third_party/mbedtls/repo/tests/compat.sh

   1 #!/bin/sh
   2
   3 # compat.sh
   4 #
   5 # This file is part of mbed TLS (https://tls.mbed.org)
   6 #
   7 # Copyright (c) 2012-2016, ARM Limited, All Rights Reserved
   8 #
   9 # Purpose
  10 #
  11 # Test interoperbility with OpenSSL, GnuTLS as well as itself.
  12 #
  13 # Check each common ciphersuite, with each version, both ways (client/server),
  14 # with and without client authentication.
  15
  16 set -u
  17
  18 # initialise counters
  19 TESTS=0
  20 FAILED=0
  21 SKIPPED=0
  22 SRVMEM=0
  23
  24 # default commands, can be overridden by the environment
  25 : ${M_SRV:=../programs/ssl/ssl_server2}
  26 : ${M_CLI:=../programs/ssl/ssl_client2}
  27 : ${OPENSSL_CMD:=openssl} # OPENSSL would conflict with the build system
  28 : ${GNUTLS_CLI:=gnutls-cli}
  29 : ${GNUTLS_SERV:=gnutls-serv}
  30
  31 # do we have a recent enough GnuTLS?
  32 if ( which $GNUTLS_CLI && which $GNUTLS_SERV ) >/dev/null 2>&1; then
  33     G_VER="$( $GNUTLS_CLI --version | head -n1 )"
  34     if echo "$G_VER" | grep '@VERSION@' > /dev/null; then # git version
  35         PEER_GNUTLS=" GnuTLS"
  36     else
  37         eval $( echo $G_VER | sed 's/.* \([0-9]*\)\.\([0-9]\)*\.\([0-9]*\)$/MAJOR="\1" MINOR="\2" PATCH="\3"/' )
  38         if [ $MAJOR -lt 3 -o \
  39             \( $MAJOR -eq 3 -a $MINOR -lt 2 \) -o \
  40             \( $MAJOR -eq 3 -a $MINOR -eq 2 -a $PATCH -lt 15 \) ]
  41         then
  42             PEER_GNUTLS=""
  43         else
  44             PEER_GNUTLS=" GnuTLS"
  45             if [ $MINOR -lt 4 ]; then
  46                 GNUTLS_MINOR_LT_FOUR='x'
  47             fi
  48         fi
  49     fi
  50 else
  51     PEER_GNUTLS=""
  52 fi
  53
  54 # default values for options
  55 MODES="tls1 tls1_1 tls1_2 dtls1 dtls1_2"
  56 VERIFIES="NO YES"
  57 TYPES="ECDSA RSA PSK"
  58 FILTER=""
  59 # exclude:
  60 # - NULL: excluded from our default config
  61 # - RC4, single-DES: requires legacy OpenSSL/GnuTLS versions
  62 #   avoid plain DES but keep 3DES-EDE-CBC (mbedTLS), DES-CBC3 (OpenSSL)
  63 # - ARIA: not in default config.h + requires OpenSSL >= 1.1.1
  64 # - ChachaPoly: requires OpenSSL >= 1.1.0
  65 # - 3DES: not in default config
  66 EXCLUDE='NULL\|DES\|RC4\|ARCFOUR\|ARIA\|CHACHA20-POLY1305'
  67 VERBOSE=""
  68 MEMCHECK=0
  69 PEERS="OpenSSL$PEER_GNUTLS mbedTLS"
  70
  71 # hidden option: skip DTLS with OpenSSL
  72 # (travis CI has a version that doesn't work for us)
  73 : ${OSSL_NO_DTLS:=0}
  74
  75 print_usage() {
  76     echo "Usage: $0"
  77     printf "  -h|--help\tPrint this help.\n"
  78     printf "  -f|--filter\tOnly matching ciphersuites are tested (Default: '$FILTER')\n"
  79     printf "  -e|--exclude\tMatching ciphersuites are excluded (Default: '$EXCLUDE')\n"
  80     printf "  -m|--modes\tWhich modes to perform (Default: '$MODES')\n"
  81     printf "  -t|--types\tWhich key exchange type to perform (Default: '$TYPES')\n"
  82     printf "  -V|--verify\tWhich verification modes to perform (Default: '$VERIFIES')\n"
  83     printf "  -p|--peers\tWhich peers to use (Default: '$PEERS')\n"
  84     printf "            \tAlso available: GnuTLS (needs v3.2.15 or higher)\n"
  85     printf "  -M|--memcheck\tCheck memory leaks and errors.\n"
  86     printf "  -v|--verbose\tSet verbose output.\n"
  87 }
  88
  89 get_options() {
  90     while [ $# -gt 0 ]; do
  91         case "$1" in
  92             -f|--filter)
  93                 shift; FILTER=$1
  94                 ;;
  95             -e|--exclude)
  96                 shift; EXCLUDE=$1
  97                 ;;
  98             -m|--modes)
  99                 shift; MODES=$1
 100                 ;;
 101             -t|--types)
 102                 shift; TYPES=$1
 103                 ;;
 104             -V|--verify)
 105                 shift; VERIFIES=$1
 106                 ;;
 107             -p|--peers)
 108                 shift; PEERS=$1
 109                 ;;
 110             -v|--verbose)
 111                 VERBOSE=1
 112                 ;;
 113             -M|--memcheck)
 114                 MEMCHECK=1
 115                 ;;
 116             -h|--help)
 117                 print_usage
 118                 exit 0
 119                 ;;
 120             *)
 121                 echo "Unknown argument: '$1'"
 122                 print_usage
 123                 exit 1
 124                 ;;
 125         esac
 126         shift
 127     done
 128
 129     # sanitize some options (modes checked later)
 130     VERIFIES="$( echo $VERIFIES | tr [a-z] [A-Z] )"
 131     TYPES="$( echo $TYPES | tr [a-z] [A-Z] )"
 132 }
 133
 134 log() {
 135   if [ "X" != "X$VERBOSE" ]; then
 136     echo ""
 137     echo "$@"
 138   fi
 139 }
 140
 141 # is_dtls <mode>
 142 is_dtls()
 143 {
 144     test "$1" = "dtls1" -o "$1" = "dtls1_2"
 145 }
 146
 147 # minor_ver <mode>
 148 minor_ver()
 149 {
 150     case "$1" in
 151         ssl3)
 152             echo 0
 153             ;;
 154         tls1)
 155             echo 1
 156             ;;
 157         tls1_1|dtls1)
 158             echo 2
 159             ;;
 160         tls1_2|dtls1_2)
 161             echo 3
 162             ;;
 163         *)
 164             echo "error: invalid mode: $MODE" >&2
 165             # exiting is no good here, typically called in a subshell
 166             echo -1
 167     esac
 168 }
 169
 170 filter()
 171 {
 172   LIST="$1"
 173   NEW_LIST=""
 174
 175   if is_dtls "$MODE"; then
 176       EXCLMODE="$EXCLUDE"'\|RC4\|ARCFOUR'
 177   else
 178       EXCLMODE="$EXCLUDE"
 179   fi
 180
 181   for i in $LIST;
 182   do
 183     NEW_LIST="$NEW_LIST $( echo "$i" | grep "$FILTER" | grep -v "$EXCLMODE" )"
 184   done
 185
 186   # normalize whitespace
 187   echo "$NEW_LIST" | sed -e 's/[[:space:]][[:space:]]*/ /g' -e 's/^ //' -e 's/ $//'
 188 }
 189
 190 # OpenSSL 1.0.1h with -Verify wants a ClientCertificate message even for
 191 # PSK ciphersuites with DTLS, which is incorrect, so disable them for now
 192 check_openssl_server_bug()
 193 {
 194     if test "X$VERIFY" = "XYES" && is_dtls "$MODE" && \
 195         echo "$1" | grep "^TLS-PSK" >/dev/null;
 196     then
 197         SKIP_NEXT="YES"
 198     fi
 199 }
 200
 201 filter_ciphersuites()
 202 {
 203     if [ "X" != "X$FILTER" -o "X" != "X$EXCLUDE" ];
 204     then
 205         # Ciphersuite for mbed TLS
 206         M_CIPHERS=$( filter "$M_CIPHERS" )
 207
 208         # Ciphersuite for OpenSSL
 209         O_CIPHERS=$( filter "$O_CIPHERS" )
 210
 211         # Ciphersuite for GnuTLS
 212         G_CIPHERS=$( filter "$G_CIPHERS" )
 213     fi
 214
 215     # OpenSSL 1.0.1h doesn't support DTLS 1.2
 216     if [ `minor_ver "$MODE"` -ge 3 ] && is_dtls "$MODE"; then
 217         O_CIPHERS=""
 218         case "$PEER" in
 219             [Oo]pen*)
 220                 M_CIPHERS=""
 221                 ;;
 222         esac
 223     fi
 224
 225     # For GnuTLS client -> mbed TLS server,
 226     # we need to force IPv4 by connecting to 127.0.0.1 but then auth fails
 227     if [ "X$VERIFY" = "XYES" ] && is_dtls "$MODE"; then
 228         G_CIPHERS=""
 229     fi
 230 }
 231
 232 reset_ciphersuites()
 233 {
 234     M_CIPHERS=""
 235     O_CIPHERS=""
 236     G_CIPHERS=""
 237 }
 238
 239 # Ciphersuites that can be used with all peers.
