SSLproxy/extra/testproxy/ssl_testset_3.json

119 lines
2.6 KiB
JSON

{
"comment": "Tests for SSL configuration: tls10/tls11 only",
"configs": {
"1": {
"proto": {
"proto": "ssl",
"no_ssl2": "yes",
"no_ssl3": "yes",
"no_tls10": "yes",
"no_tls11": "no",
"no_tls12": "yes",
"no_tls13": "yes"
},
"client": {
"ip": "127.0.0.1",
"port": "8450"
},
"server": {
"ip": "127.0.0.1",
"port": "9450",
"crt": "server.crt",
"key": "server.key"
}
},
"2": {
"proto": {
"proto": "ssl",
"no_ssl2": "no",
"no_ssl3": "no",
"no_tls10": "no",
"no_tls11": "no",
"no_tls12": "no",
"no_tls13": "no"
},
"client": {
"ip": "127.0.0.1",
"port": "8450"
},
"server": {
"ip": "127.0.0.1",
"port": "9450",
"crt": "server.crt",
"key": "server.key"
}
}
},
"tests": {
"1": {
"comment": "Configures tls10/tls11 only",
"states": {
"1": {
"testend": "client",
"cmd": "send",
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\n\r\n",
"assert": {
"current_cipher_version": {
"==": [
"TLSv1.0",
"TLSv1.1"
],
"!match": [
"SSLv3",
"^TLSv1\\.[23]?$"
]
},
"ssl_proto_version": {
"==": [
"TLSv1.0",
"TLSv1.1"
],
"!match": [
"SSLv3",
"^TLSv1\\.[23]?$"
]
},
"ssl_state": {
"==": [
"SSLOK "
]
}
}
},
"2": {
"testend": "server",
"cmd": "recv",
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n",
"assert": {
"current_cipher_version": {
"==": [
"TLSv1.0",
"TLSv1.1"
],
"!match": [
"SSLv3",
"^TLSv1\\.[23]?$"
]
},
"ssl_proto_version": {
"==": [
"TLSv1.0",
"TLSv1.1"
],
"!match": [
"SSLv3",
"^TLSv1\\.[23]?$"
]
},
"ssl_state": {
"==": [
"SSLOK "
]
}
}
}
}
}
}
}