diff options
author | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2017-05-20 08:26:47 +0200 |
---|---|---|
committer | Nikos Mavrogiannopoulos <nmav@gnutls.org> | 2017-05-20 14:46:37 +0200 |
commit | cf67f8e20d941a4b5ca4e5fdce309dbab4e71031 (patch) | |
tree | 8a42a0e81c3c10e4f3fdb196c3e4d1f05f838eae /tests/server-multi-keys.sh | |
parent | bcae8ce72be5baf93c3941882e979ce57c87ecf5 (diff) | |
download | gnutls-cf67f8e20d941a4b5ca4e5fdce309dbab4e71031.tar.gz |
tests: added TLS server test for multi-key usage
That is, a server which utilizes both RSA and ECDSA keys.
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Diffstat (limited to 'tests/server-multi-keys.sh')
-rwxr-xr-x | tests/server-multi-keys.sh | 77 |
1 files changed, 77 insertions, 0 deletions
diff --git a/tests/server-multi-keys.sh b/tests/server-multi-keys.sh new file mode 100755 index 0000000000..ce04f8506f --- /dev/null +++ b/tests/server-multi-keys.sh @@ -0,0 +1,77 @@ +#!/bin/sh + +# Copyright (C) 2017 Nikos Mavrogiannopoulos +# +# Author: Nikos Mavrogiannopoulos +# +# This file is part of GnuTLS. +# +# GnuTLS is free software; you can redistribute it and/or modify it +# under the terms of the GNU General Public License as published by the +# Free Software Foundation; either version 3 of the License, or (at +# your option) any later version. +# +# GnuTLS is distributed in the hope that it will be useful, but +# WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU +# General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with GnuTLS; if not, write to the Free Software Foundation, +# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. + +srcdir="${srcdir:-.}" +SERV="${SERV:-../src/gnutls-serv${EXEEXT}}" +CLI="${CLI:-../src/gnutls-cli${EXEEXT}}" +unset RETCODE + +if ! test -x "${SERV}"; then + exit 77 +fi + +if ! test -x "${CLI}"; then + exit 77 +fi + +if test "${WINDIR}" != ""; then + exit 77 +fi + +if ! test -z "${VALGRIND}"; then + VALGRIND="${LIBTOOL:-libtool} --mode=execute ${VALGRIND} --error-exitcode=15" +fi + + +SERV="${SERV} -q" + +. "${srcdir}/scripts/common.sh" + +check_for_datefudge + +echo "Checking whether server can utilize multiple keys" + +KEY1=${srcdir}/../doc/credentials/x509/key-rsa.pem +CERT1=${srcdir}/../doc/credentials/x509/cert-rsa.pem +KEY2=${srcdir}/../doc/credentials/x509/key-ecc.pem +CERT2=${srcdir}/../doc/credentials/x509/cert-ecc.pem +CAFILE=${srcdir}/../doc/credentials/x509/ca.pem + +eval "${GETPORT}" +launch_server $$ --echo --priority "NORMAL:+ECDHE-RSA:+ECDHE-ECDSA" --x509keyfile ${KEY1} --x509certfile ${CERT1} \ + --x509keyfile ${KEY2} --x509certfile ${CERT2} +PID=$! +wait_server ${PID} + +timeout 1800 datefudge "2016-09-2" \ +"${CLI}" -p "${PORT}" localhost --x509cafile ${CAFILE} --priority "NORMAL:-KX-ALL:+ECDHE-RSA" </dev/null || \ + fail ${PID} "1. handshake with RSA should have succeeded!" + +timeout 1800 datefudge "2016-09-2" \ +"${CLI}" -p "${PORT}" localhost --x509cafile ${CAFILE} --priority "NORMAL:-KX-ALL:+ECDHE-ECDSA" </dev/null || \ + fail ${PID} "2. handshake with ECC should have succeeded!" + + +kill ${PID} +wait + +exit 0 |