1 files changed, 113 insertions, 42 deletions
diff --git a/src/lib/libssl/test/testssl.com b/src/lib/libssl/test/testssl.com
index 0b4b0a0ad3..785f262f5a 100644
--- a/src/lib/libssl/test/testssl.com
+++ b/src/lib/libssl/test/testssl.com
@@ -2,118 +2,189 @@ $! TESTSSL.COM
 $
 $       __arch := VAX
 $       if f$getsyi("cpu") .ge. 128 then __arch := AXP
-$       exe_dir := sys$disk:[-.'__arch'.exe.test]
+$       texe_dir := sys$disk:[-.'__arch'.exe.test]
-$
+$       exe_dir := sys$disk:[-.'__arch'.exe.apps]
-$       copy/concatenate [-.certs]*.pem certs.tmp
+$
+$       if p1 .eqs. ""
+$       then
+$           key="[-.apps]server.pem"
+$       else
+$           key=p1
+$       endif
+$       if p2 .eqs. ""
+$       then
+$           cert="[-.apps]server.pem"
+$       else
+$           cert=p2
+$       endif
+$       ssltest := mcr 'texe_dir'ssltest -key 'key' -cert 'cert' -c_key 'key' -c_cert 'cert'
+$
+$       define/user sys$output testssl-x509-output.
+$       define/user sys$error nla0:
+$       mcr 'exe_dir'openssl x509 -in 'cert' -text -noout
+$       set noon
+$       define/user sys$error nla0:
+$       search/output=nla0: testssl-x509-output. "DSA Public Key"/exact
+$       if $severity .eq. 1
+$       then
+$           dsa_cert := YES
+$       else
+$           dsa_cert := NO
+$       endif
+$       set on
+$       delete testssl-x509-output.;*
+$
+$       if p3 .eqs. ""
+$       then
+$           copy/concatenate [-.certs]*.pem certs.tmp
+$           CA = """-CAfile"" certs.tmp"
+$       else
+$           CA = """-CAfile"" "+p3
+$       endif
+$
+$!###########################################################################
 $
 $       write sys$output "test sslv2"
-$       mcr 'exe_dir'ssltest -ssl2
+$       'ssltest' -ssl2
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2 with server authentication"
-$       mcr 'exe_dir'ssltest -ssl2 -server_auth "-CAfile" certs.tmp
+$       'ssltest' -ssl2 -server_auth 'CA'
 $       if $severity .ne. 1 then goto exit3
 $
-$       write sys$output "test sslv2 with client authentication"
+$       if .not. dsa_cert
-$       mcr 'exe_dir'ssltest -ssl2 -client_auth "-CAfile" certs.tmp
+$       then
-$       if $severity .ne. 1 then goto exit3
+$           write sys$output "test sslv2 with client authentication"
+$           'ssltest' -ssl2 -client_auth 'CA'
+$           if $severity .ne. 1 then goto exit3
 $
-$       write sys$output "test sslv2 with both client and server authentication"
+$           write sys$output "test sslv2 with both client and server authentication"
-$       mcr 'exe_dir'ssltest -ssl2 -server_auth -client_auth "-CAfile" certs.tmp
+$           'ssltest' -ssl2 -server_auth -client_auth 'CA'
-$       if $severity .ne. 1 then goto exit3
+$           if $severity .ne. 1 then goto exit3
+$       endif
 $
 $       write sys$output "test sslv3"
-$       mcr 'exe_dir'ssltest -ssl3
+$       'ssltest' -ssl3
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv3 with server authentication"
-$       mcr 'exe_dir'ssltest -ssl3 -server_auth "-CAfile" certs.tmp
+$       'ssltest' -ssl3 -server_auth 'CA'
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv3 with client authentication"
-$       mcr 'exe_dir'ssltest -ssl3 -client_auth "-CAfile" certs.tmp
+$       'ssltest' -ssl3 -client_auth 'CA'
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv3 with both client and server authentication"
-$       mcr 'exe_dir'ssltest -ssl3 -server_auth -client_auth "-CAfile" certs.tmp
