mirror of https://github.com/wolfSSL/wolfssl.git
42 lines
1.3 KiB
Plaintext
42 lines
1.3 KiB
Plaintext
# SLH-DSA entity (leaf) certificates used for the TLS 1.3 handshake signature
|
|
# in the CertificateVerify message (draft-reddy-tls-slhdsa). TLS 1.3 only.
|
|
#
|
|
# SLH-DSA-SHA2-128f leaves signed by the shared SLH-DSA-SHA2-128s root. The leaf
|
|
# key's ~17KB signature makes the CertificateVerify handshake message exceed a
|
|
# single TLS record, so this also exercises fragmented CertificateVerify send +
|
|
# reassembly for the SHA2 parameter family.
|
|
|
|
# Server-auth scenario.
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/server-slhdsa-sha2-128f.pem
|
|
-k ./certs/slhdsa/server-slhdsa-sha2-128f-priv.pem
|
|
-d
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-A ./certs/slhdsa/root-slhdsa-sha2-128s.pem
|
|
-C
|
|
|
|
# Mutual-auth scenario (SLH-DSA CertificateVerify in both directions).
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/server-slhdsa-sha2-128f.pem
|
|
-k ./certs/slhdsa/server-slhdsa-sha2-128f-priv.pem
|
|
-A ./certs/slhdsa/root-slhdsa-sha2-128s.pem
|
|
-V
|
|
# Remove -V when CRL for SLH-DSA certificates available.
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/client-slhdsa-sha2-128f.pem
|
|
-k ./certs/slhdsa/client-slhdsa-sha2-128f-priv.pem
|
|
-A ./certs/slhdsa/root-slhdsa-sha2-128s.pem
|
|
-C
|