mirror of
https://github.com/sonertari/SSLproxy
synced 2024-11-18 03:25:31 +00:00
c2e93dbbc0
The problem with LibreSSL 2.7.4 was not that it didn't support tls10, but that MEDIUM and HIGH cipher definitions were different from the openssl version of testproxy, hence tests were failing due to no shared ciphers
117 lines
2.5 KiB
JSON
117 lines
2.5 KiB
JSON
{
|
|
"comment": "Tests for SSL configuration: tls10 only",
|
|
"configs": {
|
|
"1": {
|
|
"proto": {
|
|
"proto": "ssl",
|
|
"no_ssl2": "yes",
|
|
"no_ssl3": "yes",
|
|
"no_tls10": "no",
|
|
"no_tls11": "yes",
|
|
"no_tls12": "yes",
|
|
"no_tls13": "yes"
|
|
},
|
|
"client": {
|
|
"ip": "127.0.0.1",
|
|
"port": "8449"
|
|
},
|
|
"server": {
|
|
"ip": "127.0.0.1",
|
|
"port": "9449",
|
|
"crt": "server.crt",
|
|
"key": "server.key"
|
|
}
|
|
},
|
|
"2": {
|
|
"proto": {
|
|
"proto": "ssl",
|
|
"no_ssl2": "no",
|
|
"no_ssl3": "no",
|
|
"no_tls10": "no",
|
|
"no_tls11": "no",
|
|
"no_tls12": "no",
|
|
"no_tls13": "no"
|
|
},
|
|
"client": {
|
|
"ip": "127.0.0.1",
|
|
"port": "8449"
|
|
},
|
|
"server": {
|
|
"ip": "127.0.0.1",
|
|
"port": "9449",
|
|
"crt": "server.crt",
|
|
"key": "server.key"
|
|
}
|
|
}
|
|
},
|
|
"tests": {
|
|
"1": {
|
|
"comment": "Configures tls10 only",
|
|
"states": {
|
|
"1": {
|
|
"testend": "client",
|
|
"cmd": "send",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\n\r\n",
|
|
"assert": {
|
|
"current_cipher_version": {
|
|
"==": [
|
|
"SSLv3",
|
|
"TLSv1",
|
|
"TLSv1.0"
|
|
],
|
|
"!match": [
|
|
"^TLSv1\\.[1-3]?$"
|
|
]
|
|
},
|
|
"ssl_proto_version": {
|
|
"==": [
|
|
"SSLv3",
|
|
"TLSv1"
|
|
],
|
|
"!match": [
|
|
"^TLSv1\\.[1-3]?$"
|
|
]
|
|
},
|
|
"ssl_state": {
|
|
"==": [
|
|
"SSLOK "
|
|
]
|
|
}
|
|
}
|
|
},
|
|
"2": {
|
|
"testend": "server",
|
|
"cmd": "recv",
|
|
"payload": "GET / HTTP/1.1\r\nHost: comixwall.org\r\nConnection: close\r\n\r\n",
|
|
"assert": {
|
|
"current_cipher_version": {
|
|
"==": [
|
|
"SSLv3",
|
|
"TLSv1",
|
|
"TLSv1.0"
|
|
],
|
|
"!match": [
|
|
"^TLSv1\\.[1-3]?$"
|
|
]
|
|
},
|
|
"ssl_proto_version": {
|
|
"==": [
|
|
"SSLv3",
|
|
"TLSv1"
|
|
],
|
|
"!match": [
|
|
"^TLSv1\\.[1-3]?$"
|
|
]
|
|
},
|
|
"ssl_state": {
|
|
"==": [
|
|
"SSLOK "
|
|
]
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|