 240 # Since we currently have three possible peers, each ciphersuite should appear
 241 # three times: in each peer's list (with the name that this peer uses).
 242 add_common_ciphersuites()
 243 {
 244     case $TYPE in
 245
 246         "ECDSA")
 247             if [ `minor_ver "$MODE"` -gt 0 ]
 248             then
 249                 M_CIPHERS="$M_CIPHERS                       \
 250                     TLS-ECDHE-ECDSA-WITH-NULL-SHA           \
 251                     TLS-ECDHE-ECDSA-WITH-RC4-128-SHA        \
 252                     TLS-ECDHE-ECDSA-WITH-3DES-EDE-CBC-SHA   \
 253                     TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA    \
 254                     TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA    \
 255                     "
 256                 G_CIPHERS="$G_CIPHERS                       \
 257                     +ECDHE-ECDSA:+NULL:+SHA1                \
 258                     +ECDHE-ECDSA:+ARCFOUR-128:+SHA1         \
 259                     +ECDHE-ECDSA:+3DES-CBC:+SHA1            \
 260                     +ECDHE-ECDSA:+AES-128-CBC:+SHA1         \
 261                     +ECDHE-ECDSA:+AES-256-CBC:+SHA1         \
 262                     "
 263                 O_CIPHERS="$O_CIPHERS               \
 264                     ECDHE-ECDSA-NULL-SHA            \
 265                     ECDHE-ECDSA-RC4-SHA             \
 266                     ECDHE-ECDSA-DES-CBC3-SHA        \
 267                     ECDHE-ECDSA-AES128-SHA          \
 268                     ECDHE-ECDSA-AES256-SHA          \
 269                     "
 270             fi
 271             if [ `minor_ver "$MODE"` -ge 3 ]
 272             then
 273                 M_CIPHERS="$M_CIPHERS                               \
 274                     TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256         \
 275                     TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384         \
 276                     TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256         \
 277                     TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384         \
 278                     "
 279                 G_CIPHERS="$G_CIPHERS                               \
 280                     +ECDHE-ECDSA:+AES-128-CBC:+SHA256               \
 281                     +ECDHE-ECDSA:+AES-256-CBC:+SHA384               \
 282                     +ECDHE-ECDSA:+AES-128-GCM:+AEAD                 \
 283                     +ECDHE-ECDSA:+AES-256-GCM:+AEAD                 \
 284                     "
 285                 O_CIPHERS="$O_CIPHERS               \
 286                     ECDHE-ECDSA-AES128-SHA256       \
 287                     ECDHE-ECDSA-AES256-SHA384       \
 288                     ECDHE-ECDSA-AES128-GCM-SHA256   \
 289                     ECDHE-ECDSA-AES256-GCM-SHA384   \
 290                     "
 291             fi
 292             ;;
 293
 294         "RSA")
 295             M_CIPHERS="$M_CIPHERS                       \
 296                 TLS-DHE-RSA-WITH-AES-128-CBC-SHA        \
 297                 TLS-DHE-RSA-WITH-AES-256-CBC-SHA        \
 298                 TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA   \
 299                 TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA   \
 300                 TLS-DHE-RSA-WITH-3DES-EDE-CBC-SHA       \
 301                 TLS-RSA-WITH-AES-256-CBC-SHA            \
 302                 TLS-RSA-WITH-CAMELLIA-256-CBC-SHA       \
 303                 TLS-RSA-WITH-AES-128-CBC-SHA            \
 304                 TLS-RSA-WITH-CAMELLIA-128-CBC-SHA       \
 305                 TLS-RSA-WITH-3DES-EDE-CBC-SHA           \
 306                 TLS-RSA-WITH-RC4-128-SHA                \
 307                 TLS-RSA-WITH-RC4-128-MD5                \
 308                 TLS-RSA-WITH-NULL-MD5                   \
 309                 TLS-RSA-WITH-NULL-SHA                   \
 310                 "
 311             G_CIPHERS="$G_CIPHERS                       \
 312                 +DHE-RSA:+AES-128-CBC:+SHA1             \
 313                 +DHE-RSA:+AES-256-CBC:+SHA1             \
 314                 +DHE-RSA:+CAMELLIA-128-CBC:+SHA1        \
 315                 +DHE-RSA:+CAMELLIA-256-CBC:+SHA1        \
 316                 +DHE-RSA:+3DES-CBC:+SHA1                \
 317                 +RSA:+AES-256-CBC:+SHA1                 \
 318                 +RSA:+CAMELLIA-256-CBC:+SHA1            \
 319                 +RSA:+AES-128-CBC:+SHA1                 \
 320                 +RSA:+CAMELLIA-128-CBC:+SHA1            \
 321                 +RSA:+3DES-CBC:+SHA1                    \
 322                 +RSA:+ARCFOUR-128:+SHA1                 \
 323                 +RSA:+ARCFOUR-128:+MD5                  \
 324                 +RSA:+NULL:+MD5                         \
 325                 +RSA:+NULL:+SHA1                        \
 326                 "
 327             O_CIPHERS="$O_CIPHERS               \
 328                 DHE-RSA-AES128-SHA              \
 329                 DHE-RSA-AES256-SHA              \
 330                 DHE-RSA-CAMELLIA128-SHA         \
 331                 DHE-RSA-CAMELLIA256-SHA         \
 332                 EDH-RSA-DES-CBC3-SHA            \
 333                 AES256-SHA                      \
 334                 CAMELLIA256-SHA                 \
 335                 AES128-SHA                      \
 336                 CAMELLIA128-SHA                 \
 337                 DES-CBC3-SHA                    \
 338                 RC4-SHA                         \
 339                 RC4-MD5                         \
 340                 NULL-MD5                        \
 341                 NULL-SHA                        \
 342                 "
 343             if [ `minor_ver "$MODE"` -gt 0 ]
 344             then
 345                 M_CIPHERS="$M_CIPHERS                       \
 346                     TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA      \
 347                     TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA      \
 348                     TLS-ECDHE-RSA-WITH-3DES-EDE-CBC-SHA     \
 349                     TLS-ECDHE-RSA-WITH-RC4-128-SHA          \
 350                     TLS-ECDHE-RSA-WITH-NULL-SHA             \
 351                     "
 352                 G_CIPHERS="$G_CIPHERS                       \
 353                     +ECDHE-RSA:+AES-128-CBC:+SHA1           \
 354                     +ECDHE-RSA:+AES-256-CBC:+SHA1           \
 355                     +ECDHE-RSA:+3DES-CBC:+SHA1              \
 356                     +ECDHE-RSA:+ARCFOUR-128:+SHA1           \
 357                     +ECDHE-RSA:+NULL:+SHA1                  \
 358                     "
 359                 O_CIPHERS="$O_CIPHERS               \
 360                     ECDHE-RSA-AES256-SHA            \
 361                     ECDHE-RSA-AES128-SHA            \
 362                     ECDHE-RSA-DES-CBC3-SHA          \
 363                     ECDHE-RSA-RC4-SHA               \
 364                     ECDHE-RSA-NULL-SHA              \
 365                     "
 366             fi
 367             if [ `minor_ver "$MODE"` -ge 3 ]
 368             then
 369                 M_CIPHERS="$M_CIPHERS                       \
 370                     TLS-RSA-WITH-AES-128-CBC-SHA256         \
 371                     TLS-DHE-RSA-WITH-AES-128-CBC-SHA256     \
 372                     TLS-RSA-WITH-AES-256-CBC-SHA256         \
 373                     TLS-DHE-RSA-WITH-AES-256-CBC-SHA256     \
 374                     TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256   \
 375                     TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384   \
 376                     TLS-RSA-WITH-AES-128-GCM-SHA256         \
 377                     TLS-RSA-WITH-AES-256-GCM-SHA384         \
 378                     TLS-DHE-RSA-WITH-AES-128-GCM-SHA256     \
 379                     TLS-DHE-RSA-WITH-AES-256-GCM-SHA384     \
 380                     TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256   \
 381                     TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384   \
 382                     "
 383                 G_CIPHERS="$G_CIPHERS                       \
 384                     +RSA:+AES-128-CBC:+SHA256               \
 385                     +DHE-RSA:+AES-128-CBC:+SHA256           \
 386                     +RSA:+AES-256-CBC:+SHA256               \
 387                     +DHE-RSA:+AES-256-CBC:+SHA256           \
