Kris Kwiatkowski
d3e18f99e2
* includes AD in authentication check of TLS records As per 5.2 of TLS 1.3 draft-28, the additional data is record header. * tests: Update tests in order to support draft-28 * Interoperability: Updates NSS and BoringSSL versions to the one supporting draft-28 * Bogo: Updates revision number to use tests for draft-28 * FIX: makefile was using test-compat target instead of test-interop * DC test: constify * Use binary interface to encode in big-endian
28 lines
589 B
Bash
Executable File
28 lines
589 B
Bash
Executable File
#!/bin/sh
|
|
PATH=/boringssl/build/tool:$PATH
|
|
set -x
|
|
|
|
# RSA
|
|
bssl server \
|
|
-key rsa.pem \
|
|
-min-version tls1.2 -max-version tls1.3 \
|
|
-tls13-variant draft28 \
|
|
-accept 1443 -loop -www 2>&1 &
|
|
|
|
# ECDSA
|
|
bssl server \
|
|
-key ecdsa.pem \
|
|
-min-version tls1.2 -max-version tls1.3 \
|
|
-tls13-variant draft28 \
|
|
-accept 2443 -loop -www 2>&1 &
|
|
|
|
# Require client authentication (with ECDSA)
|
|
bssl server \
|
|
-key ecdsa.pem \
|
|
-min-version tls1.2 -max-version tls1.3 \
|
|
-tls13-variant draft28 \
|
|
-accept 6443 -loop -www \
|
|
-require-any-client-cert -debug 2>&1 &
|
|
|
|
wait
|