+$       'ssltest' -ssl3 -server_auth -client_auth 'CA'
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2/sslv3"
-$       mcr 'exe_dir'ssltest
+$       'ssltest'
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2/sslv3 with server authentication"
-$       mcr 'exe_dir'ssltest -server_auth "-CAfile" certs.tmp
+$       'ssltest' -server_auth 'CA'
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2/sslv3 with client authentication"
-$       mcr 'exe_dir'ssltest -client_auth "-CAfile" certs.tmp
+$       'ssltest' -client_auth 'CA'
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2/sslv3 with both client and server authentication"
-$       mcr 'exe_dir'ssltest -server_auth -client_auth "-CAfile" certs.tmp
+$       'ssltest' -server_auth -client_auth 'CA'
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2 via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -ssl2 
+$       'ssltest' -bio_pair -ssl2 
-$       if $severity .ne. 1 then goto exit3
-$
-$       write sys$output "test sslv2/sslv3 with 1024 bit DHE via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -dhe1024 -v
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2 with server authentication via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -ssl2 -server_auth "-CAfile" certs.tmp 
+$       'ssltest' -bio_pair -ssl2 -server_auth 'CA' 
 $       if $severity .ne. 1 then goto exit3
 $
-$       write sys$output "test sslv2 with client authentication via BIO pair"
+$       if .not. dsa_cert
-$       mcr 'exe_dir'ssltest -bio_pair -ssl2 -client_auth "-CAfile" certs.tmp 
+$       then
-$       if $severity .ne. 1 then goto exit3
+$           write sys$output "test sslv2 with client authentication via BIO pair"
+$           'ssltest' -bio_pair -ssl2 -client_auth 'CA' 
+$           if $severity .ne. 1 then goto exit3
 $
-$       write sys$output "test sslv2 with both client and server authentication via BIO pair"
+$           write sys$output "test sslv2 with both client and server authentication via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -ssl2 -server_auth -client_auth "-CAfile" certs.tmp 
+$           'ssltest' -bio_pair -ssl2 -server_auth -client_auth 'CA' 
-$       if $severity .ne. 1 then goto exit3
+$           if $severity .ne. 1 then goto exit3
+$       endif
 $
 $       write sys$output "test sslv3 via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -ssl3 
+$       'ssltest' -bio_pair -ssl3 
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv3 with server authentication via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -ssl3 -server_auth "-CAfile" certs.tmp 
+$       'ssltest' -bio_pair -ssl3 -server_auth 'CA' 
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv3 with client authentication via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -ssl3 -client_auth "-CAfile" certs.tmp 
+$       'ssltest' -bio_pair -ssl3 -client_auth 'CA' 
 $       if $severity .ne. 1 then goto exit3
 
 $       write sys$output "test sslv3 with both client and server authentication via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -ssl3 -server_auth -client_auth "-CAfile" certs.tmp 
+$       'ssltest' -bio_pair -ssl3 -server_auth -client_auth 'CA' 
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2/sslv3 via BIO pair"
-$       mcr 'exe_dir'ssltest 
+$       'ssltest' 
 $       if $severity .ne. 1 then goto exit3
 $
-$       write sys$output "test sslv2/sslv3 w/o DHE via BIO pair"
+$       if .not. dsa_cert
