unikernel/duniverse/ocaml-tls/tests/interop-openssl-sclient.sh

@@ -0,0 +1,82 @@
+#!/bin/sh
+
+port=4455
+s_client_args="s_client -quiet -connect 127.0.0.1:"
+
+extra_args=""
+statfile="/tmp/test_server.status"
+
+testit () {
+    /bin/sh -c "cd ../ && ./_build/default/lwt/examples/test_server.exe $port > /dev/null && echo foo > $statfile" &
+
+    sleep 0.3
+
+    echo "GET /" | openssl $s_client_args$port $extra_args 2> /dev/null > /dev/null
+
+    sleep 0.3
+
+    if [ -e $statfile ]; then
+        result=$(cat $statfile)
+        if [ $result = "foo" ]; then
+            echo "success with $extra_args"
+        else
+            echo "failure with openssl $s_client_args $extra_args (statfile there)"
+            exit 1
+        fi
+        rm $statfile
+    else
+        echo "failure with openssl $s_client_args$port $extra_args (no statfile)"
+        exit 1
+    fi
+    sleep 0.3
+    port=$(expr $port + 1)
+}
+
+testit
+
+extra_args="-tls1"
+testit
+
+extra_args="-tls1_1"
+testit
+
+extra_args="-tls1_2"
+testit
+
+extra_args="-tls1_3"
+testit
+
+ciphers="DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA"
+#OpenSSL <1.1.1:
+#EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA
+for i in $ciphers; do
+    extra_args="-cipher $i"
+    testit
+
+    extra_args="-tls1 -cipher $i"
+    testit
+
+    extra_args="-tls1_1 -cipher $i"
+    testit
+
+    extra_args="-tls1_2 -cipher $i"
+    testit
+done
+
+tls12_ciphers="DHE-RSA-AES256-SHA256 AES256-SHA256 DHE-RSA-AES128-SHA256 AES128-SHA256 AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305"
+for i in $tls12_ciphers; do
+    extra_args="-cipher $i"
+    testit
+
+    extra_args="-tls1_2 -cipher $i"
+    testit
+done
+
+tls13_ciphers="TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256"
+for i in $tls13_ciphers; do
+    extra_args="-ciphersuites $i"
+    testit
+
+    extra_args="-tls1_3 -ciphersuites $i"
+    testit
+done