 388                     +ECDHE-RSA:+AES-128-CBC:+SHA256         \
 389                     +ECDHE-RSA:+AES-256-CBC:+SHA384         \
 390                     +RSA:+AES-128-GCM:+AEAD                 \
 391                     +RSA:+AES-256-GCM:+AEAD                 \
 392                     +DHE-RSA:+AES-128-GCM:+AEAD             \
 393                     +DHE-RSA:+AES-256-GCM:+AEAD             \
 394                     +ECDHE-RSA:+AES-128-GCM:+AEAD           \
 395                     +ECDHE-RSA:+AES-256-GCM:+AEAD           \
 396                     "
 397                 O_CIPHERS="$O_CIPHERS           \
 398                     NULL-SHA256                 \
 399                     AES128-SHA256               \
 400                     DHE-RSA-AES128-SHA256       \
 401                     AES256-SHA256               \
 402                     DHE-RSA-AES256-SHA256       \
 403                     ECDHE-RSA-AES128-SHA256     \
 404                     ECDHE-RSA-AES256-SHA384     \
 405                     AES128-GCM-SHA256           \
 406                     DHE-RSA-AES128-GCM-SHA256   \
 407                     AES256-GCM-SHA384           \
 408                     DHE-RSA-AES256-GCM-SHA384   \
 409                     ECDHE-RSA-AES128-GCM-SHA256 \
 410                     ECDHE-RSA-AES256-GCM-SHA384 \
 411                     "
 412             fi
 413             ;;
 414
 415         "PSK")
 416             M_CIPHERS="$M_CIPHERS                       \
 417                 TLS-PSK-WITH-RC4-128-SHA                \
 418                 TLS-PSK-WITH-3DES-EDE-CBC-SHA           \
 419                 TLS-PSK-WITH-AES-128-CBC-SHA            \
 420                 TLS-PSK-WITH-AES-256-CBC-SHA            \
 421                 "
 422             G_CIPHERS="$G_CIPHERS                       \
 423                 +PSK:+ARCFOUR-128:+SHA1                 \
 424                 +PSK:+3DES-CBC:+SHA1                    \
 425                 +PSK:+AES-128-CBC:+SHA1                 \
 426                 +PSK:+AES-256-CBC:+SHA1                 \
 427                 "
 428             O_CIPHERS="$O_CIPHERS               \
 429                 PSK-RC4-SHA                     \
 430                 PSK-3DES-EDE-CBC-SHA            \
 431                 PSK-AES128-CBC-SHA              \
 432                 PSK-AES256-CBC-SHA              \
 433                 "
 434             ;;
 435     esac
 436 }
 437
 438 # Ciphersuites usable only with Mbed TLS and OpenSSL
 439 # Each ciphersuite should appear two times, once with its OpenSSL name, once
 440 # with its Mbed TLS name.
 441 #
 442 # NOTE: for some reason RSA-PSK doesn't work with OpenSSL,
 443 # so RSA-PSK ciphersuites need to go in other sections, see
 444 # https://github.com/ARMmbed/mbedtls/issues/1419
 445 #
 446 # ChachaPoly suites are here rather than in "common", as they were added in
 447 # GnuTLS in 3.5.0 and the CI only has 3.4.x so far.
 448 add_openssl_ciphersuites()
 449 {
 450     case $TYPE in
 451
 452         "ECDSA")
 453             if [ `minor_ver "$MODE"` -gt 0 ]
 454             then
 455                 M_CIPHERS="$M_CIPHERS                       \
 456                     TLS-ECDH-ECDSA-WITH-NULL-SHA            \
 457                     TLS-ECDH-ECDSA-WITH-RC4-128-SHA         \
 458                     TLS-ECDH-ECDSA-WITH-3DES-EDE-CBC-SHA    \
 459                     TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA     \
 460                     TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA     \
 461                     "
 462                 O_CIPHERS="$O_CIPHERS               \
 463                     ECDH-ECDSA-NULL-SHA             \
 464                     ECDH-ECDSA-RC4-SHA              \
 465                     ECDH-ECDSA-DES-CBC3-SHA         \
 466                     ECDH-ECDSA-AES128-SHA           \
 467                     ECDH-ECDSA-AES256-SHA           \
 468                     "
 469             fi
 470             if [ `minor_ver "$MODE"` -ge 3 ]
 471             then
 472                 M_CIPHERS="$M_CIPHERS                               \
 473                     TLS-ECDH-ECDSA-WITH-AES-128-CBC-SHA256          \
 474                     TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA384          \
 475                     TLS-ECDH-ECDSA-WITH-AES-128-GCM-SHA256          \
 476                     TLS-ECDH-ECDSA-WITH-AES-256-GCM-SHA384          \
 477                     TLS-ECDHE-ECDSA-WITH-ARIA-256-GCM-SHA384        \
 478                     TLS-ECDHE-ECDSA-WITH-ARIA-128-GCM-SHA256        \
 479                     TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256   \
 480                     "
 481                 O_CIPHERS="$O_CIPHERS               \
 482                     ECDH-ECDSA-AES128-SHA256        \
 483                     ECDH-ECDSA-AES256-SHA384        \
 484                     ECDH-ECDSA-AES128-GCM-SHA256    \
 485                     ECDH-ECDSA-AES256-GCM-SHA384    \
 486                     ECDHE-ECDSA-ARIA256-GCM-SHA384  \
 487                     ECDHE-ECDSA-ARIA128-GCM-SHA256  \
 488                     ECDHE-ECDSA-CHACHA20-POLY1305   \
 489                     "
 490             fi
 491             ;;
 492
 493         "RSA")
 494             M_CIPHERS="$M_CIPHERS                       \
 495                 TLS-RSA-WITH-DES-CBC-SHA                \
 496                 TLS-DHE-RSA-WITH-DES-CBC-SHA            \
 497                 "
 498             O_CIPHERS="$O_CIPHERS               \
 499                 DES-CBC-SHA                     \
 500                 EDH-RSA-DES-CBC-SHA             \
 501                 "
 502             if [ `minor_ver "$MODE"` -ge 3 ]
 503             then
 504                 M_CIPHERS="$M_CIPHERS                               \
 505                     TLS-ECDHE-RSA-WITH-ARIA-256-GCM-SHA384          \
 506                     TLS-DHE-RSA-WITH-ARIA-256-GCM-SHA384            \
 507                     TLS-RSA-WITH-ARIA-256-GCM-SHA384                \
 508                     TLS-ECDHE-RSA-WITH-ARIA-128-GCM-SHA256          \
 509                     TLS-DHE-RSA-WITH-ARIA-128-GCM-SHA256            \
 510                     TLS-RSA-WITH-ARIA-128-GCM-SHA256                \
 511                     TLS-DHE-RSA-WITH-CHACHA20-POLY1305-SHA256       \
 512                     TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256     \
 513                     "
 514                 O_CIPHERS="$O_CIPHERS               \
 515                     ECDHE-ARIA256-GCM-SHA384        \
 516                     DHE-RSA-ARIA256-GCM-SHA384      \
 517                     ARIA256-GCM-SHA384              \
 518                     ECDHE-ARIA128-GCM-SHA256        \
 519                     DHE-RSA-ARIA128-GCM-SHA256      \
 520                     ARIA128-GCM-SHA256              \
 521                     DHE-RSA-CHACHA20-POLY1305       \
 522                     ECDHE-RSA-CHACHA20-POLY1305     \
 523                     "
 524             fi
 525             ;;
 526
 527         "PSK")
 528             if [ `minor_ver "$MODE"` -ge 3 ]
 529             then
 530                 M_CIPHERS="$M_CIPHERS                               \
 531                     TLS-DHE-PSK-WITH-ARIA-256-GCM-SHA384            \
 532                     TLS-DHE-PSK-WITH-ARIA-128-GCM-SHA256            \
 533                     TLS-PSK-WITH-ARIA-256-GCM-SHA384                \
 534                     TLS-PSK-WITH-ARIA-128-GCM-SHA256                \
 535                     TLS-PSK-WITH-CHACHA20-POLY1305-SHA256           \
 536                     TLS-ECDHE-PSK-WITH-CHACHA20-POLY1305-SHA256     \
 537                     TLS-DHE-PSK-WITH-CHACHA20-POLY1305-SHA256       \
 538                     "
 539                 O_CIPHERS="$O_CIPHERS               \
 540                     DHE-PSK-ARIA256-GCM-SHA384      \
 541                     DHE-PSK-ARIA128-GCM-SHA256      \
 542                     PSK-ARIA256-GCM-SHA384          \
 543                     PSK-ARIA128-GCM-SHA256          \
 544                     DHE-PSK-CHACHA20-POLY1305       \
 545                     ECDHE-PSK-CHACHA20-POLY1305     \
 546                     PSK-CHACHA20-POLY1305           \
 547                     "
 548             fi
 549             ;;
 550     esac
 551 }
 552
 553 # Ciphersuites usable only with Mbed TLS and GnuTLS
 554 # Each ciphersuite should appear two times, once with its GnuTLS name, once
 555 # with its Mbed TLS name.