-$       mcr 'exe_dir'ssltest -bio_pair -no_dhe
+$       then
+$           write sys$output "test sslv2/sslv3 w/o DHE via BIO pair"
+$           'ssltest' -bio_pair -no_dhe
+$           if $severity .ne. 1 then goto exit3
+$       endif
+$
+$       write sys$output "test sslv2/sslv3 with 1024 bit DHE via BIO pair"
+$       'ssltest' -bio_pair -dhe1024dsa -v
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2/sslv3 with server authentication"
-$       mcr 'exe_dir'ssltest -bio_pair -server_auth "-CAfile" certs.tmp 
+$       'ssltest' -bio_pair -server_auth 'CA' 
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2/sslv3 with client authentication via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -client_auth "-CAfile" certs.tmp 
+$       'ssltest' -bio_pair -client_auth 'CA' 
 $       if $severity .ne. 1 then goto exit3
 $
 $       write sys$output "test sslv2/sslv3 with both client and server authentication via BIO pair"
-$       mcr 'exe_dir'ssltest -bio_pair -server_auth -client_auth "-CAfile" certs.tmp 
+$       'ssltest' -bio_pair -server_auth -client_auth 'CA' 
 $       if $severity .ne. 1 then goto exit3
 $
+$!###########################################################################
+$
+$       write sys$output "test tls1 with 1024bit anonymous DH, multiple handshakes"
+$       'ssltest' -v -bio_pair -tls1 -cipher "ADH" -dhe1024dsa -num 10 -f -time
+$       if $severity .ne. 1 then goto exit3
+$
+$       set noon
+$       define/user sys$output nla0:
+$       mcr 'exe_dir'openssl no-rsa
+$       save_severity=$SEVERITY
+$       set on
+$       if save_severity
+$       then
+$           write sys$output "skipping RSA tests"
+$       else
+$           write sys$output "test tls1 with 1024bit RSA, no DHE, multiple handshakes"
+$           mcr 'texe_dir'ssltest -v -bio_pair -tls1 -cert [-.apps]server2.pem -no_dhe -num 10 -f -time
+$           if $severity .ne. 1 then goto exit3
+$
+$           write sys$output "test tls1 with 1024bit RSA, 1024bit DHE, multiple handshakes"
+$           mcr 'texe_dir'ssltest -v -bio_pair -tls1 -cert [-.apps]server2.pem -dhe1024dsa -num 10 -f -time
+$           if $severity .ne. 1 then goto exit3
+$       endif
+$
 $       RET = 1
 $       goto exit
 $ exit3:
 $       RET = 3
 $ exit:
-$       delete certs.tmp;*
+$       if p3 .eqs. "" then delete certs.tmp;*
 $       exit 'RET'

diff --git a/src/lib/libssl/test/testssl.com b/src/lib/libssl/test/testssl.com index 0b4b0a0ad3..785f262f5a 100644 --- a/src/lib/libssl/test/testssl.com +++ b/src/lib/libssl/test/testssl.com
@@ -2,118 +2,189 @@ $! TESTSSL.COM
2	$	2	$
3	$ __arch := VAX	3	$ __arch := VAX
4	$ if f$getsyi("cpu") .ge. 128 then __arch := AXP	4	$ if f$getsyi("cpu") .ge. 128 then __arch := AXP
5	$ exe_dir := sys$disk:[-.'__arch'.exe.test]	5	$ texe_dir := sys$disk:[-.'__arch'.exe.test]
6	$	6	$ exe_dir := sys$disk:[-.'__arch'.exe.apps]
7	$ copy/concatenate [-.certs]*.pem certs.tmp	7	$
		8	$ if p1 .eqs. ""
		9	$ then
		10	$ key="[-.apps]server.pem"
		11	$ else
		12	$ key=p1
		13	$ endif
		14	$ if p2 .eqs. ""
		15	$ then
		16	$ cert="[-.apps]server.pem"
		17	$ else
		18	$ cert=p2
		19	$ endif
		20	$ ssltest := mcr 'texe_dir'ssltest -key 'key' -cert 'cert' -c_key 'key' -c_cert 'cert'
		21	$
		22	$ define/user sys$output testssl-x509-output.
		23	$ define/user sys$error nla0:
		24	$ mcr 'exe_dir'openssl x509 -in 'cert' -text -noout
		25	$ set noon
		26	$ define/user sys$error nla0:
		27	$ search/output=nla0: testssl-x509-output. "DSA Public Key"/exact
