summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSimon Josefsson <simon@josefsson.org>2010-06-07 15:15:28 +0200
committerSimon Josefsson <simon@josefsson.org>2010-06-07 15:15:28 +0200
commitbfe6ede9843c0ce0029337730b8ab3754049f6f2 (patch)
treeefd2c71f7e4fce3f68376e7d6f49168fac007794
parent03249cd537c0b5697af8781b088dee412a80d908 (diff)
downloadgnutls-bfe6ede9843c0ce0029337730b8ab3754049f6f2.tar.gz
Improve safe renegotiation README.
-rw-r--r--tests/safe-renegotiation/README60
1 files changed, 52 insertions, 8 deletions
diff --git a/tests/safe-renegotiation/README b/tests/safe-renegotiation/README
index 14c4406f93..b98a75d4fc 100644
--- a/tests/safe-renegotiation/README
+++ b/tests/safe-renegotiation/README
@@ -1,49 +1,93 @@
Testing safe renegotiation is relatively complex, here is a summary of
what we test and what how we believe it should work.
-srn0.c:
+ Client setting
+ Server setting
+ Initial handshake outcome
+ Rehandshake outcome
+srn0.c
This tests that the safe renegotiation extension is negotiated
properly by default on initial connections and on rehandshaked
connections. Consequently, it also verifies that rehandshaked
connections work with the extension enabled.
-srn1.c:
+ NORMAL
+ NORMAL
+ OK
+ OK
+
+srn1.c
This tests that clients without support for safe renegotiation is
able to handshake against servers with support, but not able to
rehandshake (server will refuse rehandshake).
-srn2.c:
+ NORMAL:%DISABLE_SAFE_RENEGOTIATION
+ NORMAL
+ OK
+ Server refuses
+
+srn2.c
This tests that clients with support for safe renegotiation is able
to handshake against servers without support, but not able to
rehandshake (client will refuse rehandshake).
-srn3.c:
+ NORMAL
+ NORMAL:%DISABLE_SAFE_RENEGOTIATION
+ OK
+ Client refuses
+
+srn3.c
This tests that a %SAFE_RENEGOTIATION client will reject handshakes
against servers that do not support the extension (server uses
%DISABLE_SAFE_RENEGOTIATION).
-srn4.c:
+ NORMAL:%SAFE_RENEGOTIATION
+ NORMAL:%DISABLE_SAFE_RENEGOTIATION
+ Client refuses
+ N/A
+
+srn4.c
This tests that a %SAFE_RENEGOTIATION server will reject handshakes
against clients that do not support the extension.
-srn5.c:
+ NORMAL:%DISABLE_SAFE_RENEGOTIATION
+ NORMAL:%SAFE_RENEGOTIATION
+ Server refuses
+ N/A
+
+srn5.c
This tests that a client with a permissive policy
(%UNSAFE_RENEGOTIATION) is able to handshake and rehandshake with a
server with no support for the extension.
-srn6.c:
+ NORMAL:%DISABLE_SAFE_RENEGOTIATION
+ NORMAL:%UNSAFE_RENEGOTIATION
+ OK
+ OK
+
+srn6.c
This tests that a server with a permissive policy
(%UNSAFE_RENEGOTIATION) is able to handshake and rehandshake with a
client with no support for the extension.
-srn7.c:
+ NORMAL:%UNSAFE_RENEGOTIATION
+ NORMAL:%DISABLE_SAFE_RENEGOTIATION
+ OK
+ OK
+
+srn7.c
This tests that clients and servers in %SAFE_RENEGOTIATION mode are
able to handshake and rehandshake.
+
+ NORMAL:%SAFE_RENEGOTIATION
+ NORMAL:%SAFE_RENEGOTIATION
+ OK
+ OK