mirror of
https://github.com/Cateners/tiny_computer.git
synced 2026-05-21 00:45:49 +08:00
Update code to v1.0.14 (10)
This commit is contained in:
Caten
418
android/extern/wolfssl/tests/test-altchains.conf
vendored
Normal file
418
android/extern/wolfssl/tests/test-altchains.conf
vendored
Normal file
@@ -0,0 +1,418 @@
|
||||
# Tests using a longer certificate chain (with intermediate CA's)
|
||||
# The tests with chains have the CRL checking disabled
|
||||
# CRL's only load for trusted CA's, for a chain you must load the root and intermediate as trusted
|
||||
|
||||
# For these tests we are loading root and sending intermediate and peer certs
|
||||
# server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-chain-ecc.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-chain-ecc.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/ca-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-chain-ecc.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/ca-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-chain-ecc.pem
|
||||
-C
|
||||
|
||||
|
||||
# Test will load intermediate CA as trusted and only present the peer cert (partial chain)
|
||||
# server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-int-cert.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-int-cert.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-int-cert.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-int-cert.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-int-ecc-cert.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-int-ecc-cert.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-int-cert.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-int-cert.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-int-ecc-cert.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-int-ecc-cert.pem
|
||||
-C
|
||||
|
||||
|
||||
# Test will use alternate chain where chain contains extra cert
|
||||
# server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain-alt.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain-alt.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain-alt.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain-alt.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Alt Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-chain-alt-ecc.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Alt Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/ca-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-chain-alt-ecc.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Alt Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain-alt.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Alt Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/ca-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain-alt.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Alt Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/ca-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-chain-alt-ecc.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Alt Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/ca-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-chain-alt-ecc.pem
|
||||
-C
|
||||
|
||||
|
||||
# Test will load intermediate2 CA as trusted and present full chain (where intermediate CA is not trusted)
|
||||
# server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Trusted Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-chain-ecc.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Trusted Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-chain-ecc.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Trusted Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-chain-ecc.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Trusted Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-chain-ecc.pem
|
||||
-C
|
||||
|
||||
|
||||
# Test will load intermediate2 CA as trusted and present full chain (where intermediate CA is not trusted)
|
||||
# These tests use the verify callback, but pass the preverify as result in myVerify callback
|
||||
# server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 3
|
||||
-l DHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
-H verifyInfo
|
||||
|
||||
# server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 3
|
||||
-l ECDHE-RSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
-H verifyInfo
|
||||
|
||||
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Trusted Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-chain-ecc.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Trusted Chain
|
||||
-v 3
|
||||
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-chain-ecc.pem
|
||||
-C
|
||||
-H verifyInfo
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/server-key.pem
|
||||
-c ./certs/intermediate/server-chain.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Trusted Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-cert.pem
|
||||
-k ./certs/client-key.pem
|
||||
-c ./certs/intermediate/client-chain.pem
|
||||
-C
|
||||
-H verifyInfo
|
||||
|
||||
# server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Trusted Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-key.pem
|
||||
-c ./certs/intermediate/server-chain-ecc.pem
|
||||
-V
|
||||
|
||||
# client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Trusted Chain
|
||||
-v 4
|
||||
-l TLS13-AES128-GCM-SHA256
|
||||
-A ./certs/intermediate/ca-int2-ecc-cert.pem
|
||||
-k ./certs/ecc-client-key.pem
|
||||
-c ./certs/intermediate/client-chain-ecc.pem
|
||||
-C
|
||||
-H verifyInfo
|
||||
Reference in New Issue
Block a user