bogo_config.json

     1  {
     2      "DisabledTests": {
     3          "*-Async": "We don't support boringssl concept of async",
     4  
     5          "TLS-ECH-Client-Reject-NoClientCertificate-TLS12": "We won't attempt to negotiate 1.2 if ECH is enabled",
     6          "TLS-ECH-Client-Reject-TLS12": "We won't attempt to negotiate 1.2 if ECH is enabled",
     7          "TLS-ECH-Client-TLS12-RejectRetryConfigs": "We won't attempt to negotiate 1.2 if ECH is enabled",
     8          "TLS-ECH-Client-Rejected-OverrideName-TLS12": "We won't attempt to negotiate 1.2 if ECH is enabled",
     9          "TLS-ECH-Client-Reject-TLS12-NoFalseStart": "We won't attempt to negotiate 1.2 if ECH is enabled",
    10          "TLS-ECH-Client-TLS12SessionTicket": "We won't attempt to negotiate 1.2 if ECH is enabled",
    11          "TLS-ECH-Client-TLS12SessionID": "We won't attempt to negotiate 1.2 if ECH is enabled",
    12  
    13          "TLS-ECH-Client-Reject-ResumeInnerSession-TLS12": "We won't attempt to negotiate 1.2 if ECH is enabled (we could possibly test this if we had the ability to indicate not to send ECH on resumption?)",
    14  
    15          "TLS-ECH-Client-Reject-EarlyDataRejected": "Go does not support early (0-RTT) data",
    16  
    17          "TLS-ECH-Client-NoNPN": "We don't support NPN",
    18  
    19          "TLS-ECH-Client-ChannelID": "We don't support sending channel ID",
    20          "TLS-ECH-Client-Reject-NoChannelID-TLS13": "We don't support sending channel ID",
    21          "TLS-ECH-Client-Reject-NoChannelID-TLS12": "We don't support sending channel ID",
    22  
    23          "TLS-ECH-Client-GREASE-IgnoreHRRExtension": "We don't support ECH GREASE because we don't fallback to plaintext",
    24          "TLS-ECH-Client-NoSupportedConfigs-GREASE": "We don't support ECH GREASE because we don't fallback to plaintext",
    25          "TLS-ECH-Client-GREASEExtensions": "We don't support ECH GREASE because we don't fallback to plaintext",
    26          "TLS-ECH-Client-GREASE-NoOverrideName": "We don't support ECH GREASE because we don't fallback to plaintext",
    27  
    28          "TLS-ECH-Client-UnsolicitedInnerServerNameAck": "We don't allow sending empty SNI without skipping certificate verification, TODO: could add special flag to bogo to indicate 'empty sni'",
    29  
    30          "TLS-ECH-Client-NoSupportedConfigs": "We don't support fallback to cleartext when there are no valid ECH configs",
    31          "TLS-ECH-Client-SkipInvalidPublicName": "We don't support fallback to cleartext when there are no valid ECH configs",
    32  
    33          "TLS-ECH-Server-EarlyData": "Go does not support early (0-RTT) data",
    34          "TLS-ECH-Server-EarlyDataRejected": "Go does not support early (0-RTT) data",
    35  
    36          "MLKEMKeyShareIncludedSecond": "BoGo wants us to order the key shares based on its preference, but we don't support that",
    37          "MLKEMKeyShareIncludedThird": "BoGo wants us to order the key shares based on its preference, but we don't support that",
    38          "PostQuantumNotEnabledByDefaultInClients": "We do enable it by default!",
    39          "*-Kyber-TLS13": "We don't support Kyber, only ML-KEM (BoGo bug ignoring AllCurves?)",
    40  
    41          "*-SignDefault-*": "TODO, partially it encodes BoringSSL defaults, partially we might be missing some implicit behavior of a missing flag",
    42  
    43          "V2ClientHello-*": "We don't support SSLv2",
    44          "SendV2ClientHello*": "We don't support SSLv2",
    45          "*QUIC*": "No QUIC support",
    46          "Compliance-fips*": "No FIPS",
    47          "*DTLS*": "No DTLS",
    48          "SendEmptyRecords*": "crypto/tls doesn't implement spam protections",
    49          "SendWarningAlerts*": "crypto/tls doesn't implement spam protections",
    50          "SendUserCanceledAlerts-TooMany-TLS13": "crypto/tls doesn't implement spam protections",
    51          "TooManyKeyUpdates": "crypto/tls doesn't implement spam protections (TODO: I think?)",
    52          "KyberNotEnabledByDefaultInClients": "crypto/tls intentionally enables it",