 556 add_gnutls_ciphersuites()
 557 {
 558     case $TYPE in
 559
 560         "ECDSA")
 561             if [ `minor_ver "$MODE"` -ge 3 ]
 562             then
 563                 M_CIPHERS="$M_CIPHERS                               \
 564                     TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-CBC-SHA256    \
 565                     TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-CBC-SHA384    \
 566                     TLS-ECDHE-ECDSA-WITH-CAMELLIA-128-GCM-SHA256    \
 567                     TLS-ECDHE-ECDSA-WITH-CAMELLIA-256-GCM-SHA384    \
 568                     TLS-ECDHE-ECDSA-WITH-AES-128-CCM                \
 569                     TLS-ECDHE-ECDSA-WITH-AES-256-CCM                \
 570                     TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8              \
 571                     TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8              \
 572                    "
 573                 G_CIPHERS="$G_CIPHERS                               \
 574                     +ECDHE-ECDSA:+CAMELLIA-128-CBC:+SHA256          \
 575                     +ECDHE-ECDSA:+CAMELLIA-256-CBC:+SHA384          \
 576                     +ECDHE-ECDSA:+CAMELLIA-128-GCM:+AEAD            \
 577                     +ECDHE-ECDSA:+CAMELLIA-256-GCM:+AEAD            \
 578                     +ECDHE-ECDSA:+AES-128-CCM:+AEAD                 \
 579                     +ECDHE-ECDSA:+AES-256-CCM:+AEAD                 \
 580                     +ECDHE-ECDSA:+AES-128-CCM-8:+AEAD               \
 581                     +ECDHE-ECDSA:+AES-256-CCM-8:+AEAD               \
 582                    "
 583             fi
 584             ;;
 585
 586         "RSA")
 587             if [ `minor_ver "$MODE"` -gt 0 ]
 588             then
 589                 M_CIPHERS="$M_CIPHERS                           \
 590                     TLS-RSA-WITH-NULL-SHA256                    \
 591                     "
 592                 G_CIPHERS="$G_CIPHERS                           \
 593                     +RSA:+NULL:+SHA256                          \
 594                     "
 595             fi
 596             if [ `minor_ver "$MODE"` -ge 3 ]
 597             then
 598                 M_CIPHERS="$M_CIPHERS                           \
 599                     TLS-ECDHE-RSA-WITH-CAMELLIA-128-CBC-SHA256  \
 600                     TLS-ECDHE-RSA-WITH-CAMELLIA-256-CBC-SHA384  \
 601                     TLS-RSA-WITH-CAMELLIA-128-CBC-SHA256        \
 602                     TLS-RSA-WITH-CAMELLIA-256-CBC-SHA256        \
 603                     TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA256    \
 604                     TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA256    \
 605                     TLS-ECDHE-RSA-WITH-CAMELLIA-128-GCM-SHA256  \
 606                     TLS-ECDHE-RSA-WITH-CAMELLIA-256-GCM-SHA384  \
 607                     TLS-DHE-RSA-WITH-CAMELLIA-128-GCM-SHA256    \
 608                     TLS-DHE-RSA-WITH-CAMELLIA-256-GCM-SHA384    \
 609                     TLS-RSA-WITH-CAMELLIA-128-GCM-SHA256        \
 610                     TLS-RSA-WITH-CAMELLIA-256-GCM-SHA384        \
 611                     TLS-RSA-WITH-AES-128-CCM                    \
 612                     TLS-RSA-WITH-AES-256-CCM                    \
 613                     TLS-DHE-RSA-WITH-AES-128-CCM                \
 614                     TLS-DHE-RSA-WITH-AES-256-CCM                \
 615                     TLS-RSA-WITH-AES-128-CCM-8                  \
 616                     TLS-RSA-WITH-AES-256-CCM-8                  \
 617                     TLS-DHE-RSA-WITH-AES-128-CCM-8              \
 618                     TLS-DHE-RSA-WITH-AES-256-CCM-8              \
 619                     "
 620                 G_CIPHERS="$G_CIPHERS                           \
 621                     +ECDHE-RSA:+CAMELLIA-128-CBC:+SHA256        \
 622                     +ECDHE-RSA:+CAMELLIA-256-CBC:+SHA384        \
 623                     +RSA:+CAMELLIA-128-CBC:+SHA256              \
 624                     +RSA:+CAMELLIA-256-CBC:+SHA256              \
 625                     +DHE-RSA:+CAMELLIA-128-CBC:+SHA256          \
 626                     +DHE-RSA:+CAMELLIA-256-CBC:+SHA256          \
 627                     +ECDHE-RSA:+CAMELLIA-128-GCM:+AEAD          \
 628                     +ECDHE-RSA:+CAMELLIA-256-GCM:+AEAD          \
 629                     +DHE-RSA:+CAMELLIA-128-GCM:+AEAD            \
 630                     +DHE-RSA:+CAMELLIA-256-GCM:+AEAD            \
 631                     +RSA:+CAMELLIA-128-GCM:+AEAD                \
 632                     +RSA:+CAMELLIA-256-GCM:+AEAD                \
 633                     +RSA:+AES-128-CCM:+AEAD                     \
 634                     +RSA:+AES-256-CCM:+AEAD                     \
 635                     +RSA:+AES-128-CCM-8:+AEAD                   \
 636                     +RSA:+AES-256-CCM-8:+AEAD                   \
 637                     +DHE-RSA:+AES-128-CCM:+AEAD                 \
 638                     +DHE-RSA:+AES-256-CCM:+AEAD                 \
 639                     +DHE-RSA:+AES-128-CCM-8:+AEAD               \
 640                     +DHE-RSA:+AES-256-CCM-8:+AEAD               \
 641                     "
 642             fi
 643             ;;
 644
 645         "PSK")
 646             M_CIPHERS="$M_CIPHERS                               \
 647                 TLS-DHE-PSK-WITH-3DES-EDE-CBC-SHA               \
 648                 TLS-DHE-PSK-WITH-AES-128-CBC-SHA                \
 649                 TLS-DHE-PSK-WITH-AES-256-CBC-SHA                \
 650                 TLS-DHE-PSK-WITH-RC4-128-SHA                    \
 651                 "
 652             G_CIPHERS="$G_CIPHERS                               \
 653                 +DHE-PSK:+3DES-CBC:+SHA1                        \
 654                 +DHE-PSK:+AES-128-CBC:+SHA1                     \
 655                 +DHE-PSK:+AES-256-CBC:+SHA1                     \
 656                 +DHE-PSK:+ARCFOUR-128:+SHA1                     \
 657                 "
 658             if [ `minor_ver "$MODE"` -gt 0 ]
 659             then
 660                 M_CIPHERS="$M_CIPHERS                           \
 661                     TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA          \
 662                     TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA          \
 663                     TLS-ECDHE-PSK-WITH-3DES-EDE-CBC-SHA         \
 664                     TLS-ECDHE-PSK-WITH-RC4-128-SHA              \
 665                     TLS-RSA-PSK-WITH-3DES-EDE-CBC-SHA           \
 666                     TLS-RSA-PSK-WITH-AES-256-CBC-SHA            \
 667                     TLS-RSA-PSK-WITH-AES-128-CBC-SHA            \
 668                     TLS-RSA-PSK-WITH-RC4-128-SHA                \
 669                     "
 670                 G_CIPHERS="$G_CIPHERS                           \
 671                     +ECDHE-PSK:+3DES-CBC:+SHA1                  \
 672                     +ECDHE-PSK:+AES-128-CBC:+SHA1               \
 673                     +ECDHE-PSK:+AES-256-CBC:+SHA1               \
 674                     +ECDHE-PSK:+ARCFOUR-128:+SHA1               \
