dh; then | |
93 echo skipping anonymous DH tests | |
94 else | |
95 echo test tls1 with 1024bit anonymous DH, multiple handshakes | |
96 $ssltest -v -bio_pair -tls1 -cipher ADH -dhe1024dsa -num 10 -f -time $extra ||
exit 1 | |
97 fi | |
98 | |
99 if ../util/shlib_wrap.sh ../apps/openssl no-rsa; then | |
100 echo skipping RSA tests | |
101 else | |
102 echo test tls1 with 1024bit RSA, no DHE, multiple handshakes | |
103 ../util/shlib_wrap.sh ./ssltest -v -bio_pair -tls1 -cert ../apps/server2.pem -
no_dhe -num 10 -f -time $extra || exit 1 | |
104 | |
105 if ../util/shlib_wrap.sh ../apps/openssl no-dh; then | |
106 echo skipping RSA+DHE tests | |
107 else | |
108 echo test tls1 with 1024bit RSA, 1024bit DHE, multiple handshakes | |
109 ../util/shlib_wrap.sh ./ssltest -v -bio_pair -tls1 -cert ../apps/server2.pem
-dhe1024dsa -num 10 -f -time $extra || exit 1 | |
110 fi | |
111 fi | |
112 | |
113 exit 0 | |
OLD | NEW |