    53          "JustConfiguringKyberWorks": "we always send a X25519 key share with Kyber",
    54          "KyberKeyShareIncludedSecond": "we always send the Kyber key share first",
    55          "KyberKeyShareIncludedThird": "we always send the Kyber key share first",
    56          "GREASE-Server-TLS13": "We don't send GREASE extensions",
    57          "SendBogusAlertType": "sending wrong alert type",
    58          "*Client-P-224*": "no P-224 support",
    59          "*Server-P-224*": "no P-224 support",
    60          "CurveID-Resume*": "unexposed curveID is not stored in the ticket yet",
    61          "BadRSAClientKeyExchange-4": "crypto/tls doesn't check the version number in the premaster secret - see processClientKeyExchange comment",
    62          "BadRSAClientKeyExchange-5": "crypto/tls doesn't check the version number in the premaster secret - see processClientKeyExchange comment",
    63          "CheckLeafCurve": "TODO: first pass, this should be fixed",
    64          "DisabledCurve-HelloRetryRequest-TLS13": "TODO: first pass, this should be fixed",
    65          "UnsupportedCurve": "TODO: first pass, this should be fixed",
    66          "SupportTicketsWithSessionID": "TODO: first pass, this should be fixed",
    67          "NoNullCompression-TLS12": "TODO: first pass, this should be fixed",
    68          "KeyUpdate-RequestACK": "TODO: first pass, this should be fixed",
    69          "IgnoreClientVersionOrder": "TODO: first pass, this should be fixed",
    70          "SupportedVersionSelection-TLS12": "TODO: first pass, this should be fixed",
    71          "DuplicateExtensionServer-TLS-TLS1": "TODO: first pass, this should be fixed",
    72          "DuplicateExtensionClient-TLS-TLS1": "TODO: first pass, this should be fixed",
    73          "UnsolicitedServerNameAck-TLS-TLS1": "TODO: first pass, this should be fixed",
    74          "TicketSessionIDLength-33-TLS-TLS1": "TODO: first pass, this should be fixed",
    75          "DuplicateExtensionServer-TLS-TLS11": "TODO: first pass, this should be fixed",
    76          "DuplicateExtensionClient-TLS-TLS11": "TODO: first pass, this should be fixed",
    77          "UnsolicitedServerNameAck-TLS-TLS11": "TODO: first pass, this should be fixed",
    78          "TicketSessionIDLength-33-TLS-TLS11": "TODO: first pass, this should be fixed",
    79          "DuplicateExtensionServer-TLS-TLS12": "TODO: first pass, this should be fixed",
    80          "DuplicateExtensionClient-TLS-TLS12": "TODO: first pass, this should be fixed",
    81          "UnsolicitedServerNameAck-TLS-TLS12": "TODO: first pass, this should be fixed",
    82          "TicketSessionIDLength-33-TLS-TLS12": "TODO: first pass, this should be fixed",
    83          "DuplicateExtensionClient-TLS-TLS13": "TODO: first pass, this should be fixed",
    84          "DuplicateExtensionServer-TLS-TLS13": "TODO: first pass, this should be fixed",
    85          "UnsolicitedServerNameAck-TLS-TLS13": "TODO: first pass, this should be fixed",
    86          "RenegotiationInfo-Forbidden-TLS13": "TODO: first pass, this should be fixed",
    87          "EMS-Forbidden-TLS13": "TODO: first pass, this should be fixed",
    88          "SendUnsolicitedOCSPOnCertificate-TLS13": "TODO: first pass, this should be fixed",
    89          "SendUnsolicitedSCTOnCertificate-TLS13": "TODO: first pass, this should be fixed",
    90          "SendUnknownExtensionOnCertificate-TLS13": "TODO: first pass, this should be fixed",
    91          "Resume-Server-NoTickets-TLS1-TLS1-TLS": "TODO: first pass, this should be fixed",
    92          "Resume-Server-NoTickets-TLS11-TLS11-TLS": "TODO: first pass, this should be fixed",
    93          "Resume-Server-NoTickets-TLS12-TLS12-TLS": "TODO: first pass, this should be fixed",
    94          "Resume-Server-NoPSKBinder": "TODO: first pass, this should be fixed",
    95          "Resume-Server-PSKBinderFirstExtension": "TODO: first pass, this should be fixed",
    96          "Resume-Server-PSKBinderFirstExtension-SecondBinder": "TODO: first pass, this should be fixed",
    97          "Resume-Server-NoPSKBinder-SecondBinder": "TODO: first pass, this should be fixed",