 675                     +RSA-PSK:+3DES-CBC:+SHA1                    \
 676                     +RSA-PSK:+AES-256-CBC:+SHA1                 \
 677                     +RSA-PSK:+AES-128-CBC:+SHA1                 \
 678                     +RSA-PSK:+ARCFOUR-128:+SHA1                 \
 679                     "
 680             fi
 681             if [ `minor_ver "$MODE"` -ge 3 ]
 682             then
 683                 M_CIPHERS="$M_CIPHERS                           \
 684                     TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384       \
 685                     TLS-ECDHE-PSK-WITH-CAMELLIA-256-CBC-SHA384  \
 686                     TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256       \
 687                     TLS-ECDHE-PSK-WITH-CAMELLIA-128-CBC-SHA256  \
 688                     TLS-ECDHE-PSK-WITH-NULL-SHA384              \
 689                     TLS-ECDHE-PSK-WITH-NULL-SHA256              \
 690                     TLS-PSK-WITH-AES-128-CBC-SHA256             \
 691                     TLS-PSK-WITH-AES-256-CBC-SHA384             \
 692                     TLS-DHE-PSK-WITH-AES-128-CBC-SHA256         \
 693                     TLS-DHE-PSK-WITH-AES-256-CBC-SHA384         \
 694                     TLS-PSK-WITH-NULL-SHA256                    \
 695                     TLS-PSK-WITH-NULL-SHA384                    \
 696                     TLS-DHE-PSK-WITH-NULL-SHA256                \
 697                     TLS-DHE-PSK-WITH-NULL-SHA384                \
 698                     TLS-RSA-PSK-WITH-AES-256-CBC-SHA384         \
 699                     TLS-RSA-PSK-WITH-AES-128-CBC-SHA256         \
 700                     TLS-RSA-PSK-WITH-NULL-SHA256                \
 701                     TLS-RSA-PSK-WITH-NULL-SHA384                \
 702                     TLS-DHE-PSK-WITH-CAMELLIA-128-CBC-SHA256    \
 703                     TLS-DHE-PSK-WITH-CAMELLIA-256-CBC-SHA384    \
 704                     TLS-PSK-WITH-CAMELLIA-128-CBC-SHA256        \
 705                     TLS-PSK-WITH-CAMELLIA-256-CBC-SHA384        \
 706                     TLS-RSA-PSK-WITH-CAMELLIA-256-CBC-SHA384    \
 707                     TLS-RSA-PSK-WITH-CAMELLIA-128-CBC-SHA256    \
 708                     TLS-PSK-WITH-AES-128-GCM-SHA256             \
 709                     TLS-PSK-WITH-AES-256-GCM-SHA384             \
 710                     TLS-DHE-PSK-WITH-AES-128-GCM-SHA256         \
 711                     TLS-DHE-PSK-WITH-AES-256-GCM-SHA384         \
 712                     TLS-PSK-WITH-AES-128-CCM                    \
 713                     TLS-PSK-WITH-AES-256-CCM                    \
 714                     TLS-DHE-PSK-WITH-AES-128-CCM                \
 715                     TLS-DHE-PSK-WITH-AES-256-CCM                \
 716                     TLS-PSK-WITH-AES-128-CCM-8                  \
 717                     TLS-PSK-WITH-AES-256-CCM-8                  \
 718                     TLS-DHE-PSK-WITH-AES-128-CCM-8              \
 719                     TLS-DHE-PSK-WITH-AES-256-CCM-8              \
 720                     TLS-RSA-PSK-WITH-CAMELLIA-128-GCM-SHA256    \
 721                     TLS-RSA-PSK-WITH-CAMELLIA-256-GCM-SHA384    \
 722                     TLS-PSK-WITH-CAMELLIA-128-GCM-SHA256        \
 723                     TLS-PSK-WITH-CAMELLIA-256-GCM-SHA384        \
 724                     TLS-DHE-PSK-WITH-CAMELLIA-128-GCM-SHA256    \
 725                     TLS-DHE-PSK-WITH-CAMELLIA-256-GCM-SHA384    \
 726                     TLS-RSA-PSK-WITH-AES-256-GCM-SHA384         \
 727                     TLS-RSA-PSK-WITH-AES-128-GCM-SHA256         \
 728                     "
 729                 G_CIPHERS="$G_CIPHERS                           \
 730                     +ECDHE-PSK:+AES-256-CBC:+SHA384             \
 731                     +ECDHE-PSK:+CAMELLIA-256-CBC:+SHA384        \
 732                     +ECDHE-PSK:+AES-128-CBC:+SHA256             \
 733                     +ECDHE-PSK:+CAMELLIA-128-CBC:+SHA256        \
 734                     +PSK:+AES-128-CBC:+SHA256                   \
 735                     +PSK:+AES-256-CBC:+SHA384                   \
 736                     +DHE-PSK:+AES-128-CBC:+SHA256               \
 737                     +DHE-PSK:+AES-256-CBC:+SHA384               \
 738                     +RSA-PSK:+AES-256-CBC:+SHA384               \
 739                     +RSA-PSK:+AES-128-CBC:+SHA256               \
 740                     +DHE-PSK:+CAMELLIA-128-CBC:+SHA256          \
 741                     +DHE-PSK:+CAMELLIA-256-CBC:+SHA384          \
 742                     +PSK:+CAMELLIA-128-CBC:+SHA256              \
 743                     +PSK:+CAMELLIA-256-CBC:+SHA384              \
 744                     +RSA-PSK:+CAMELLIA-256-CBC:+SHA384          \
 745                     +RSA-PSK:+CAMELLIA-128-CBC:+SHA256          \
 746                     +PSK:+AES-128-GCM:+AEAD                     \
 747                     +PSK:+AES-256-GCM:+AEAD                     \
 748                     +DHE-PSK:+AES-128-GCM:+AEAD                 \
 749                     +DHE-PSK:+AES-256-GCM:+AEAD                 \
 750                     +PSK:+AES-128-CCM:+AEAD                     \
 751                     +PSK:+AES-256-CCM:+AEAD                     \
 752                     +DHE-PSK:+AES-128-CCM:+AEAD                 \
 753                     +DHE-PSK:+AES-256-CCM:+AEAD                 \
 754                     +PSK:+AES-128-CCM-8:+AEAD                   \
 755                     +PSK:+AES-256-CCM-8:+AEAD                   \
 756                     +DHE-PSK:+AES-128-CCM-8:+AEAD               \
 757                     +DHE-PSK:+AES-256-CCM-8:+AEAD               \
 758                     +RSA-PSK:+CAMELLIA-128-GCM:+AEAD            \
 759                     +RSA-PSK:+CAMELLIA-256-GCM:+AEAD            \
 760                     +PSK:+CAMELLIA-128-GCM:+AEAD                \
 761                     +PSK:+CAMELLIA-256-GCM:+AEAD                \
 762                     +DHE-PSK:+CAMELLIA-128-GCM:+AEAD            \
 763                     +DHE-PSK:+CAMELLIA-256-GCM:+AEAD            \
 764                     +RSA-PSK:+AES-256-GCM:+AEAD                 \
 765                     +RSA-PSK:+AES-128-GCM:+AEAD                 \
 766                     +ECDHE-PSK:+NULL:+SHA384                    \
 767                     +ECDHE-PSK:+NULL:+SHA256                    \
 768                     +PSK:+NULL:+SHA256                          \
 769                     +PSK:+NULL:+SHA384                          \
 770                     +DHE-PSK:+NULL:+SHA256                      \
 771                     +DHE-PSK:+NULL:+SHA384                      \
 772                     +RSA-PSK:+NULL:+SHA256                      \
 773                     +RSA-PSK:+NULL:+SHA384                      \
 774                     "
 775             fi
 776             ;;
 777     esac
 778 }
 779
 780 # Ciphersuites usable only with Mbed TLS (not currently supported by another
 781 # peer usable in this script). This provide only very rudimentaty testing, as
 782 # this is not interop testing, but it's better than nothing.
