diff options
author | Brent Cook <busterb@gmail.com> | 2023-07-05 10:13:47 +0300 |
---|---|---|
committer | Brent Cook <busterb@gmail.com> | 2023-07-05 11:28:18 +0300 |
commit | 3601512b6134c3c8ec357f650b9934b3f1b281dc (patch) | |
tree | f06d1fd199716ef3ff3bb79c518f35f0ae361eae /tests | |
parent | d238b6d3a17a81564124edc8bb598734e717407e (diff) | |
download | portable-3601512b6134c3c8ec357f650b9934b3f1b281dc.tar.gz portable-3601512b6134c3c8ec357f650b9934b3f1b281dc.tar.bz2 portable-3601512b6134c3c8ec357f650b9934b3f1b281dc.zip |
update testssl.bat for TLS 1.0 removal
Diffstat (limited to 'tests')
-rw-r--r-- | tests/testssl.bat | 39 |
1 files changed, 19 insertions, 20 deletions
diff --git a/tests/testssl.bat b/tests/testssl.bat index 4c3ca1b..c4e6286 100644 --- a/tests/testssl.bat +++ b/tests/testssl.bat | |||
@@ -1,4 +1,4 @@ | |||
1 | @echo off | 1 | @echo on |
2 | setlocal enabledelayedexpansion | 2 | setlocal enabledelayedexpansion |
3 | REM testssl.bat | 3 | REM testssl.bat |
4 | 4 | ||
@@ -88,8 +88,7 @@ for /f "usebackq" %%s in (`%openssl% no-dh`) do set nodh=%%s | |||
88 | if %nodh%==no-dh ( | 88 | if %nodh%==no-dh ( |
89 | echo skipping anonymous DH tests | 89 | echo skipping anonymous DH tests |
90 | ) else ( | 90 | ) else ( |
91 | echo test tls1 with 1024bit anonymous DH, multiple handshakes | 91 | echo skipping tls1 tests. |
92 | %ssltest% -v -bio_pair -tls1 -cipher ADH -dhe1024dsa -num 10 -f -time %extra% & if !errorlevel! neq 0 exit /b 1 | ||
93 | ) | 92 | ) |
94 | 93 | ||
95 | REM #for /f "usebackq" %%s in (`%openssl% no-rsa`) do set norsa=%%s | 94 | REM #for /f "usebackq" %%s in (`%openssl% no-rsa`) do set norsa=%%s |
@@ -112,24 +111,24 @@ REM # | |||
112 | REM # DTLS tests | 111 | REM # DTLS tests |
113 | REM # | 112 | REM # |
114 | 113 | ||
115 | echo test dtlsv1 | 114 | echo test dtlsv1_2 |
116 | %ssltest% -dtls1 %extra% & if !errorlevel! neq 0 exit /b 1 | 115 | %ssltest% -dtls1_2 %extra% & if !errorlevel! neq 0 exit /b 1 |
117 | 116 | ||
118 | echo test dtlsv1 with server authentication | 117 | echo test dtlsv1_2 with server authentication |
119 | %ssltest% -dtls1 -server_auth %CA% %extra% & if !errorlevel! neq 0 exit /b 1 | 118 | %ssltest% -dtls1_2 -server_auth %CA% %extra% & if !errorlevel! neq 0 exit /b 1 |
120 | 119 | ||
121 | echo test dtlsv1 with client authentication | 120 | echo test dtlsv1_2 with client authentication |
122 | %ssltest% -dtls1 -client_auth %CA% %extra% & if !errorlevel! neq 0 exit /b 1 | 121 | %ssltest% -dtls1_2 -client_auth %CA% %extra% & if !errorlevel! neq 0 exit /b 1 |
123 | 122 | ||
124 | echo test dtlsv1 with both client and server authentication | 123 | echo test dtlsv1_2 with both client and server authentication |
125 | %ssltest% -dtls1 -server_auth -client_auth %CA% %extra% & if !errorlevel! neq 0 exit /b 1 | 124 | %ssltest% -dtls1_2 -server_auth -client_auth %CA% %extra% & if !errorlevel! neq 0 exit /b 1 |
126 | 125 | ||
