Commit 3ea75c63 authored by Richard Levitte's avatar Richard Levitte
Browse files

For every test in 80-test_ssl.t, check that the protocol(s) used is enabled 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent 83365051

test/recipes/80-test_ssl.t

+214 −138
Original line number Diff line number Diff line
@@ -17,6 +17,11 @@ my ($no_rsa, $no_dsa, $no_dh, $no_ec, $no_srp, $no_psk, 
    disabled qw/rsa dsa dh ec srp psk

                ssl3 tls1 tls1_1 tls1_2

                dtls dtls1 dtls1_2/;

my $no_anytls = $no_ssl3 && $no_tls1 && $no_tls1_1 && $no_tls1_2;

my $no_anydtls = $no_dtls && $no_dtls1 && $no_dtls1_2;



plan skip_all => "No SSL/TLS/DTLS protocol is support by this OpenSSL build"

    if $no_anytls && $no_anydtls;



my $digest = "-sha1";

my @reqcmd = ("openssl", "req");
@@ -326,6 +331,10 @@ sub testssl { 
	######################################################################

	plan tests => 27;



      SKIP: {

	  skip "SSLv3 is not supported by this OpenSSL build", 4

	      if disabled("ssl3");



	  ok(run(test([@ssltest, "-ssl3", @extra])),

	     'test sslv3');

	  ok(run(test([@ssltest, "-ssl3", "-server_auth", @CA, @extra])),
@@ -334,6 +343,12 @@ sub testssl { 
	     'test sslv3 with client authentication');

	  ok(run(test([@ssltest, "-ssl3", "-server_auth", "-client_auth", @CA, @extra])),

	     'test sslv3 with both server and client authentication');

	}



      SKIP: {

	  skip "Neither SSLv3 nor any TLS version are supported by this OpenSSL build", 4

	      if $no_anytls;



	  ok(run(test([@ssltest, @extra])),

	     'test sslv2/sslv3');

	  ok(run(test([@ssltest, "-server_auth", @CA, @extra])),
@@ -342,6 +357,12 @@ sub testssl { 
	     'test sslv2/sslv3 with client authentication');

	  ok(run(test([@ssltest, "-server_auth", "-client_auth", @CA, @extra])),

	     'test sslv2/sslv3 with both server and client authentication');

	}



      SKIP: {

	  skip "SSLv3 is not supported by this OpenSSL build", 4

	      if disabled("ssl3");



	  ok(run(test([@ssltest, "-bio_pair", "-ssl3", @extra])),

	     'test sslv3 via BIO pair');

	  ok(run(test([@ssltest, "-bio_pair", "-ssl3", "-server_auth", @CA, @extra])),
@@ -350,8 +371,20 @@ sub testssl { 
	     'test sslv3 with client authentication via BIO pair');

	  ok(run(test([@ssltest, "-bio_pair", "-ssl3", "-server_auth", "-client_auth", @CA, @extra])),

	     'test sslv3 with both server and client authentication via BIO pair');

	}



      SKIP: {

	  skip "Neither SSLv3 nor any TLS version are supported by this OpenSSL build", 1

	      if $no_anytls;



	  ok(run(test([@ssltest, "-bio_pair", @extra])),

	     'test sslv2/sslv3 via BIO pair');

	}



      SKIP: {

	  skip "DTLSv1 is not supported by this OpenSSL build", 4

	      if disabled("dtls1");



	  ok(run(test([@ssltest, "-dtls1", @extra])),

	     'test dtlsv1');

	  ok(run(test([@ssltest, "-dtls1", "-server_auth", @CA, @extra])),
@@ -360,6 +393,12 @@ sub testssl { 
	     'test dtlsv1 with client authentication');

	  ok(run(test([@ssltest, "-dtls1", "-server_auth", "-client_auth", @CA, @extra])),

	     'test dtlsv1 with both server and client authentication');

	}



      SKIP: {

	  skip "DTLSv1.2 is not supported by this OpenSSL build", 4

	      if disabled("dtls1_2");



	  ok(run(test([@ssltest, "-dtls12", @extra])),

	     'test dtlsv1.2');

	  ok(run(test([@ssltest, "-dtls12", "-server_auth", @CA, @extra])),
@@ -368,14 +407,19 @@ sub testssl { 
	     'test dtlsv1.2 with client authentication');

	  ok(run(test([@ssltest, "-dtls12", "-server_auth", "-client_auth", @CA, @extra])),

	     'test dtlsv1.2 with both server and client authentication');

	{

	}



      SKIP: {

	  skip "Neither SSLv3 nor any TLS version are supported by this OpenSSL build", 6

	      if $no_anytls;



	SKIP: {

	    skip "skipping test of sslv2/sslv3 w/o (EC)DHE test", 1 if $dsa_cert;



	    ok(run(test([@ssltest, "-bio_pair", "-no_dhe", "-no_ecdhe", @extra])),

	       'test sslv2/sslv3 w/o (EC)DHE via BIO pair');

	  }

	}



	  ok(run(test([@ssltest, "-bio_pair", "-dhe1024dsa", "-v", @extra])),

	     'test sslv2/sslv3 with 1024bit DHE via BIO pair');

	  ok(run(test([@ssltest, "-bio_pair", "-server_auth", @CA, @extra])),
@@ -386,6 +430,7 @@ sub testssl { 
	     'test sslv2/sslv3 with both client and server authentication via BIO pair');

	  ok(run(test([@ssltest, "-bio_pair", "-server_auth", "-client_auth", "-app_verify", @CA, @extra])),

	     'test sslv2/sslv3 with both client and server authentication via BIO pair and app verify');

