kris/th5
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
03138ec18e
th5/_dev/boring/server.sh

28 lines
589 B
Bash
Raw Normal View History

tris: Add initial client interoperability tests Prepare framework for testing tls-tris as client against other servers. Currently only boringssl is implemented, but the idea is to add support for others too (NSS, OpenSSL, picotls, tris, ...). To test multiple certificate types, copy ecdsa.pem and rsa.pem from tris-localserver for boringssl. The boringssl image is reused for the server since the binaries were built anyway. Revision is bumped to something to fix a build error and make the -loop and -www options work.
2017-08-31 15:03:22 +01:00
#!/bin/sh
PATH=/boringssl/build/tool:$PATH
set -x
# RSA
bssl server \
-key rsa.pem \
-min-version tls1.2 -max-version tls1.3 \
tris: update tests to track draft 22 Force boringssl client and server to use draft 22 instead of draft 18. Other clients (tstclnt from NSS, picotls) support only draft 22. Disable mint, it only supports draft 21.
2017-11-14 15:43:14 +00:00
-tls13-draft22-variant \
tris: Add initial client interoperability tests Prepare framework for testing tls-tris as client against other servers. Currently only boringssl is implemented, but the idea is to add support for others too (NSS, OpenSSL, picotls, tris, ...). To test multiple certificate types, copy ecdsa.pem and rsa.pem from tris-localserver for boringssl. The boringssl image is reused for the server since the binaries were built anyway. Revision is bumped to something to fix a build error and make the -loop and -www options work.
2017-08-31 15:03:22 +01:00
-accept 1443 -loop -www 2>&1 &
# ECDSA
bssl server \
-key ecdsa.pem \
-min-version tls1.2 -max-version tls1.3 \
tris: update tests to track draft 22 Force boringssl client and server to use draft 22 instead of draft 18. Other clients (tstclnt from NSS, picotls) support only draft 22. Disable mint, it only supports draft 21.
2017-11-14 15:43:14 +00:00
-tls13-draft22-variant \
tris: Add initial client interoperability tests Prepare framework for testing tls-tris as client against other servers. Currently only boringssl is implemented, but the idea is to add support for others too (NSS, OpenSSL, picotls, tris, ...). To test multiple certificate types, copy ecdsa.pem and rsa.pem from tris-localserver for boringssl. The boringssl image is reused for the server since the binaries were built anyway. Revision is bumped to something to fix a build error and make the -loop and -www options work.
2017-08-31 15:03:22 +01:00
-accept 2443 -loop -www 2>&1 &
(tests) Client Authentication: Tests against boringssl
2018-02-14 07:27:33 +00:00
# Require client authentication (with ECDSA)
bssl server \
-key ecdsa.pem \
-min-version tls1.2 -max-version tls1.3 \
-tls13-draft22-variant \
-accept 6443 -loop -www \
-require-any-client-cert -debug 2>&1 &
tris: Add initial client interoperability tests Prepare framework for testing tls-tris as client against other servers. Currently only boringssl is implemented, but the idea is to add support for others too (NSS, OpenSSL, picotls, tris, ...). To test multiple certificate types, copy ecdsa.pem and rsa.pem from tris-localserver for boringssl. The boringssl image is reused for the server since the binaries were built anyway. Revision is bumped to something to fix a build error and make the -loop and -www options work.
2017-08-31 15:03:22 +01:00
wait
Reference in New Issue Copy Permalink