		28	$ if $severity .eq. 1
		29	$ then
		30	$ dsa_cert := YES
		31	$ else
		32	$ dsa_cert := NO
		33	$ endif
		34	$ set on
		35	$ delete testssl-x509-output.;*
		36	$
		37	$ if p3 .eqs. ""
		38	$ then
		39	$ copy/concatenate [-.certs]*.pem certs.tmp
		40	$ CA = """-CAfile"" certs.tmp"
		41	$ else
		42	$ CA = """-CAfile"" "+p3
		43	$ endif
		44	$
		45	$!###########################################################################
8	$	46	$
9	$ write sys$output "test sslv2"	47	$ write sys$output "test sslv2"
10	$ mcr 'exe_dir'ssltest -ssl2	48	$ 'ssltest' -ssl2
11	$ if $severity .ne. 1 then goto exit3	49	$ if $severity .ne. 1 then goto exit3
12	$	50	$
13	$ write sys$output "test sslv2 with server authentication"	51	$ write sys$output "test sslv2 with server authentication"
14	$ mcr 'exe_dir'ssltest -ssl2 -server_auth "-CAfile" certs.tmp	52	$ 'ssltest' -ssl2 -server_auth 'CA'
15	$ if $severity .ne. 1 then goto exit3	53	$ if $severity .ne. 1 then goto exit3
16	$	54	$
17	$ write sys$output "test sslv2 with client authentication"	55	$ if .not. dsa_cert
18	$ mcr 'exe_dir'ssltest -ssl2 -client_auth "-CAfile" certs.tmp	56	$ then
19	$ if $severity .ne. 1 then goto exit3	57	$ write sys$output "test sslv2 with client authentication"
		58	$ 'ssltest' -ssl2 -client_auth 'CA'
		59	$ if $severity .ne. 1 then goto exit3
20	$	60	$
21	$ write sys$output "test sslv2 with both client and server authentication"	61	$ write sys$output "test sslv2 with both client and server authentication"
22	$ mcr 'exe_dir'ssltest -ssl2 -server_auth -client_auth "-CAfile" certs.tmp	62	$ 'ssltest' -ssl2 -server_auth -client_auth 'CA'
23	$ if $severity .ne. 1 then goto exit3	63	$ if $severity .ne. 1 then goto exit3
		64	$ endif
24	$	65	$
25	$ write sys$output "test sslv3"	66	$ write sys$output "test sslv3"
26	$ mcr 'exe_dir'ssltest -ssl3	67	$ 'ssltest' -ssl3
27	$ if $severity .ne. 1 then goto exit3	68	$ if $severity .ne. 1 then goto exit3
28	$	69	$
29	$ write sys$output "test sslv3 with server authentication"	70	$ write sys$output "test sslv3 with server authentication"
30	$ mcr 'exe_dir'ssltest -ssl3 -server_auth "-CAfile" certs.tmp	71	$ 'ssltest' -ssl3 -server_auth 'CA'
31	$ if $severity .ne. 1 then goto exit3	72	$ if $severity .ne. 1 then goto exit3
32	$	73	$
33	$ write sys$output "test sslv3 with client authentication"	74	$ write sys$output "test sslv3 with client authentication"
34	$ mcr 'exe_dir'ssltest -ssl3 -client_auth "-CAfile" certs.tmp	75	$ 'ssltest' -ssl3 -client_auth 'CA'
35	$ if $severity .ne. 1 then goto exit3	76	$ if $severity .ne. 1 then goto exit3
36	$	77	$
37	$ write sys$output "test sslv3 with both client and server authentication"	78	$ write sys$output "test sslv3 with both client and server authentication"
38	$ mcr 'exe_dir'ssltest -ssl3 -server_auth -client_auth "-CAfile" certs.tmp	79	$ 'ssltest' -ssl3 -server_auth -client_auth 'CA'
39	$ if $severity .ne. 1 then goto exit3	80	$ if $severity .ne. 1 then goto exit3
40	$	81	$
41	$ write sys$output "test sslv2/sslv3"	82	$ write sys$output "test sslv2/sslv3"
42	$ mcr 'exe_dir'ssltest	83	$ 'ssltest'
43	$ if $severity .ne. 1 then goto exit3	84	$ if $severity .ne. 1 then goto exit3
44	$	85	$
45	$ write sys$output "test sslv2/sslv3 with server authentication"	86	$ write sys$output "test sslv2/sslv3 with server authentication"
46	$ mcr 'exe_dir'ssltest -server_auth "-CAfile" certs.tmp	87	$ 'ssltest' -server_auth 'CA'
47	$ if $severity .ne. 1 then goto exit3	88	$ if $severity .ne. 1 then goto exit3
48	$	89	$