	}

    };



    subtest "Testing ciphersuites" => sub {
@@ -412,6 +457,7 @@ sub testssl { 
        }



	my @protocols = ();

	# FIXME: I feel unsure about the following line, is that really just TLSv1.2, or is it all of the SSLv3/TLS protocols?

        push(@protocols, "TLSv1.2") unless $no_tls1_2;

        push(@protocols, "SSLv3") unless $no_ssl3;

	my $protocolciphersuitcount = 0;
@@ -449,7 +495,10 @@ sub testssl { 


	plan tests => 5;



	{

      SKIP: {

	  skip "TLSv1.0 is not supported by this OpenSSL build", 5

	      if $no_tls1;



	SKIP: {

	    skip "skipping anonymous DH tests", 1

	      if ($no_dh);
@@ -457,9 +506,7 @@ sub testssl { 
	    ok(run(test([@ssltest, "-v", "-bio_pair", "-tls1", "-cipher", "ADH", "-dhe1024dsa", "-num", "10", "-f", "-time", @extra])),

	       'test tlsv1 with 1024bit anonymous DH, multiple handshakes');

	  }

	}



	{

	SKIP: {

	    skip "skipping RSA tests", 2

		if $no_rsa;
@@ -473,8 +520,7 @@ sub testssl { 
	    ok(run(test(["ssltest", "-v", "-bio_pair", "-tls1", "-s_cert", top_file("apps","server2.pem"), "-dhe1024dsa", "-num", "10", "-f", "-time", @extra])),

	       'test tlsv1 with 1024bit RSA, 1024bit DHE, multiple handshakes');

	  }

	}

    {



	SKIP: {

	    skip "skipping PSK tests", 2

	        if ($no_psk);
@@ -494,6 +540,10 @@ sub testssl { 


	plan tests => 7;



      SKIP: {

	  skip "TLSv1.0 is not supported by this OpenSSL build", 7

	      if $no_tls1;



	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-npn_client"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-npn_server"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-npn_server_reject"])));
@@ -501,6 +551,7 @@ sub testssl { 
	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-npn_client", "-npn_server"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-npn_client", "-npn_server", "-num", "2"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-npn_client", "-npn_server", "-num", "2", "-reuse"])));

	}

    };



    subtest 'Custom Extension tests' => sub {
@@ -508,8 +559,13 @@ sub testssl { 


	plan tests => 1;



      SKIP: {

	  skip "TLSv1.0 is not supported by this OpenSSL build", 7

	      if $no_tls1;



	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-custom_ext"])),

	     'test tls1 with custom extensions');

	}

    };



    subtest 'Serverinfo tests' => sub {
@@ -517,12 +573,17 @@ sub testssl { 


	plan tests => 5;



      SKIP: {

	  skip "TLSv1.0 is not supported by this OpenSSL build", 5

	      if $no_tls1;



	  note('echo test tls1 with serverinfo');

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-serverinfo_file", $serverinfo])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-serverinfo_file", $serverinfo, "-serverinfo_sct"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-serverinfo_file", $serverinfo, "-serverinfo_tack"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-serverinfo_file", $serverinfo, "-serverinfo_sct", "-serverinfo_tack"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-custom_ext", "-serverinfo_file", $serverinfo, "-serverinfo_sct", "-serverinfo_tack"])));

	}

    };



    subtest 'ALPN tests' => sub {
@@ -530,6 +591,10 @@ sub testssl { 


	plan tests => 12;



      SKIP: {

	  skip "TLSv1.0 is not supported by this OpenSSL build", 12

	      if $no_tls1;



	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-alpn_client", "foo", "-alpn_server", "bar"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-alpn_client", "foo", "-alpn_server", "foo", "-alpn_expected", "foo"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-alpn_client", "foo,bar", "-alpn_server", "foo", "-alpn_expected", "foo"])));
@@ -539,7 +604,6 @@ sub testssl { 
	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-alpn_client", "foo,bar", "-alpn_server", "bar,foo", "-alpn_expected", "bar"])));

	  ok(run(test([@ssltest, "-bio_pair", "-tls1", "-alpn_client", "baz", "-alpn_server", "bar,foo"])));



	{

	SKIP: {

	    skip "skipping SRP tests", 4

		if $no_srp;
@@ -564,14 +628,21 @@ sub testssl { 


	plan tests => 2;



	{

      SKIP: {

	  skip "Neither SSLv3 nor any TLS version are supported by this OpenSSL build", 2

	      if $no_anytls;



	  skip "skipping multi-buffer tests", 2

	      if @extra || (POSIX::uname())[4] ne "x86_64";



	  ok(run(test([@ssltest, "-cipher", "AES128-SHA",    "-bytes", "8m"])));



	  # We happen to know that AES128-SHA256 is TLSv1.2 only... for now.

	  skip "TLSv1.2 is not supported by this OpenSSL configuration", 1

	      if $no_tls1_2;



	  ok(run(test([@ssltest, "-cipher", "AES128-SHA256", "-bytes", "8m"])));

	}

	}

    };



    subtest 'TLS Version min/max tests' => sub {
@@ -726,6 +797,10 @@ sub testsslproxy { 
                                      [ [ 'BC', 'C'      ], 0 ],

                                      [ [ 'BC', 'A|B&!C' ], 1 ] ] );



  SKIP: {

      skip "Neither SSLv3 nor any TLS version are supported by this OpenSSL build", scalar(@{$expected{$cert}})

	  if $no_anytls;



      foreach (@{$expected{$cert}}) {

	  my $auth = $_->[0]->[0];

	  my $cond = $_->[0]->[1];
@@ -737,3 +812,4 @@ sub testsslproxy { 
	     .($res ? "success" : "failure").")");

      }

    }

}