 783 add_mbedtls_ciphersuites()
 784 {
 785     case $TYPE in
 786
 787         "ECDSA")
 788             if [ `minor_ver "$MODE"` -gt 0 ]
 789             then
 790                 M_CIPHERS="$M_CIPHERS                               \
 791                     TLS-ECDH-ECDSA-WITH-CAMELLIA-128-CBC-SHA256     \
 792                     TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384     \
 793                     "
 794             fi
 795             if [ `minor_ver "$MODE"` -ge 3 ]
 796             then
 797                 M_CIPHERS="$M_CIPHERS                               \
 798                     TLS-ECDH-ECDSA-WITH-CAMELLIA-128-GCM-SHA256     \
 799                     TLS-ECDH-ECDSA-WITH-CAMELLIA-256-GCM-SHA384     \
 800                     TLS-ECDHE-ECDSA-WITH-ARIA-256-CBC-SHA384        \
 801                     TLS-ECDHE-ECDSA-WITH-ARIA-128-CBC-SHA256        \
 802                     TLS-ECDH-ECDSA-WITH-ARIA-256-GCM-SHA384         \
 803                     TLS-ECDH-ECDSA-WITH-ARIA-128-GCM-SHA256         \
 804                     TLS-ECDH-ECDSA-WITH-ARIA-256-CBC-SHA384         \
 805                     TLS-ECDH-ECDSA-WITH-ARIA-128-CBC-SHA256         \
 806                     "
 807             fi
 808             ;;
 809
 810         "RSA")
 811             if [ `minor_ver "$MODE"` -ge 3 ]
 812             then
 813                 M_CIPHERS="$M_CIPHERS                               \
 814                     TLS-ECDHE-RSA-WITH-ARIA-256-CBC-SHA384          \
 815                     TLS-DHE-RSA-WITH-ARIA-256-CBC-SHA384            \
 816                     TLS-ECDHE-RSA-WITH-ARIA-128-CBC-SHA256          \
 817                     TLS-DHE-RSA-WITH-ARIA-128-CBC-SHA256            \
 818                     TLS-RSA-WITH-ARIA-256-CBC-SHA384                \
 819                     TLS-RSA-WITH-ARIA-128-CBC-SHA256                \
 820                     "
 821             fi
 822             ;;
 823
 824         "PSK")
 825             # *PSK-NULL-SHA suites supported by GnuTLS 3.3.5 but not 3.2.15
 826             M_CIPHERS="$M_CIPHERS                        \
 827                 TLS-PSK-WITH-NULL-SHA                    \
 828                 TLS-DHE-PSK-WITH-NULL-SHA                \
 829                 "
 830             if [ `minor_ver "$MODE"` -gt 0 ]
 831             then
 832                 M_CIPHERS="$M_CIPHERS                    \
 833                     TLS-ECDHE-PSK-WITH-NULL-SHA          \
 834                     TLS-RSA-PSK-WITH-NULL-SHA            \
 835                     "
 836             fi
 837             if [ `minor_ver "$MODE"` -ge 3 ]
 838             then
 839                 M_CIPHERS="$M_CIPHERS                               \
 840                     TLS-RSA-PSK-WITH-ARIA-256-CBC-SHA384            \
 841                     TLS-RSA-PSK-WITH-ARIA-128-CBC-SHA256            \
 842                     TLS-PSK-WITH-ARIA-256-CBC-SHA384                \
 843                     TLS-PSK-WITH-ARIA-128-CBC-SHA256                \
 844                     TLS-RSA-PSK-WITH-ARIA-256-GCM-SHA384            \
 845                     TLS-RSA-PSK-WITH-ARIA-128-GCM-SHA256            \
 846                     TLS-ECDHE-PSK-WITH-ARIA-256-CBC-SHA384          \
 847                     TLS-ECDHE-PSK-WITH-ARIA-128-CBC-SHA256          \
 848                     TLS-DHE-PSK-WITH-ARIA-256-CBC-SHA384            \
 849                     TLS-DHE-PSK-WITH-ARIA-128-CBC-SHA256            \
 850                     TLS-RSA-PSK-WITH-CHACHA20-POLY1305-SHA256       \
 851                     "
 852             fi
 853             ;;
 854     esac
 855 }
 856
 857 setup_arguments()
 858 {
 859     G_MODE=""
 860     case "$MODE" in
 861         "ssl3")
 862             G_PRIO_MODE="+VERS-SSL3.0"
 863             ;;
 864         "tls1")
 865             G_PRIO_MODE="+VERS-TLS1.0"
 866             ;;
 867         "tls1_1")
 868             G_PRIO_MODE="+VERS-TLS1.1"
 869             ;;
 870         "tls1_2")
 871             G_PRIO_MODE="+VERS-TLS1.2"
 872             ;;
 873         "dtls1")
 874             G_PRIO_MODE="+VERS-DTLS1.0"
 875             G_MODE="-u"
 876             ;;
 877         "dtls1_2")
 878             G_PRIO_MODE="+VERS-DTLS1.2"
 879             G_MODE="-u"
 880             ;;
 881         *)
 882             echo "error: invalid mode: $MODE" >&2
 883             exit 1;
 884     esac
 885
 886     # GnuTLS < 3.4 will choke if we try to allow CCM-8
 887     if [ -z "${GNUTLS_MINOR_LT_FOUR-}" ]; then
 888         G_PRIO_CCM="+AES-256-CCM-8:+AES-128-CCM-8:"
 889     else
 890         G_PRIO_CCM=""
 891     fi
 892
 893     M_SERVER_ARGS="server_port=$PORT server_addr=0.0.0.0 force_version=$MODE arc4=1"
 894     O_SERVER_ARGS="-accept $PORT -cipher NULL,ALL -$MODE -dhparam data_files/dhparams.pem"
 895     G_SERVER_ARGS="-p $PORT --http $G_MODE"
 896     G_SERVER_PRIO="NORMAL:${G_PRIO_CCM}+ARCFOUR-128:+NULL:+MD5:+PSK:+DHE-PSK:+ECDHE-PSK:+RSA-PSK:-VERS-TLS-ALL:$G_PRIO_MODE"
 897
 898     # with OpenSSL 1.0.1h, -www, -WWW and -HTTP break DTLS handshakes
 899     if is_dtls "$MODE"; then
 900         O_SERVER_ARGS="$O_SERVER_ARGS"
 901     else
 902         O_SERVER_ARGS="$O_SERVER_ARGS -www"
 903     fi
 904
 905     M_CLIENT_ARGS="server_port=$PORT server_addr=127.0.0.1 force_version=$MODE"
 906     O_CLIENT_ARGS="-connect localhost:$PORT -$MODE"
 907     G_CLIENT_ARGS="-p $PORT --debug 3 $G_MODE"
 908     G_CLIENT_PRIO="NONE:$G_PRIO_MODE:+COMP-NULL:+CURVE-ALL:+SIGN-ALL"
 909
 910     if [ "X$VERIFY" = "XYES" ];
 911     then
 912         M_SERVER_ARGS="$M_SERVER_ARGS ca_file=data_files/test-ca_cat12.crt auth_mode=required"
 913         O_SERVER_ARGS="$O_SERVER_ARGS -CAfile data_files/test-ca_cat12.crt -Verify 10"
 914         G_SERVER_ARGS="$G_SERVER_ARGS --x509cafile data_files/test-ca_cat12.crt --require-client-cert"
 915
 916         M_CLIENT_ARGS="$M_CLIENT_ARGS ca_file=data_files/test-ca_cat12.crt auth_mode=required"
 917         O_CLIENT_ARGS="$O_CLIENT_ARGS -CAfile data_files/test-ca_cat12.crt -verify 10"
 918         G_CLIENT_ARGS="$G_CLIENT_ARGS --x509cafile data_files/test-ca_cat12.crt"
 919     else
 920         # don't request a client cert at all
 921         M_SERVER_ARGS="$M_SERVER_ARGS ca_file=none auth_mode=none"
 922         G_SERVER_ARGS="$G_SERVER_ARGS --disable-client-cert"
 923
 924         M_CLIENT_ARGS="$M_CLIENT_ARGS ca_file=none auth_mode=none"
 925         O_CLIENT_ARGS="$O_CLIENT_ARGS"
 926         G_CLIENT_ARGS="$G_CLIENT_ARGS --insecure"
 927     fi
 928
 929     case $TYPE in
 930         "ECDSA")
 931             M_SERVER_ARGS="$M_SERVER_ARGS crt_file=data_files/server5.crt key_file=data_files/server5.key"
 932             O_SERVER_ARGS="$O_SERVER_ARGS -cert data_files/server5.crt -key data_files/server5.key"
 933             G_SERVER_ARGS="$G_SERVER_ARGS --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
 934
 935             if [ "X$VERIFY" = "XYES" ]; then
 936                 M_CLIENT_ARGS="$M_CLIENT_ARGS crt_file=data_files/server6.crt key_file=data_files/server6.key"
 937                 O_CLIENT_ARGS="$O_CLIENT_ARGS -cert data_files/server6.crt -key data_files/server6.key"
 938                 G_CLIENT_ARGS="$G_CLIENT_ARGS --x509certfile data_files/server6.crt --x509keyfile data_files/server6.key"
 939             else
 940                 M_CLIENT_ARGS="$M_CLIENT_ARGS crt_file=none key_file=none"
 941             fi
 942             ;;
 943
 944         "RSA")
 945             M_SERVER_ARGS="$M_SERVER_ARGS crt_file=data_files/server2.crt key_file=data_files/server2.key"
 946             O_SERVER_ARGS="$O_SERVER_ARGS -cert data_files/server2.crt -key data_files/server2.key"
 947             G_SERVER_ARGS="$G_SERVER_ARGS --x509certfile data_files/server2.crt --x509keyfile data_files/server2.key"
 948
 949             if [ "X$VERIFY" = "XYES" ]; then
 950                 M_CLIENT_ARGS="$M_CLIENT_ARGS crt_file=data_files/server1.crt key_file=data_files/server1.key"
 951                 O_CLIENT_ARGS="$O_CLIENT_ARGS -cert data_files/server1.crt -key data_files/server1.key"
 952                 G_CLIENT_ARGS="$G_CLIENT_ARGS --x509certfile data_files/server1.crt --x509keyfile data_files/server1.key"
 953             else
 954                 M_CLIENT_ARGS="$M_CLIENT_ARGS crt_file=none key_file=none"
 955             fi
 956
 957             # Allow SHA-1. It's disabled by default for security reasons but
 958             # our tests still use certificates signed with it.
