提交 2c1b0f1e 编写于 作者: D Dr. Stephen Henson

Add Client CA names tests

Reviewed-by: NRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2969)
上级 2e21539b
此差异已折叠。
...@@ -119,6 +119,34 @@ sub generate_tests() { ...@@ -119,6 +119,34 @@ sub generate_tests() {
"ExpectedClientCertType" => "RSA", "ExpectedClientCertType" => "RSA",
"ExpectedClientSignType" => $clisigtype, "ExpectedClientSignType" => $clisigtype,
"ExpectedClientSignHash" => $clihash, "ExpectedClientSignHash" => $clihash,
"ExpectedClientCANames" => "empty",
"Method" => $method,
},
};
# Successful handshake with client authentication non-empty names
push @tests, {
name => "client-auth-${protocol_name}-require-non-empty-names",
server => {
"MinProtocol" => $protocol,
"MaxProtocol" => $protocol,
"ClientSignatureAlgorithms" => $clisigalgs,
"ClientCAFile" => test_pem("root-cert.pem"),
"VerifyCAFile" => test_pem("root-cert.pem"),
"VerifyMode" => "Request",
},
client => {
"MinProtocol" => $protocol,
"MaxProtocol" => $protocol,
"Certificate" => test_pem("ee-client-chain.pem"),
"PrivateKey" => test_pem("ee-key.pem"),
},
test => {
"ExpectedResult" => "Success",
"ExpectedClientCertType" => "RSA",
"ExpectedClientSignType" => $clisigtype,
"ExpectedClientSignHash" => $clihash,
"ExpectedClientCANames" => test_pem("root-cert.pem"),
"Method" => $method, "Method" => $method,
}, },
}; };
......
...@@ -316,6 +316,24 @@ my @tests_tls_1_3 = ( ...@@ -316,6 +316,24 @@ my @tests_tls_1_3 = (
"ExpectedClientCertType" => "RSA", "ExpectedClientCertType" => "RSA",
"ExpectedClientSignHash" => "SHA256", "ExpectedClientSignHash" => "SHA256",
"ExpectedClientSignType" => "RSA-PSS", "ExpectedClientSignType" => "RSA-PSS",
"ExpectedClientCANames" => "empty",
"ExpectedResult" => "Success"
},
},
{
name => "TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names",
server => {
"ClientSignatureAlgorithms" => "PSS+SHA256",
"VerifyCAFile" => test_pem("root-cert.pem"),
"ClientCAFile" => test_pem("root-cert.pem"),
"VerifyMode" => "Require"
},
client => $client_tls_1_3,
test => {
"ExpectedClientCertType" => "RSA",
"ExpectedClientSignHash" => "SHA256",
"ExpectedClientSignType" => "RSA-PSS",
"ExpectedClientCANames" => test_pem("root-cert.pem"),
"ExpectedResult" => "Success" "ExpectedResult" => "Success"
}, },
}, },
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册