    98          "Resume-Server-OmitPSKsOnSecondClientHello": "TODO: first pass, this should be fixed",
    99          "Renegotiate-Server-Forbidden": "TODO: first pass, this should be fixed",
   100          "Renegotiate-Client-Forbidden-1": "TODO: first pass, this should be fixed",
   101          "Client-Sign-RSA_PKCS1_SHA1-TLS13": "TODO: first pass, this should be fixed",
   102          "Client-Sign-RSA_PKCS1_SHA256-TLS13": "TODO: first pass, this should be fixed",
   103          "Client-Sign-RSA_PKCS1_SHA384-TLS13": "TODO: first pass, this should be fixed",
   104          "Client-Sign-RSA_PKCS1_SHA512-TLS13": "TODO: first pass, this should be fixed",
   105          "Client-Sign-ECDSA_SHA1-TLS13": "TODO: first pass, this should be fixed",
   106          "Client-Sign-ECDSA_P224_SHA256-TLS13": "TODO: first pass, this should be fixed",
   107          "ClientAuth-NoFallback-TLS13": "TODO: first pass, this should be fixed",
   108          "ClientAuth-NoFallback-ECDSA": "TODO: first pass, this should be fixed",
   109          "ClientAuth-NoFallback-RSA": "TODO: first pass, this should be fixed",
   110          "ECDSACurveMismatch-Verify-TLS13": "TODO: first pass, this should be fixed",
   111          "Ed25519DefaultDisable-NoAdvertise": "TODO: first pass, this should be fixed",
   112          "Ed25519DefaultDisable-NoAccept": "TODO: first pass, this should be fixed",
   113          "NoCommonSignatureAlgorithms-TLS12-Fallback": "TODO: first pass, this should be fixed",
   114          "UnknownExtension-Client": "TODO: first pass, this should be fixed",
   115          "UnknownUnencryptedExtension-Client-TLS13": "TODO: first pass, this should be fixed",
   116          "UnofferedExtension-Client-TLS13": "TODO: first pass, this should be fixed",
   117          "UnknownExtension-Client-TLS13": "TODO: first pass, this should be fixed",
   118          "SendClientVersion-RSA": "TODO: first pass, this should be fixed",
   119          "NoCommonCurves": "TODO: first pass, this should be fixed",
   120          "PointFormat-EncryptedExtensions-TLS13": "TODO: first pass, this should be fixed",
   121          "TLS13-SendNoKEMModesWithPSK-Server": "TODO: first pass, this should be fixed",
   122          "TLS13-DuplicateTicketEarlyDataSupport": "TODO: first pass, this should be fixed",
   123          "Basic-Client-NoTicket-TLS-Sync": "TODO: first pass, this should be fixed",
   124          "Basic-Server-RSA-TLS-Sync": "TODO: first pass, this should be fixed",
   125          "Basic-Client-NoTicket-TLS-Sync-SplitHandshakeRecords": "TODO: first pass, this should be fixed",
   126          "Basic-Server-RSA-TLS-Sync-SplitHandshakeRecords": "TODO: first pass, this should be fixed",
   127          "Basic-Client-NoTicket-TLS-Sync-PackHandshake": "TODO: first pass, this should be fixed",
   128          "Basic-Server-RSA-TLS-Sync-PackHandshake": "TODO: first pass, this should be fixed",
   129          "PartialSecondClientHelloAfterFirst": "TODO: first pass, this should be fixed",
   130          "PartialServerHelloWithHelloRetryRequest": "TODO: first pass, this should be fixed",
   131          "TrailingDataWithFinished-Server-TLS1": "TODO: first pass, this should be fixed",
   132          "PartialClientKeyExchangeWithClientHello": "TODO: first pass, this should be fixed",
   133          "TrailingDataWithFinished-Resume-Server-TLS1": "TODO: first pass, this should be fixed",
   134          "TrailingDataWithFinished-Resume-Client-TLS11": "TODO: first pass, this should be fixed",
   135          "TrailingDataWithFinished-Client-TLS1": "TODO: first pass, this should be fixed",
   136          "TrailingDataWithFinished-Client-TLS11": "TODO: first pass, this should be fixed",
   137          "TrailingDataWithFinished-Client-TLS12": "TODO: first pass, this should be fixed",
   138          "TrailingDataWithFinished-Client-TLS13": "TODO: first pass, this should be fixed",
   139          "PartialNewSessionTicketWithServerHelloDone": "TODO: first pass, this should be fixed",
   140          "TrailingDataWithFinished-Server-TLS11": "TODO: first pass, this should be fixed",
   141          "TrailingDataWithFinished-Server-TLS12": "TODO: first pass, this should be fixed",