 959             M_SERVER_ARGS="$M_SERVER_ARGS allow_sha1=1"
 960             M_CLIENT_ARGS="$M_CLIENT_ARGS allow_sha1=1"
 961             ;;
 962
 963         "PSK")
 964             # give RSA-PSK-capable server a RSA cert
 965             # (should be a separate type, but harder to close with openssl)
 966             M_SERVER_ARGS="$M_SERVER_ARGS psk=6162636465666768696a6b6c6d6e6f70 ca_file=none crt_file=data_files/server2.crt key_file=data_files/server2.key"
 967             O_SERVER_ARGS="$O_SERVER_ARGS -psk 6162636465666768696a6b6c6d6e6f70 -nocert"
 968             G_SERVER_ARGS="$G_SERVER_ARGS --x509certfile data_files/server2.crt --x509keyfile data_files/server2.key --pskpasswd data_files/passwd.psk"
 969
 970             M_CLIENT_ARGS="$M_CLIENT_ARGS psk=6162636465666768696a6b6c6d6e6f70 crt_file=none key_file=none"
 971             O_CLIENT_ARGS="$O_CLIENT_ARGS -psk 6162636465666768696a6b6c6d6e6f70"
 972             G_CLIENT_ARGS="$G_CLIENT_ARGS --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70"
 973
 974             # Allow SHA-1. It's disabled by default for security reasons but
 975             # our tests still use certificates signed with it.
 976             M_SERVER_ARGS="$M_SERVER_ARGS allow_sha1=1"
 977             M_CLIENT_ARGS="$M_CLIENT_ARGS allow_sha1=1"
 978             ;;
 979     esac
 980 }
 981
 982 # is_mbedtls <cmd_line>
 983 is_mbedtls() {
 984     echo "$1" | grep 'ssl_server2\|ssl_client2' > /dev/null
 985 }
 986
 987 # has_mem_err <log_file_name>
 988 has_mem_err() {
 989     if ( grep -F 'All heap blocks were freed -- no leaks are possible' "$1" &&
 990          grep -F 'ERROR SUMMARY: 0 errors from 0 contexts' "$1" ) > /dev/null
 991     then
 992         return 1 # false: does not have errors
 993     else
 994         return 0 # true: has errors
 995     fi
 996 }
 997
 998 # Wait for process $2 to be listening on port $1
 999 if type lsof >/dev/null 2>/dev/null; then
1000     wait_server_start() {
1001         START_TIME=$(date +%s)
1002         if is_dtls "$MODE"; then
1003             proto=UDP
1004         else
1005             proto=TCP
1006         fi
1007         while ! lsof -a -n -b -i "$proto:$1" -p "$2" >/dev/null 2>/dev/null; do
1008               if [ $(( $(date +%s) - $START_TIME )) -gt $DOG_DELAY ]; then
1009                   echo "SERVERSTART TIMEOUT"
1010                   echo "SERVERSTART TIMEOUT" >> $SRV_OUT
1011                   break
1012               fi
1013               # Linux and *BSD support decimal arguments to sleep. On other
1014               # OSes this may be a tight loop.
1015               sleep 0.1 2>/dev/null || true
1016         done
1017     }
1018 else
1019     echo "Warning: lsof not available, wait_server_start = sleep"
1020     wait_server_start() {
1021         sleep 2
1022     }
1023 fi
1024
1025
1026 # start_server <name>
1027 # also saves name and command
1028 start_server() {
1029     case $1 in
1030         [Oo]pen*)
1031             SERVER_CMD="$OPENSSL_CMD s_server $O_SERVER_ARGS"
1032             ;;
1033         [Gg]nu*)
1034             SERVER_CMD="$GNUTLS_SERV $G_SERVER_ARGS --priority $G_SERVER_PRIO"
1035             ;;
1036         mbed*)
1037             SERVER_CMD="$M_SRV $M_SERVER_ARGS"
1038             if [ "$MEMCHECK" -gt 0 ]; then
1039                 SERVER_CMD="valgrind --leak-check=full $SERVER_CMD"
1040             fi
1041             ;;
1042         *)
1043             echo "error: invalid server name: $1" >&2
1044             exit 1
1045             ;;
1046     esac
1047     SERVER_NAME=$1
1048
1049     log "$SERVER_CMD"
1050     echo "$SERVER_CMD" > $SRV_OUT
1051     # for servers without -www or equivalent
1052     while :; do echo bla; sleep 1; done | $SERVER_CMD >> $SRV_OUT 2>&1 &
1053     PROCESS_ID=$!
1054
1055     wait_server_start "$PORT" "$PROCESS_ID"
1056 }
1057
1058 # terminate the running server
1059 stop_server() {
1060     kill $PROCESS_ID 2>/dev/null
1061     wait $PROCESS_ID 2>/dev/null
1062
1063     if [ "$MEMCHECK" -gt 0 ]; then
1064         if is_mbedtls "$SERVER_CMD" && has_mem_err $SRV_OUT; then
1065             echo "  ! Server had memory errors"
1066             SRVMEM=$(( $SRVMEM + 1 ))
1067             return
1068         fi
1069     fi
1070
1071     rm -f $SRV_OUT
1072 }
1073
1074 # kill the running server (used when killed by signal)
1075 cleanup() {
1076     rm -f $SRV_OUT $CLI_OUT
1077     kill $PROCESS_ID >/dev/null 2>&1
1078     kill $WATCHDOG_PID >/dev/null 2>&1
1079     exit 1
1080 }
1081
1082 # wait for client to terminate and set EXIT
1083 # must be called right after starting the client
1084 wait_client_done() {
1085     CLI_PID=$!
1086
1087     ( sleep "$DOG_DELAY"; echo "TIMEOUT" >> $CLI_OUT; kill $CLI_PID ) &
1088     WATCHDOG_PID=$!
1089
1090     wait $CLI_PID
1091     EXIT=$?
1092
1093     kill $WATCHDOG_PID
1094     wait $WATCHDOG_PID
1095
1096     echo "EXIT: $EXIT" >> $CLI_OUT
1097 }
1098
1099 # run_client <name> <cipher>
1100 run_client() {
1101     # announce what we're going to do
1102     TESTS=$(( $TESTS + 1 ))
1103     VERIF=$(echo $VERIFY | tr '[:upper:]' '[:lower:]')
1104     TITLE="`echo $1 | head -c1`->`echo $SERVER_NAME | head -c1`"
1105     TITLE="$TITLE $MODE,$VERIF $2"
1106     printf "$TITLE "
1107     LEN=$(( 72 - `echo "$TITLE" | wc -c` ))
1108     for i in `seq 1 $LEN`; do printf '.'; done; printf ' '
1109
1110     # should we skip?
1111     if [ "X$SKIP_NEXT" = "XYES" ]; then
1112         SKIP_NEXT="NO"
1113         echo "SKIP"
1114         SKIPPED=$(( $SKIPPED + 1 ))
1115         return
1116     fi
1117
1118     # run the command and interpret result
1119     case $1 in
1120         [Oo]pen*)
1121             CLIENT_CMD="$OPENSSL_CMD s_client $O_CLIENT_ARGS -cipher $2"
1122             log "$CLIENT_CMD"
1123             echo "$CLIENT_CMD" > $CLI_OUT
1124             printf 'GET HTTP/1.0\r\n\r\n' | $CLIENT_CMD >> $CLI_OUT 2>&1 &
1125             wait_client_done
1126
1127             if [ $EXIT -eq 0 ]; then
1128                 RESULT=0
1129             else
1130                 # If the cipher isn't supported...
