th5/_dev/boring/server.sh

#!/bin/sh
PATH=/boringssl/build/tool:$PATH
set -x

# RSA
bssl server \
    -key rsa.pem \
    -min-version tls1.2 -max-version tls1.3 \
    -accept 1443 -loop -www 2>&1 &

# ECDSA
bssl server \
    -key ecdsa.pem \
    -min-version tls1.2 -max-version tls1.3 \
    -accept 2443 -loop -www 2>&1 &

# Require client authentication (with ECDSA)
bssl server \
    -key ecdsa.pem \
    -min-version tls1.2 -max-version tls1.3 \
    -accept 6443 -loop -www \
    -require-any-client-cert -debug 2>&1 &

# ECDSA and SIDH/P503-X25519
bssl server \
    -key ecdsa.pem \
    -curves x25519sidh503 \
    -min-version tls1.3 -max-version tls1.3 \
    -accept 7443 -loop -www \
    -debug 2>&1 &

wait
tris: Add initial client interoperability tests Prepare framework for testing tls-tris as client against other servers. Currently only boringssl is implemented, but the idea is to add support for others too (NSS, OpenSSL, picotls, tris, ...). To test multiple certificate types, copy ecdsa.pem and rsa.pem from tris-localserver for boringssl. The boringssl image is reused for the server since the binaries were built anyway. Revision is bumped to something to fix a build error and make the -loop and -www options work. 2017-08-31 15:03:22 +01:00			`#!/bin/sh`
			`PATH=/boringssl/build/tool:$PATH`
			`set -x`

			`# RSA`
			`bssl server \`
			`-key rsa.pem \`
			`-min-version tls1.2 -max-version tls1.3 \`
			`-accept 1443 -loop -www 2>&1 &`

			`# ECDSA`
			`bssl server \`
			`-key ecdsa.pem \`
			`-min-version tls1.2 -max-version tls1.3 \`
			`-accept 2443 -loop -www 2>&1 &`

(tests) Client Authentication: Tests against boringssl 2018-02-14 07:27:33 +00:00			`# Require client authentication (with ECDSA)`
			`bssl server \`
			`-key ecdsa.pem \`
			`-min-version tls1.2 -max-version tls1.3 \`
			`-accept 6443 -loop -www \`
			`-require-any-client-cert -debug 2>&1 &`

sidh: operability tests with BoringSSL Implements two tests for SIDH/P503-X25519 interoperability. BoringSSL initiates connection to TRIS and TRIS initiates connection to BoringSSL. SIDH server always listens on port 7443 2018-10-15 14:24:28 +01:00			`# ECDSA and SIDH/P503-X25519`
			`bssl server \`
			`-key ecdsa.pem \`
			`-curves x25519sidh503 \`
			`-min-version tls1.3 -max-version tls1.3 \`
			`-accept 7443 -loop -www \`
			`-debug 2>&1 &`

tris: Add initial client interoperability tests Prepare framework for testing tls-tris as client against other servers. Currently only boringssl is implemented, but the idea is to add support for others too (NSS, OpenSSL, picotls, tris, ...). To test multiple certificate types, copy ecdsa.pem and rsa.pem from tris-localserver for boringssl. The boringssl image is reused for the server since the binaries were built anyway. Revision is bumped to something to fix a build error and make the -loop and -www options work. 2017-08-31 15:03:22 +01:00			`wait`