aboutsummaryrefslogtreecommitdiffstats
path: root/src/extra_tests
diff options
context:
space:
mode:
authorJack Lloyd <[email protected]>2016-11-21 21:43:29 -0500
committerJack Lloyd <[email protected]>2016-11-21 21:43:29 -0500
commitc8f173235d9b8576c759edda4e7dfbdccc011cf3 (patch)
tree2bc69f356bcaa44463fce5c0a7a0cbfeeab4b123 /src/extra_tests
parentdabe9fdda03721a0d6a95574da47a207e7381800 (diff)
Add policy file for TLS client testing
[ci skip]
Diffstat (limited to 'src/extra_tests')
-rw-r--r--src/extra_tests/tls_scanner/policy.txt19
1 files changed, 19 insertions, 0 deletions
diff --git a/src/extra_tests/tls_scanner/policy.txt b/src/extra_tests/tls_scanner/policy.txt
new file mode 100644
index 000000000..a9854ee54
--- /dev/null
+++ b/src/extra_tests/tls_scanner/policy.txt
@@ -0,0 +1,19 @@
+allow_tls10=true
+allow_tls11=true
+allow_tls12=true
+allow_dtls10=false
+allow_dtls12=false
+
+# Camellia first just to see if there is anyone out there who will negotiate it with us
+ciphers=Camellia-128 Camellia-256 Camellia-128/GCM Camellia-256/GCM ChaCha20Poly1305 AES-256/GCM AES-128/GCM AES-256 AES-128
+signature_hashes=SHA-384 SHA-256 SHA-1
+macs=AEAD SHA-384 SHA-256 SHA-1
+key_exchange_methods=CECPQ1 ECDH DH RSA
+signature_methods=ECDSA RSA DSA
+ecc_curves=x25519 secp256r1 secp384r1
+minimum_dh_group_size=1024
+minimum_ecdh_group_size=255
+minimum_rsa_bits=2048
+
+allow_insecure_renegotiation=false
+allow_server_initiated_renegotiation=false