From d71663b3a2e0d80f7e39e82ec12f62441d9f5ae6 Mon Sep 17 00:00:00 2001 From: Andres AG Date: Mon, 12 Sep 2016 17:38:45 +0100 Subject: [PATCH] Add ECDH-RSA cipher suites missing from compat.sh --- tests/compat.sh | 50 ++++++++++++++++++++++++++++++++++ tests/data_files/ecdh-test.crt | 15 ++++++++++ 2 files changed, 65 insertions(+) create mode 100644 tests/data_files/ecdh-test.crt diff --git a/tests/compat.sh b/tests/compat.sh index d8f3a3cacc..b2a94da1a6 100755 --- a/tests/compat.sh +++ b/tests/compat.sh @@ -476,6 +476,30 @@ add_openssl_ciphersuites() " ;; + "ECDH") + if [ `minor_ver "$MODE"` -ge 3 ] + then + M_CIPHERS="$M_CIPHERS \ + TLS-ECDH-RSA-WITH-AES-256-GCM-SHA384 \ + TLS-ECDH-RSA-WITH-AES-256-CBC-SHA384 \ + TLS-ECDH-RSA-WITH-AES-256-CBC-SHA \ + TLS-ECDH-RSA-WITH-AES-128-GCM-SHA256 \ + TLS-ECDH-RSA-WITH-AES-128-CBC-SHA256 \ + TLS-ECDH-RSA-WITH-AES-128-CBC-SHA \ + TLS-ECDH-RSA-WITH-3DES-EDE-CBC-SHA \ + " + O_CIPHERS="$O_CIPHERS \ + ECDH-RSA-AES256-GCM-SHA384 \ + ECDH-RSA-AES256-SHA384 \ + ECDH-RSA-AES256-SHA \ + ECDH-RSA-AES128-GCM-SHA256 \ + ECDH-RSA-AES128-SHA256 \ + ECDH-RSA-AES128-SHA \ + ECDH-RSA-DES-CBC3-SHA \ + " + fi + ;; + "PSK") ;; esac @@ -733,6 +757,17 @@ add_mbedtls_ciphersuites() " fi ;; + + "ECDH") + if [ `minor_ver "$MODE"` -ge 3 ] + then + M_CIPHERS="$M_CIPHERS + TLS-ECDH-RSA-WITH-CAMELLIA-256-GCM-SHA384 \ + TLS-ECDH-RSA-WITH-CAMELLIA-256-CBC-SHA384 \ + TLS-ECDH-RSA-WITH-CAMELLIA-128-GCM-SHA256 \ + TLS-ECDH-RSA-WITH-CAMELLIA-128-CBC-SHA256 \ + " + fi esac } @@ -841,6 +876,21 @@ setup_arguments() O_CLIENT_ARGS="$O_CLIENT_ARGS -psk 6162636465666768696a6b6c6d6e6f70" G_CLIENT_ARGS="$G_CLIENT_ARGS --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70" ;; + + "ECDH") + M_SERVER_ARGS="$M_SERVER_ARGS crt_file=data_files/ecdh-test.crt key_file=data_files/ec_256_prv.pem" + O_SERVER_ARGS="$O_SERVER_ARGS -cert data_files/ecdh-test.crt -key data_files/ec_256_prv.pem" + + M_CLIENT_ARGS="$M_CLIENT_ARGS" + O_CLIENT_ARGS="$O_CLIENT_ARGS" + + if [ "X$VERIFY" = "XYES" ]; then + M_CLIENT_ARGS="$M_CLIENT_ARGS crt_file=data_files/ecdh-test.crt key_file=data_files/ec_256_prv.pem" + O_CLIENT_ARGS="$O_CLIENT_ARGS -cert data_files/ecdh-test.crt -key data_files/ec_256_prv.pem" + else + M_CLIENT_ARGS="$M_CLIENT_ARGS crt_file=none key_file=none" + fi + ;; esac } diff --git a/tests/data_files/ecdh-test.crt b/tests/data_files/ecdh-test.crt new file mode 100644 index 0000000000..20a87ce053 --- /dev/null +++ b/tests/data_files/ecdh-test.crt @@ -0,0 +1,15 @@ +-----BEGIN CERTIFICATE----- +MIICSDCCATCgAwIBAgIBATANBgkqhkiG9w0BAQsFADA7MQswCQYDVQQGEwJOTDER +MA8GA1UEChMIUG9sYXJTU0wxGTAXBgNVBAMTEFBvbGFyU1NMIFRlc3QgQ0EwHhcN +MDEwMTAxMDAwMDAwWhcNMzAxMjMxMjM1OTU5WjAAMFkwEwYHKoZIzj0CAQYIKoZI +zj0DAQcDQgAEd3Jlb4FLOZJ51eHxeB+sbwmaPFyhsONTUYNLCLZeC1clkM2vj3aT +YbzzSs/BHl4HToQmvd4Evm5lOUVElhfeRaNdMFswCQYDVR0TBAIwADAdBgNVHQ4E +FgQUcC4jVW9GHGLvm/TMYy/FrSy84k8wHwYDVR0jBBgwFoAUtFrkpbPe0lL2udWm +lQ/rPrzH/f8wDgYDVR0PAQH/BAQDAgEIMA0GCSqGSIb3DQEBCwUAA4IBAQCNNeiq +MHGbd9NXm6ewQXNogEdTG7j1wE/dinKwTIhxZmQEWouClgkhTiXjzKhEmE5hYTr8 +tzLKGF6UjKUxhdD6c60eUG724k/QX4oENRRwiY4MNuYwm/523vaD4DakMoG6bPUp +og5RodWaggbA3H23yP5ZLConKi8MdEJxNI2fWXLVOzo3vtuRZJcX/S7r3oH62etF +dTWM3lpBz6I3nJd86nQwVdqc4pLpSPCXS/C/CkrtIzys9MLxxkWhMqNwNWc21V+w +uCQIaEc/t0D/EDA8yVM3vOcvoG7ZhadHJ2s29hnvgwIN84QpP3auRmBv7IEPsk0P +dKq9eeJLcbhu3WuX +-----END CERTIFICATE-----