unikernel/duniverse/ocaml-tls/tests/interop-openssl-sserver.sh

@@ -0,0 +1,124 @@
+#!/bin/sh
+
+s_server_args="s_server -quiet -key ../certificates/server.key -cert ../certificates/server.pem -www -dhparam dh.pem "
+
+pidfile='/tmp/openssl.pid'
+
+extra_args=""
+
+testit () {
+    /bin/sh -c "echo \$\$ > $pidfile && exec openssl $s_server_args $extra_args" &
+
+    sleep 0.3
+
+    ../_build/default/lwt/examples/test_client.exe > /dev/null
+
+    if [ $? -eq 0 ]; then
+        echo "success with $extra_args"
+    else
+        echo "failure with openssl $s_server_args $extra_args"
+        exit 1
+    fi
+    cat $pidfile | xargs kill
+    rm $pidfile
+    sleep 0.5
+}
+
+testit
+
+extra_args="-tls1"
+testit
+
+extra_args="-tls1_1"
+testit
+
+extra_args="-tls1_2"
+testit
+
+extra_args="-tls1_3"
+testit
+
+ciphers="DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA"
+#OpenSSL <1.1.1:
+#EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA
+for i in $ciphers; do
+    extra_args="-cipher $i"
+    testit
+
+    extra_args="-tls1 -cipher $i"
+    testit
+
+    extra_args="-tls1_1 -cipher $i"
+    testit
+
+    extra_args="-tls1_2 -cipher $i"
+    testit
+done
+
+tls12_ciphers="DHE-RSA-AES256-SHA256 AES256-SHA256 DHE-RSA-AES128-SHA256 AES128-SHA256 AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305"
+for i in $tls12_ciphers; do
+    extra_args="-cipher $i"
+    testit
+
+    extra_args="-tls1_2 -cipher $i"
+    testit
+done
+
+tls13_ciphers="TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256"
+for i in $tls13_ciphers; do
+    extra_args="-ciphersuites $i"
+    testit
+
+    extra_args="-tls1_3 -ciphersuites $i"
+    testit
+done
+
+s_server_args="s_server -quiet -key ../certificates/server-ec.key -cert ../certificates/server-ec.pem -www -dhparam dh.pem "
+ec_ciphers="ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA"
+ec_ciphers12="ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305"
+
+extra_args=""
+testit
+
+extra_args="-tls1"
+testit
+
+extra_args="-tls1_1"
+testit
+
+extra_args="-tls1_2"
+testit
+
+extra_args="-tls1_3"
+testit
+
+for i in $ec_ciphers; do
+    extra_args="-cipher $i"
+    testit
+
+    extra_args="-tls1 -cipher $i"
+    testit
+
+    extra_args="-tls1_1 -cipher $i"
+    testit
+
+    extra_args="-tls1_2 -cipher $i"
+    testit
+done
+
+for i in $ec_ciphers12; do
+    extra_args="-cipher $i"
+    testit
+
+    extra_args="-tls1_2 -cipher $i"
+    testit
+done
+
+tls13_ciphers="TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256"
+for i in $tls13_ciphers; do
+    extra_args="-ciphersuites $i"
+    testit
+
+    extra_args="-tls1_3 -ciphersuites $i"
+    testit
+done