127 | echo "Testing DTLS ciphersuites" | 126 | echo "Testing DTLS ciphersuites" |
128 | for %%p in ( SSLv3 ) do ( | 127 | for %%p in ( SSLv3 ) do ( |
129 | echo "Testing ciphersuites for %%p" | 128 | echo "Testing ciphersuites for %%p" |
130 | for /f "usebackq" %%c in (`%openssl% ciphers -v "RSA+%%p:-RC4" ^| find "%%p"`) do ( | 129 | for /f "usebackq" %%c in (`%openssl% ciphers -v "RSA+%%p:-RC4" ^| find "%%p"`) do ( |
131 | echo "Testing %%c" | 130 | echo "Testing %%c" |
132 | %ssltest% -cipher %%c -dtls1 | 131 | %ssltest% -cipher %%c -dtls1_2 |
133 | if !errorlevel! neq 0 ( | 132 | if !errorlevel! neq 0 ( |
134 | echo "Failed %%c" | 133 | echo "Failed %%c" |
135 | exit /b 1 | 134 | exit /b 1 |
@@ -141,19 +140,19 @@ REM # | |||
141 | REM # ALPN tests | 140 | REM # ALPN tests |
142 | REM # | 141 | REM # |
143 | echo "Testing ALPN..." | 142 | echo "Testing ALPN..." |
144 | %ssltest% -bio_pair -tls1 -alpn_client foo -alpn_server bar & if !errorlevel! neq 0 exit /b 1 | 143 | %ssltest% -bio_pair -alpn_client foo -alpn_server bar & if !errorlevel! neq 0 exit /b 1 |
145 | %ssltest% -bio_pair -tls1 -alpn_client foo -alpn_server foo ^ | 144 | %ssltest% -bio_pair -alpn_client foo -alpn_server foo ^ |
146 | -alpn_expected foo & if !errorlevel! neq 0 exit /b 1 | 145 | -alpn_expected foo & if !errorlevel! neq 0 exit /b 1 |
147 | %ssltest% -bio_pair -tls1 -alpn_client foo,bar -alpn_server foo ^ | 146 | %ssltest% -bio_pair -alpn_client foo,bar -alpn_server foo ^ |
148 | -alpn_expected foo & if !errorlevel! neq 0 exit /b 1 | 147 | -alpn_expected foo & if !errorlevel! neq 0 exit /b 1 |
149 | %ssltest% -bio_pair -tls1 -alpn_client bar,foo -alpn_server foo ^ | 148 | %ssltest% -bio_pair -alpn_client bar,foo -alpn_server foo ^ |
150 | -alpn_expected foo & if !errorlevel! neq 0 exit /b 1 | 149 | -alpn_expected foo & if !errorlevel! neq 0 exit /b 1 |
151 | %ssltest% -bio_pair -tls1 -alpn_client bar,foo -alpn_server foo,bar ^ | 150 | %ssltest% -bio_pair -alpn_client bar,foo -alpn_server foo,bar ^ |
152 | -alpn_expected foo & if !errorlevel! neq 0 exit /b 1 | 151 | -alpn_expected foo & if !errorlevel! neq 0 exit /b 1 |
153 | %ssltest% -bio_pair -tls1 -alpn_client bar,foo -alpn_server bar,foo ^ | 152 | %ssltest% -bio_pair -alpn_client bar,foo -alpn_server bar,foo ^ |
154 | -alpn_expected bar & if !errorlevel! neq 0 exit /b 1 | 153 | -alpn_expected bar & if !errorlevel! neq 0 exit /b 1 |
155 | %ssltest% -bio_pair -tls1 -alpn_client foo,bar -alpn_server bar,foo ^ | 154 | %ssltest% -bio_pair -alpn_client foo,bar -alpn_server bar,foo ^ |
156 | -alpn_expected bar & if !errorlevel! neq 0 exit /b 1 | 155 | -alpn_expected bar & if !errorlevel! neq 0 exit /b 1 |
157 | %ssltest% -bio_pair -tls1 -alpn_client baz -alpn_server bar,foo & if !errorlevel! neq 0 exit /b 1 | 156 | %ssltest% -bio_pair -alpn_client baz -alpn_server bar,foo & if !errorlevel! neq 0 exit /b 1 |
158 | 157 | ||
159 | endlocal | 158 | endlocal |