   142          "TrailingDataWithFinished-Resume-Server-TLS11": "TODO: first pass, this should be fixed",
   143          "TrailingDataWithFinished-Resume-Client-TLS12": "TODO: first pass, this should be fixed",
   144          "TrailingDataWithFinished-Resume-Server-TLS12": "TODO: first pass, this should be fixed",
   145          "TrailingDataWithFinished-Resume-Client-TLS13": "TODO: first pass, this should be fixed",
   146          "TrailingDataWithFinished-Resume-Client-TLS1": "TODO: first pass, this should be fixed",
   147          "TrailingMessageData-ClientHello-TLS": "TODO: first pass, this should be fixed",
   148          "TrailingMessageData-ServerHello-TLS": "TODO: first pass, this should be fixed",
   149          "TrailingMessageData-ServerCertificate-TLS": "TODO: first pass, this should be fixed",
   150          "TrailingMessageData-ServerHelloDone-TLS": "TODO: first pass, this should be fixed",
   151          "TrailingMessageData-ServerKeyExchange-TLS": "TODO: first pass, this should be fixed",
   152          "TrailingMessageData-CertificateRequest-TLS": "TODO: first pass, this should be fixed",
   153          "TrailingMessageData-CertificateVerify-TLS": "TODO: first pass, this should be fixed",
   154          "TrailingMessageData-ServerFinished-TLS": "TODO: first pass, this should be fixed",
   155          "TrailingMessageData-ClientKeyExchange-TLS": "TODO: first pass, this should be fixed",
   156          "TrailingMessageData-TLS13-ClientHello-TLS": "TODO: first pass, this should be fixed",
   157          "TrailingMessageData-ClientFinished-TLS": "TODO: first pass, this should be fixed",
   158          "TrailingMessageData-NewSessionTicket-TLS": "TODO: first pass, this should be fixed",
   159          "TrailingMessageData-ClientCertificate-TLS": "TODO: first pass, this should be fixed",
   160          "TrailingMessageData-TLS13-CertificateRequest-TLS": "TODO: first pass, this should be fixed",
   161          "TrailingMessageData-TLS13-ServerCertificateVerify-TLS": "TODO: first pass, this should be fixed",
   162          "TrailingMessageData-TLS13-EncryptedExtensions-TLS": "TODO: first pass, this should be fixed",
   163          "TrailingMessageData-TLS13-ClientCertificate-TLS": "TODO: first pass, this should be fixed",
   164          "TrailingMessageData-TLS13-ClientCertificateVerify-TLS": "TODO: first pass, this should be fixed",
   165          "TrailingMessageData-TLS13-ServerCertificate-TLS": "TODO: first pass, this should be fixed",
   166          "ResumeTLS12SessionID-TLS13": "TODO: first pass, this should be fixed",
   167          "SkipEarlyData-TLS13": "TODO: first pass, this should be fixed",
   168          "DuplicateKeyShares-TLS13": "TODO: first pass, this should be fixed",
   169          "Server-TooLongSessionID-TLS13": "TODO: first pass, this should be fixed",
   170          "Client-TooLongSessionID": "TODO: first pass, this should be fixed",
   171          "Client-ShortSessionID": "TODO: first pass, this should be fixed",
   172          "TLS12NoSessionID-TLS13": "TODO: first pass, this should be fixed",
   173          "Server-TooLongSessionID-TLS12": "TODO: first pass, this should be fixed",
   174          "EmptyEncryptedExtensions-TLS13": "TODO: first pass, this should be fixed",
   175          "SkipEarlyData-SecondClientHelloEarlyData-TLS13": "TODO: first pass, this should be fixed",
   176          "EncryptedExtensionsWithKeyShare-TLS13": "TODO: first pass, this should be fixed",
   177          "HelloRetryRequest-DuplicateCurve-TLS13": "TODO: first pass, this should be fixed",
   178          "HelloRetryRequest-DuplicateCookie-TLS13": "TODO: first pass, this should be fixed",
   179          "HelloRetryRequest-Unknown-TLS13": "TODO: first pass, this should be fixed",
   180          "SendPostHandshakeChangeCipherSpec-TLS13": "TODO: first pass, this should be fixed",
   181          "ECDSAKeyUsage-Server-TLS12": "TODO: first pass, this should be fixed",
   182          "ECDSAKeyUsage-Server-TLS13": "TODO: first pass, this should be fixed",
   183          "RSAKeyUsage-Client-WantEncipherment-GotEnciphermentTLS1": "TODO: first pass, this should be fixed",
