124 lines
2.7 KiB
Bash
Executable file
124 lines
2.7 KiB
Bash
Executable file
#!/bin/sh
|
|
|
|
s_server_args="s_server -quiet -key ../certificates/server.key -cert ../certificates/server.pem -www -dhparam dh.pem "
|
|
|
|
pidfile='/tmp/openssl.pid'
|
|
|
|
extra_args=""
|
|
|
|
testit () {
|
|
/bin/sh -c "echo \$\$ > $pidfile && exec openssl $s_server_args $extra_args" &
|
|
|
|
sleep 0.3
|
|
|
|
../_build/default/lwt/examples/test_client.exe > /dev/null
|
|
|
|
if [ $? -eq 0 ]; then
|
|
echo "success with $extra_args"
|
|
else
|
|
echo "failure with openssl $s_server_args $extra_args"
|
|
exit 1
|
|
fi
|
|
cat $pidfile | xargs kill
|
|
rm $pidfile
|
|
sleep 0.5
|
|
}
|
|
|
|
testit
|
|
|
|
extra_args="-tls1"
|
|
testit
|
|
|
|
extra_args="-tls1_1"
|
|
testit
|
|
|
|
extra_args="-tls1_2"
|
|
testit
|
|
|
|
extra_args="-tls1_3"
|
|
testit
|
|
|
|
ciphers="DHE-RSA-AES256-SHA AES256-SHA DHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA"
|
|
#OpenSSL <1.1.1:
|
|
#EDH-RSA-DES-CBC3-SHA DES-CBC3-SHA
|
|
for i in $ciphers; do
|
|
extra_args="-cipher $i"
|
|
testit
|
|
|
|
extra_args="-tls1 -cipher $i"
|
|
testit
|
|
|
|
extra_args="-tls1_1 -cipher $i"
|
|
testit
|
|
|
|
extra_args="-tls1_2 -cipher $i"
|
|
testit
|
|
done
|
|
|
|
tls12_ciphers="DHE-RSA-AES256-SHA256 AES256-SHA256 DHE-RSA-AES128-SHA256 AES128-SHA256 AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256 AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305"
|
|
for i in $tls12_ciphers; do
|
|
extra_args="-cipher $i"
|
|
testit
|
|
|
|
extra_args="-tls1_2 -cipher $i"
|
|
testit
|
|
done
|
|
|
|
tls13_ciphers="TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256"
|
|
for i in $tls13_ciphers; do
|
|
extra_args="-ciphersuites $i"
|
|
testit
|
|
|
|
extra_args="-tls1_3 -ciphersuites $i"
|
|
testit
|
|
done
|
|
|
|
s_server_args="s_server -quiet -key ../certificates/server-ec.key -cert ../certificates/server-ec.pem -www -dhparam dh.pem "
|
|
ec_ciphers="ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA"
|
|
ec_ciphers12="ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305"
|
|
|
|
extra_args=""
|
|
testit
|
|
|
|
extra_args="-tls1"
|
|
testit
|
|
|
|
extra_args="-tls1_1"
|
|
testit
|
|
|
|
extra_args="-tls1_2"
|
|
testit
|
|
|
|
extra_args="-tls1_3"
|
|
testit
|
|
|
|
for i in $ec_ciphers; do
|
|
extra_args="-cipher $i"
|
|
testit
|
|
|
|
extra_args="-tls1 -cipher $i"
|
|
testit
|
|
|
|
extra_args="-tls1_1 -cipher $i"
|
|
testit
|
|
|
|
extra_args="-tls1_2 -cipher $i"
|
|
testit
|
|
done
|
|
|
|
for i in $ec_ciphers12; do
|
|
extra_args="-cipher $i"
|
|
testit
|
|
|
|
extra_args="-tls1_2 -cipher $i"
|
|
testit
|
|
done
|
|
|
|
tls13_ciphers="TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256"
|
|
for i in $tls13_ciphers; do
|
|
extra_args="-ciphersuites $i"
|
|
testit
|
|
|
|
extra_args="-tls1_3 -ciphersuites $i"
|
|
testit
|
|
done
|