49	$ write sys$output "test sslv2/sslv3 with client authentication"	90	$ write sys$output "test sslv2/sslv3 with client authentication"
50	$ mcr 'exe_dir'ssltest -client_auth "-CAfile" certs.tmp	91	$ 'ssltest' -client_auth 'CA'
51	$ if $severity .ne. 1 then goto exit3	92	$ if $severity .ne. 1 then goto exit3
52	$	93	$
53	$ write sys$output "test sslv2/sslv3 with both client and server authentication"	94	$ write sys$output "test sslv2/sslv3 with both client and server authentication"
54	$ mcr 'exe_dir'ssltest -server_auth -client_auth "-CAfile" certs.tmp	95	$ 'ssltest' -server_auth -client_auth 'CA'
55	$ if $severity .ne. 1 then goto exit3	96	$ if $severity .ne. 1 then goto exit3
56	$	97	$
57	$ write sys$output "test sslv2 via BIO pair"	98	$ write sys$output "test sslv2 via BIO pair"
58	$ mcr 'exe_dir'ssltest -bio_pair -ssl2	99	$ 'ssltest' -bio_pair -ssl2
59	$ if $severity .ne. 1 then goto exit3
60	$
61	$ write sys$output "test sslv2/sslv3 with 1024 bit DHE via BIO pair"
62	$ mcr 'exe_dir'ssltest -bio_pair -dhe1024 -v
63	$ if $severity .ne. 1 then goto exit3	100	$ if $severity .ne. 1 then goto exit3
64	$	101	$
65	$ write sys$output "test sslv2 with server authentication via BIO pair"	102	$ write sys$output "test sslv2 with server authentication via BIO pair"
66	$ mcr 'exe_dir'ssltest -bio_pair -ssl2 -server_auth "-CAfile" certs.tmp	103	$ 'ssltest' -bio_pair -ssl2 -server_auth 'CA'
67	$ if $severity .ne. 1 then goto exit3	104	$ if $severity .ne. 1 then goto exit3
68	$	105	$
69	$ write sys$output "test sslv2 with client authentication via BIO pair"	106	$ if .not. dsa_cert
70	$ mcr 'exe_dir'ssltest -bio_pair -ssl2 -client_auth "-CAfile" certs.tmp	107	$ then
71	$ if $severity .ne. 1 then goto exit3	108	$ write sys$output "test sslv2 with client authentication via BIO pair"
		109	$ 'ssltest' -bio_pair -ssl2 -client_auth 'CA'
		110	$ if $severity .ne. 1 then goto exit3
72	$	111	$
73	$ write sys$output "test sslv2 with both client and server authentication via BIO pair"	112	$ write sys$output "test sslv2 with both client and server authentication via BIO pair"
74	$ mcr 'exe_dir'ssltest -bio_pair -ssl2 -server_auth -client_auth "-CAfile" certs.tmp	113	$ 'ssltest' -bio_pair -ssl2 -server_auth -client_auth 'CA'
75	$ if $severity .ne. 1 then goto exit3	114	$ if $severity .ne. 1 then goto exit3
		115	$ endif
76	$	116	$
77	$ write sys$output "test sslv3 via BIO pair"	117	$ write sys$output "test sslv3 via BIO pair"
78	$ mcr 'exe_dir'ssltest -bio_pair -ssl3	118	$ 'ssltest' -bio_pair -ssl3
79	$ if $severity .ne. 1 then goto exit3	119	$ if $severity .ne. 1 then goto exit3
80	$	120	$
81	$ write sys$output "test sslv3 with server authentication via BIO pair"	121	$ write sys$output "test sslv3 with server authentication via BIO pair"
82	$ mcr 'exe_dir'ssltest -bio_pair -ssl3 -server_auth "-CAfile" certs.tmp	122	$ 'ssltest' -bio_pair -ssl3 -server_auth 'CA'
83	$ if $severity .ne. 1 then goto exit3	123	$ if $severity .ne. 1 then goto exit3
84	$	124	$
85	$ write sys$output "test sslv3 with client authentication via BIO pair"	125	$ write sys$output "test sslv3 with client authentication via BIO pair"
86	$ mcr 'exe_dir'ssltest -bio_pair -ssl3 -client_auth "-CAfile" certs.tmp	126	$ 'ssltest' -bio_pair -ssl3 -client_auth 'CA'
87	$ if $severity .ne. 1 then goto exit3	127	$ if $severity .ne. 1 then goto exit3
88		128
89	$ write sys$output "test sslv3 with both client and server authentication via BIO pair"	129	$ write sys$output "test sslv3 with both client and server authentication via BIO pair"
