Kris Kwiatkowski
76231e7564
Tris tries to connect to BoringSSL over TLS 1.2 with X25519-SIDH as prefered DH group. As this is not supported by BoringSSL it must fall back to P-256 (second preference on the list) Also refactors tris test client
33 lines
716 B
Bash
Executable File
33 lines
716 B
Bash
Executable File
#!/bin/sh
|
|
PATH=/boringssl/build/tool:$PATH
|
|
set -x
|
|
|
|
# RSA
|
|
bssl server \
|
|
-key rsa.pem \
|
|
-min-version tls1.2 -max-version tls1.3 \
|
|
-accept 1443 -loop -www 2>&1 &
|
|
|
|
# ECDSA
|
|
bssl server \
|
|
-key ecdsa.pem \
|
|
-min-version tls1.2 -max-version tls1.3 \
|
|
-accept 2443 -loop -www 2>&1 &
|
|
|
|
# Require client authentication (with ECDSA)
|
|
bssl server \
|
|
-key ecdsa.pem \
|
|
-min-version tls1.2 -max-version tls1.3 \
|
|
-accept 6443 -loop -www \
|
|
-require-any-client-cert -debug 2>&1 &
|
|
|
|
# ECDSA and SIDH/P503-X25519
|
|
bssl server \
|
|
-key ecdsa.pem \
|
|
-curves X25519-SIDHp503:X25519:P-256:P-384:P-521 \
|
|
-min-version tls1.2 -max-version tls1.3 \
|
|
-accept 7443 -loop -www \
|
|
-debug 2>&1 &
|
|
|
|
wait
|