1131                 if grep 'Cipher is (NONE)' $CLI_OUT >/dev/null; then
1132                     RESULT=1
1133                 else
1134                     RESULT=2
1135                 fi
1136             fi
1137             ;;
1138
1139         [Gg]nu*)
1140             # need to force IPv4 with UDP, but keep localhost for auth
1141             if is_dtls "$MODE"; then
1142                 G_HOST="127.0.0.1"
1143             else
1144                 G_HOST="localhost"
1145             fi
1146             CLIENT_CMD="$GNUTLS_CLI $G_CLIENT_ARGS --priority $G_PRIO_MODE:$2 $G_HOST"
1147             log "$CLIENT_CMD"
1148             echo "$CLIENT_CMD" > $CLI_OUT
1149             printf 'GET HTTP/1.0\r\n\r\n' | $CLIENT_CMD >> $CLI_OUT 2>&1 &
1150             wait_client_done
1151
1152             if [ $EXIT -eq 0 ]; then
1153                 RESULT=0
1154             else
1155                 RESULT=2
1156                 # interpret early failure, with a handshake_failure alert
1157                 # before the server hello, as "no ciphersuite in common"
1158                 if grep -F 'Received alert [40]: Handshake failed' $CLI_OUT; then
1159                     if grep -i 'SERVER HELLO .* was received' $CLI_OUT; then :
1160                     else
1161                         RESULT=1
1162                     fi
1163                 fi >/dev/null
1164             fi
1165             ;;
1166
1167         mbed*)
1168             CLIENT_CMD="$M_CLI $M_CLIENT_ARGS force_ciphersuite=$2"
1169             if [ "$MEMCHECK" -gt 0 ]; then
1170                 CLIENT_CMD="valgrind --leak-check=full $CLIENT_CMD"
1171             fi
1172             log "$CLIENT_CMD"
1173             echo "$CLIENT_CMD" > $CLI_OUT
1174             $CLIENT_CMD >> $CLI_OUT 2>&1 &
1175             wait_client_done
1176
1177             case $EXIT in
1178                 # Success
1179                 "0")    RESULT=0    ;;
1180
1181                 # Ciphersuite not supported
1182                 "2")    RESULT=1    ;;
1183
1184                 # Error
1185                 *)      RESULT=2    ;;
1186             esac
1187
1188             if [ "$MEMCHECK" -gt 0 ]; then
1189                 if is_mbedtls "$CLIENT_CMD" && has_mem_err $CLI_OUT; then
1190                     RESULT=2
1191                 fi
1192             fi
1193
1194             ;;
1195
1196         *)
1197             echo "error: invalid client name: $1" >&2
1198             exit 1
1199             ;;
1200     esac
1201
1202     echo "EXIT: $EXIT" >> $CLI_OUT
1203
1204     # report and count result
1205     case $RESULT in
1206         "0")
1207             echo PASS
1208             ;;
1209         "1")
1210             echo SKIP
1211             SKIPPED=$(( $SKIPPED + 1 ))
1212             ;;
1213         "2")
1214             echo FAIL
1215             cp $SRV_OUT c-srv-${TESTS}.log
1216             cp $CLI_OUT c-cli-${TESTS}.log
1217             echo "  ! outputs saved to c-srv-${TESTS}.log, c-cli-${TESTS}.log"
1218
1219             if [ "X${USER:-}" = Xbuildbot -o "X${LOGNAME:-}" = Xbuildbot -o "${LOG_FAILURE_ON_STDOUT:-0}" != 0 ]; then
1220                 echo "  ! server output:"
1221                 cat c-srv-${TESTS}.log
1222                 echo "  ! ==================================================="
1223                 echo "  ! client output:"
1224                 cat c-cli-${TESTS}.log
1225             fi
1226
1227             FAILED=$(( $FAILED + 1 ))
1228             ;;
1229     esac
1230
1231     rm -f $CLI_OUT
1232 }
1233
1234 #
1235 # MAIN
1236 #
1237
1238 if cd $( dirname $0 ); then :; else
1239     echo "cd $( dirname $0 ) failed" >&2
1240     exit 1
1241 fi
1242
1243 get_options "$@"
1244
1245 # sanity checks, avoid an avalanche of errors
1246 if [ ! -x "$M_SRV" ]; then
1247     echo "Command '$M_SRV' is not an executable file" >&2
1248     exit 1
1249 fi
1250 if [ ! -x "$M_CLI" ]; then
1251     echo "Command '$M_CLI' is not an executable file" >&2
1252     exit 1
1253 fi
1254
1255 if echo "$PEERS" | grep -i openssl > /dev/null; then
1256     if which "$OPENSSL_CMD" >/dev/null 2>&1; then :; else
1257         echo "Command '$OPENSSL_CMD' not found" >&2
1258         exit 1
1259     fi
1260 fi
1261
1262 if echo "$PEERS" | grep -i gnutls > /dev/null; then
1263     for CMD in "$GNUTLS_CLI" "$GNUTLS_SERV"; do
1264         if which "$CMD" >/dev/null 2>&1; then :; else
1265             echo "Command '$CMD' not found" >&2
1266             exit 1
1267         fi
1268     done
1269 fi
1270
1271 for PEER in $PEERS; do
1272     case "$PEER" in
1273         mbed*|[Oo]pen*|[Gg]nu*)
1274             ;;
1275         *)
1276             echo "Unknown peers: $PEER" >&2
1277             exit 1
1278     esac
1279 done
1280
1281 # Pick a "unique" port in the range 10000-19999.
1282 PORT="0000$$"
1283 PORT="1$(echo $PORT | tail -c 5)"
1284
1285 # Also pick a unique name for intermediate files
1286 SRV_OUT="srv_out.$$"
1287 CLI_OUT="cli_out.$$"
1288
1289 # client timeout delay: be more patient with valgrind
1290 if [ "$MEMCHECK" -gt 0 ]; then
1291     DOG_DELAY=30
1292 else
1293     DOG_DELAY=10
1294 fi
1295
1296 SKIP_NEXT="NO"
1297
1298 trap cleanup INT TERM HUP
1299
1300 for VERIFY in $VERIFIES; do
1301     for MODE in $MODES; do
1302         for TYPE in $TYPES; do
1303             for PEER in $PEERS; do
1304
1305             setup_arguments
1306
1307             case "$PEER" in
1308
1309                 [Oo]pen*)
1310
1311                     if test "$OSSL_NO_DTLS" -gt 0 && is_dtls "$MODE"; then
1312                         continue;
1313                     fi
1314
1315                     reset_ciphersuites
1316                     add_common_ciphersuites
1317                     add_openssl_ciphersuites
1318                     filter_ciphersuites
1319
1320                     if [ "X" != "X$M_CIPHERS" ]; then
1321                         start_server "OpenSSL"
1322                         for i in $M_CIPHERS; do
1323                             check_openssl_server_bug $i
1324                             run_client mbedTLS $i
1325                         done
1326                         stop_server
1327                     fi
1328
1329                     if [ "X" != "X$O_CIPHERS" ]; then
1330                         start_server "mbedTLS"
1331                         for i in $O_CIPHERS; do
1332                             run_client OpenSSL $i
1333                         done
1334                         stop_server
1335                     fi
1336
1337                     ;;
1338
1339                 [Gg]nu*)
1340
1341                     reset_ciphersuites
1342                     add_common_ciphersuites
1343                     add_gnutls_ciphersuites
1344                     filter_ciphersuites
1345
1346                     if [ "X" != "X$M_CIPHERS" ]; then
1347                         start_server "GnuTLS"
1348                         for i in $M_CIPHERS; do
1349                             run_client mbedTLS $i
1350                         done
1351                         stop_server
1352                     fi
1353
1354                     if [ "X" != "X$G_CIPHERS" ]; then
1355                         start_server "mbedTLS"
1356                         for i in $G_CIPHERS; do
1357                             run_client GnuTLS $i
1358                         done
1359                         stop_server
1360                     fi
1361
1362                     ;;
1363
1364                 mbed*)
1365
1366                     reset_ciphersuites
1367                     add_common_ciphersuites
1368                     add_openssl_ciphersuites
1369                     add_gnutls_ciphersuites
1370                     add_mbedtls_ciphersuites
1371                     filter_ciphersuites
1372
1373                     if [ "X" != "X$M_CIPHERS" ]; then
1374                         start_server "mbedTLS"
1375                         for i in $M_CIPHERS; do
1376                             run_client mbedTLS $i
1377                         done
1378                         stop_server
1379                     fi
1380
1381                     ;;
1382
1383                 *)
1384                     echo "Unknown peer: $PEER" >&2
1385                     exit 1
1386                     ;;
1387
1388                 esac
1389
1390             done
1391         done
1392     done
1393 done
1394
1395 echo "------------------------------------------------------------------------"
1396
1397 if [ $FAILED -ne 0 -o $SRVMEM -ne 0 ];
1398 then
1399     printf "FAILED"
1400 else
1401     printf "PASSED"
1402 fi
1403
1404 if [ "$MEMCHECK" -gt 0 ]; then
1405     MEMREPORT=", $SRVMEM server memory errors"
1406 else
1407     MEMREPORT=""
1408 fi
1409
1410 PASSED=$(( $TESTS - $FAILED ))
1411 echo " ($PASSED / $TESTS tests ($SKIPPED skipped$MEMREPORT))"
1412
1413 FAILED=$(( $FAILED + $SRVMEM ))
1414 exit $FAILED