90	$ mcr 'exe_dir'ssltest -bio_pair -ssl3 -server_auth -client_auth "-CAfile" certs.tmp	130	$ 'ssltest' -bio_pair -ssl3 -server_auth -client_auth 'CA'
91	$ if $severity .ne. 1 then goto exit3	131	$ if $severity .ne. 1 then goto exit3
92	$	132	$
93	$ write sys$output "test sslv2/sslv3 via BIO pair"	133	$ write sys$output "test sslv2/sslv3 via BIO pair"
94	$ mcr 'exe_dir'ssltest	134	$ 'ssltest'
95	$ if $severity .ne. 1 then goto exit3	135	$ if $severity .ne. 1 then goto exit3
96	$	136	$
97	$ write sys$output "test sslv2/sslv3 w/o DHE via BIO pair"	137	$ if .not. dsa_cert
98	$ mcr 'exe_dir'ssltest -bio_pair -no_dhe	138	$ then
		139	$ write sys$output "test sslv2/sslv3 w/o DHE via BIO pair"
		140	$ 'ssltest' -bio_pair -no_dhe
		141	$ if $severity .ne. 1 then goto exit3
		142	$ endif
		143	$
		144	$ write sys$output "test sslv2/sslv3 with 1024 bit DHE via BIO pair"
		145	$ 'ssltest' -bio_pair -dhe1024dsa -v
99	$ if $severity .ne. 1 then goto exit3	146	$ if $severity .ne. 1 then goto exit3
100	$	147	$
101	$ write sys$output "test sslv2/sslv3 with server authentication"	148	$ write sys$output "test sslv2/sslv3 with server authentication"
102	$ mcr 'exe_dir'ssltest -bio_pair -server_auth "-CAfile" certs.tmp	149	$ 'ssltest' -bio_pair -server_auth 'CA'
103	$ if $severity .ne. 1 then goto exit3	150	$ if $severity .ne. 1 then goto exit3
104	$	151	$
105	$ write sys$output "test sslv2/sslv3 with client authentication via BIO pair"	152	$ write sys$output "test sslv2/sslv3 with client authentication via BIO pair"
106	$ mcr 'exe_dir'ssltest -bio_pair -client_auth "-CAfile" certs.tmp	153	$ 'ssltest' -bio_pair -client_auth 'CA'
107	$ if $severity .ne. 1 then goto exit3	154	$ if $severity .ne. 1 then goto exit3
108	$	155	$
109	$ write sys$output "test sslv2/sslv3 with both client and server authentication via BIO pair"	156	$ write sys$output "test sslv2/sslv3 with both client and server authentication via BIO pair"
110	$ mcr 'exe_dir'ssltest -bio_pair -server_auth -client_auth "-CAfile" certs.tmp	157	$ 'ssltest' -bio_pair -server_auth -client_auth 'CA'
111	$ if $severity .ne. 1 then goto exit3	158	$ if $severity .ne. 1 then goto exit3
112	$	159	$
		160	$!###########################################################################
		161	$
		162	$ write sys$output "test tls1 with 1024bit anonymous DH, multiple handshakes"
		163	$ 'ssltest' -v -bio_pair -tls1 -cipher "ADH" -dhe1024dsa -num 10 -f -time
		164	$ if $severity .ne. 1 then goto exit3
		165	$
		166	$ set noon
		167	$ define/user sys$output nla0:
		168	$ mcr 'exe_dir'openssl no-rsa
		169	$ save_severity=$SEVERITY
		170	$ set on
		171	$ if save_severity
		172	$ then
		173	$ write sys$output "skipping RSA tests"
		174	$ else
		175	$ write sys$output "test tls1 with 1024bit RSA, no DHE, multiple handshakes"
		176	$ mcr 'texe_dir'ssltest -v -bio_pair -tls1 -cert [-.apps]server2.pem -no_dhe -num 10 -f -time
		177	$ if $severity .ne. 1 then goto exit3
		178	$
		179	$ write sys$output "test tls1 with 1024bit RSA, 1024bit DHE, multiple handshakes"
		180	$ mcr 'texe_dir'ssltest -v -bio_pair -tls1 -cert [-.apps]server2.pem -dhe1024dsa -num 10 -f -time
		181	$ if $severity .ne. 1 then goto exit3
		182	$ endif
		183	$
113	$ RET = 1	184	$ RET = 1
114	$ goto exit	185	$ goto exit
115	$ exit3:	186	$ exit3:
116	$ RET = 3	187	$ RET = 3
117	$ exit:	188	$ exit:
118	$ delete certs.tmp;*	189	$ if p3 .eqs. "" then delete certs.tmp;*
119	$ exit 'RET'	190	$ exit 'RET'