   184          "RSAKeyUsage-Server-WantSignature-GotEncipherment-TLS1": "TODO: first pass, this should be fixed",
   185          "RSAKeyUsage-Client-WantSignature-GotSignature-TLS1": "TODO: first pass, this should be fixed",
   186          "RSAKeyUsage-Client-WantEncipherment-GotEnciphermentTLS11": "TODO: first pass, this should be fixed",
   187          "RSAKeyUsage-Client-WantSignature-GotSignature-TLS11": "TODO: first pass, this should be fixed",
   188          "RSAKeyUsage-Client-WantEncipherment-GotEnciphermentTLS12": "TODO: first pass, this should be fixed",
   189          "RSAKeyUsage-Server-WantSignature-GotEncipherment-TLS12": "TODO: first pass, this should be fixed",
   190          "RSAKeyUsage-Server-WantSignature-GotEncipherment-TLS11": "TODO: first pass, this should be fixed",
   191          "RSAKeyUsage-Client-WantSignature-GotSignature-TLS12": "TODO: first pass, this should be fixed",
   192          "RSAKeyUsage-Client-WantSignature-GotSignature-TLS13": "TODO: first pass, this should be fixed",
   193          "RSAKeyUsage-Server-WantSignature-GotEncipherment-TLS13": "TODO: first pass, this should be fixed",
   194          "EmptyExtensions-ClientHello-TLS1": "TODO: first pass, this should be fixed",
   195          "OmitExtensions-ClientHello-TLS1": "TODO: first pass, this should be fixed",
   196          "EmptyExtensions-ClientHello-TLS12": "TODO: first pass, this should be fixed",
   197          "OmitExtensions-ClientHello-TLS12": "TODO: first pass, this should be fixed",
   198          "EmptyExtensions-ClientHello-TLS11": "TODO: first pass, this should be fixed",
   199          "OmitExtensions-ClientHello-TLS11": "TODO: first pass, this should be fixed",
   200          "DuplicateCertCompressionExt-TLS12": "TODO: first pass, this should be fixed",
   201          "DuplicateCertCompressionExt-TLS13": "TODO: first pass, this should be fixed",
   202          "Client-RejectJDK11DowngradeRandom": "TODO: first pass, this should be fixed",
   203          "CheckClientCertificateTypes": "TODO: first pass, this should be fixed",
   204          "CheckECDSACurve-TLS12": "TODO: first pass, this should be fixed",
   205          "ALPNClient-RejectUnknown-TLS-TLS1": "TODO: first pass, this should be fixed",
   206          "ALPNClient-RejectUnknown-TLS-TLS11": "TODO: first pass, this should be fixed",
   207          "ALPNClient-RejectUnknown-TLS-TLS12": "TODO: first pass, this should be fixed",
   208          "ALPNClient-RejectUnknown-TLS-TLS13": "TODO: first pass, this should be fixed",
   209          "ClientHelloPadding": "TODO: first pass, this should be fixed",
   210          "TLS13-ExpectTicketEarlyDataSupport": "TODO: first pass, this should be fixed",
   211          "TLS13-EarlyData-TooMuchData-Client-TLS-Sync": "TODO: first pass, this should be fixed",
   212          "TLS13-EarlyData-TooMuchData-Client-TLS-Sync-SplitHandshakeRecords": "TODO: first pass, this should be fixed",
   213          "TLS13-EarlyData-TooMuchData-Client-TLS-Sync-PackHandshake": "TODO: first pass, this should be fixed",
   214          "WrongMessageType-TLS13-EndOfEarlyData-TLS": "TODO: first pass, this should be fixed",
   215          "TrailingMessageData-TLS13-EndOfEarlyData-TLS": "TODO: first pass, this should be fixed",
   216          "SendHelloRetryRequest-2-TLS13": "TODO: first pass, this should be fixed",
   217          "EarlyData-SkipEndOfEarlyData-TLS13": "TODO: first pass, this should be fixed",
   218          "EarlyData-Server-BadFinished-TLS13": "TODO: first pass, this should be fixed",
   219          "EarlyData-UnexpectedHandshake-Server-TLS13": "TODO: first pass, this should be fixed",
   220          "EarlyData-CipherMismatch-Client-TLS13": "TODO: first pass, this should be fixed",
   221          "Resume-Server-UnofferedCipher-TLS13": "TODO: first pass, this should be fixed"
   222      },
   223      "AllCurves": [
   224          23,
   225          24,
   226          25,
   227          29,
   228          4588
   229      ],
   230      "ErrorMap": {
   231          ":ECH_REJECTED:": "tls: server rejected ECH"
   232      }
   233  }
   234
View as plain text