public class TlsTestConfig
extends java.lang.Object
Modifier and Type | Field and Description |
---|---|
static int |
CLIENT_AUTH_INVALID_CERT
Client will authenticate if it receives a certificate request, with an invalid certificate
|
static int |
CLIENT_AUTH_INVALID_VERIFY
Client will authenticate if it receives a certificate request, with an invalid CertificateVerify signature
|
static int |
CLIENT_AUTH_NONE
Client does not authenticate, ignores any certificate request
|
static int |
CLIENT_AUTH_VALID
Client will authenticate if it receives a certificate request
|
int |
clientAuth
Configures the client authentication behaviour of the test client.
|
SignatureAndHashAlgorithm |
clientAuthSigAlg
If not null, and TLS 1.2 or higher is negotiated, selects a fixed signature/hash algorithm to
be used for the CertificateVerify signature (if one is sent).
|
SignatureAndHashAlgorithm |
clientAuthSigAlgClaimed
If not null, and TLS 1.2 or higher is negotiated, selects a fixed signature/hash algorithm to
be _claimed_ in the CertificateVerify (if one is sent), independently of what was actually used.
|
boolean |
clientFallback
Configures whether the client will indicate version fallback via TLS_FALLBACK_SCSV.
|
ProtocolVersion |
clientMinimumVersion
Configures the minimum protocol version the client will accept.
|
ProtocolVersion |
clientOfferVersion
Configures the protocol version the client will offer.
|
boolean |
clientSendSignatureAlgorithms
Configures whether a (TLS 1.2+) client will send the signature_algorithms extension in ClientHello.
|
static boolean |
DEBUG |
int |
expectFatalAlertConnectionEnd
Configures the connection end that a fatal alert is expected to be raised.
|
short |
expectFatalAlertDescription
Configures the type of fatal alert expected to be raised.
|
static int |
SERVER_CERT_REQ_MANDATORY
Server will request a client certificate and receiving one is mandatory
|
static int |
SERVER_CERT_REQ_NONE
Server will not request a client certificate
|
static int |
SERVER_CERT_REQ_OPTIONAL
Server will request a client certificate but receiving one is optional
|
SignatureAndHashAlgorithm |
serverAuthSigAlg
If not null, and TLS 1.2 or higher is negotiated, selects a fixed signature/hash algorithm to
be used for the ServerKeyExchange signature (if one is sent).
|
int |
serverCertReq
Configures whether the test server will send a certificate request.
|
java.util.Vector |
serverCertReqSigAlgs
If TLS 1.2 or higher is negotiated, configures the set of supported signature algorithms in the
CertificateRequest (if one is sent).
|
ProtocolVersion |
serverMaximumVersion
Configures the maximum protocol version the server will accept.
|
ProtocolVersion |
serverMinimumVersion
Configures the minimum protocol version the server will accept.
|
Constructor and Description |
---|
TlsTestConfig() |
Modifier and Type | Method and Description |
---|---|
void |
expectClientFatalAlert(short alertDescription) |
void |
expectServerFatalAlert(short alertDescription) |
public static final boolean DEBUG
public static final int CLIENT_AUTH_NONE
public static final int CLIENT_AUTH_VALID
public static final int CLIENT_AUTH_INVALID_CERT
public static final int CLIENT_AUTH_INVALID_VERIFY
public static final int SERVER_CERT_REQ_NONE
public static final int SERVER_CERT_REQ_OPTIONAL
public static final int SERVER_CERT_REQ_MANDATORY
public int clientAuth
public SignatureAndHashAlgorithm clientAuthSigAlg
public SignatureAndHashAlgorithm clientAuthSigAlgClaimed
public ProtocolVersion clientMinimumVersion
public ProtocolVersion clientOfferVersion
public boolean clientFallback
public boolean clientSendSignatureAlgorithms
public SignatureAndHashAlgorithm serverAuthSigAlg
public int serverCertReq
public java.util.Vector serverCertReqSigAlgs
public ProtocolVersion serverMaximumVersion
public ProtocolVersion serverMinimumVersion
public int expectFatalAlertConnectionEnd
public short expectFatalAlertDescription