mte/unikernel/duniverse/ocaml-tls/tests/interop-openssl-sclient.sh

83 lines
2.1 KiB
Bash
Raw Normal View History

2025-11-11 02:07:51 +01:00
#!/bin/sh
port=4455
s_client_args="s_client -quiet -connect 127.0.0.1:"
extra_args=""
statfile="/tmp/test_server.status"
testit () {
/bin/sh -c "cd ../ && ./_build/default/lwt/examples/test_server.exe $port > /dev/null && echo foo > $statfile" &
sleep 0.3
echo "GET /" | openssl $s_client_args$port $extra_args 2> /dev/null > /dev/null
sleep 0.3
if [ -e $statfile ]; then
result=$(cat $statfile)
if [ $result = "foo" ]; then
echo "success with $extra_args"
else
echo "failure with openssl $s_client_args $extra_args (statfile there)"
exit 1
fi
rm $statfile
else
echo "failure with openssl $s_client_args$port $extra_args (no statfile)"
exit 1
fi
sleep 0.3
port=$(expr $port + 1)
}
testit
extra_args="-tls1"
testit
extra_args="-tls1_1"
testit
extra_args="-tls1_2"
testit
extra_args="-tls1_3"
testit
ciphers="DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA"
#OpenSSL <1.1.1:
#EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA
for i in $ciphers; do
extra_args="-cipher $i"
testit
extra_args="-tls1 -cipher $i"
testit
extra_args="-tls1_1 -cipher $i"
testit
extra_args="-tls1_2 -cipher $i"
testit
done
tls12_ciphers="DHE-RSA-AES256-SHA256 AES256-SHA256 DHE-RSA-AES128-SHA256 AES128-SHA256 AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305"
for i in $tls12_ciphers; do
extra_args="-cipher $i"
testit
extra_args="-tls1_2 -cipher $i"
testit
done
tls13_ciphers="TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256"
for i in $tls13_ciphers; do
extra_args="-ciphersuites $i"
testit
extra_args="-tls1_3 -ciphersuites $i"
testit
done