mirror of https://github.com/wolfSSL/wolfssl.git
81 lines
2.3 KiB
Plaintext
81 lines
2.3 KiB
Plaintext
# SLH-DSA entity (leaf) certificates used for the TLS 1.3 handshake signature
|
|
# in the CertificateVerify message (draft-reddy-tls-slhdsa). TLS 1.3 only.
|
|
#
|
|
# SLH-DSA-SHAKE-128s leaves signed by the shared SLH-DSA-SHAKE-128s root. The
|
|
# leaf key's ~7.8KB signature fits in a single TLS record, so this exercises the
|
|
# single-record CertificateVerify send path with an SLH-DSA key (the companion
|
|
# 128f config exercises the fragmented path).
|
|
|
|
# Server-auth scenario.
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/server-slhdsa-shake-128s.pem
|
|
-k ./certs/slhdsa/server-slhdsa-shake-128s-priv.pem
|
|
-d
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-A ./certs/slhdsa/root-slhdsa-shake-128s.pem
|
|
-C
|
|
|
|
# Mutual-auth scenario (SLH-DSA CertificateVerify in both directions).
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/server-slhdsa-shake-128s.pem
|
|
-k ./certs/slhdsa/server-slhdsa-shake-128s-priv.pem
|
|
-A ./certs/slhdsa/root-slhdsa-shake-128s.pem
|
|
-V
|
|
# Remove -V when CRL for SLH-DSA certificates available.
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/client-slhdsa-shake-128s.pem
|
|
-k ./certs/slhdsa/client-slhdsa-shake-128s-priv.pem
|
|
-A ./certs/slhdsa/root-slhdsa-shake-128s.pem
|
|
-C
|
|
|
|
# Server auth with simulated WANT_WRITE (-6): leaf plus root push the
|
|
# Certificate message past one record, so the send resumes mid chain.
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/server-slhdsa-shake-128s.pem
|
|
-k ./certs/slhdsa/server-slhdsa-shake-128s-priv.pem
|
|
-d
|
|
-6
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-A ./certs/slhdsa/root-slhdsa-shake-128s.pem
|
|
-C
|
|
-6
|
|
|
|
# Mutual auth with simulated WANT_WRITE, so the client's own Certificate
|
|
# send resumes mid chain too.
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/server-slhdsa-shake-128s.pem
|
|
-k ./certs/slhdsa/server-slhdsa-shake-128s-priv.pem
|
|
-A ./certs/slhdsa/root-slhdsa-shake-128s.pem
|
|
-V
|
|
-6
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-c ./certs/slhdsa/client-slhdsa-shake-128s.pem
|
|
-k ./certs/slhdsa/client-slhdsa-shake-128s-priv.pem
|
|
-A ./certs/slhdsa/root-slhdsa-shake-128s.pem
|
|
-C
|
|
-6
|