Lines Matching +full:- +full:s

3 # tls13-kex-modes.sh
6 # SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
15 run_test    "TLS 1.3: G->m: all/psk, good" \
17 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
18                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
21             -s "found psk key exchange modes extension" \
22             -s "found pre_shared_key extension" \
23             -s "Found PSK_EPHEMERAL KEX MODE" \
24             -s "Found PSK KEX MODE" \
25             -s "Pre shared key found" \
26             -S "No usable PSK or ticket" \
27             -s "key exchange mode: psk$"  \
28             -S "key exchange mode: psk_ephemeral"  \
29             -S "key exchange mode: ephemeral"
34 run_test    "TLS 1.3: G->m: all/psk, fail, key id mismatch" \
36 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
37                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
40             -s "found psk key exchange modes extension" \
41             -s "found pre_shared_key extension" \
42             -s "Found PSK_EPHEMERAL KEX MODE" \
43             -s "Found PSK KEX MODE" \
44             -s "No usable PSK or ticket" \
45             -S "key exchange mode: psk$"  \
46             -S "key exchange mode: psk_ephemeral"  \
47             -S "key exchange mode: ephemeral"
52 run_test    "TLS 1.3: G->m: all/psk, fail, key material mismatch" \
54 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
55                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
58             -s "found psk key exchange modes extension" \
59             -s "found pre_shared_key extension" \
60             -s "Found PSK_EPHEMERAL KEX MODE" \
61             -s "Found PSK KEX MODE" \
62             -s "Invalid binder." \
63             -S "key exchange mode: psk$"  \
64             -S "key exchange mode: psk_ephemeral"  \
65             -S "key exchange mode: ephemeral"
70 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk, good" \
72 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
73                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
76             -s "found psk key exchange modes extension" \
77             -s "found pre_shared_key extension" \
78             -S "Found PSK_EPHEMERAL KEX MODE" \
79             -s "Found PSK KEX MODE" \
80             -s "Pre shared key found" \
81             -S "No usable PSK or ticket" \
82             -s "key exchange mode: psk$"  \
83             -S "key exchange mode: psk_ephemeral"  \
84             -S "key exchange mode: ephemeral"
89 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk, fail, key id mismatch" \
91 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
92                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
95             -s "found psk key exchange modes extension" \
96             -s "found pre_shared_key extension" \
97             -S "Found PSK_EPHEMERAL KEX MODE" \
98             -s "Found PSK KEX MODE" \
99             -s "No usable PSK or ticket" \
100             -S "key exchange mode: psk$"  \
101             -S "key exchange mode: psk_ephemeral"  \
102             -S "key exchange mode: ephemeral"
107 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk, fail, key material mismatch" \
109 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
110                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
113             -s "found psk key exchange modes extension" \
114             -s "found pre_shared_key extension" \
115             -S "Found PSK_EPHEMERAL KEX MODE" \
116             -s "Found PSK KEX MODE" \
117             -s "Invalid binder." \
118             -S "key exchange mode: psk$"  \
119             -S "key exchange mode: psk_ephemeral"  \
120             -S "key exchange mode: ephemeral"
125 run_test    "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, good" \
127 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
128                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
131             -s "found psk key exchange modes extension" \
132             -s "found pre_shared_key extension" \
133             -s "Found PSK_EPHEMERAL KEX MODE" \
134             -S "Found PSK KEX MODE" \
135             -s "Pre shared key found" \
136             -S "No usable PSK or ticket" \
137             -S "key exchange mode: psk$"  \
138             -s "key exchange mode: psk_ephemeral"  \
139             -S "key exchange mode: ephemeral"
144 run_test    "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
146 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
147                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
150             -s "found psk key exchange modes extension" \
151             -s "found pre_shared_key extension" \
152             -s "Found PSK_EPHEMERAL KEX MODE" \
153             -S "Found PSK KEX MODE" \
154             -s "No usable PSK or ticket" \
155             -S "key exchange mode: psk$"  \
156             -S "key exchange mode: psk_ephemeral"  \
157             -S "key exchange mode: ephemeral"
162 run_test    "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
164 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
165                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
168             -s "found psk key exchange modes extension" \
169             -s "found pre_shared_key extension" \
170             -s "Found PSK_EPHEMERAL KEX MODE" \
171             -S "Found PSK KEX MODE" \
172             -s "Invalid binder." \
173             -S "key exchange mode: psk$"  \
174             -S "key exchange mode: psk_ephemeral"  \
175             -S "key exchange mode: ephemeral"
180 run_test    "TLS 1.3: G->m: all/psk_ephemeral, good" \
182 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
183                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
186             -s "found psk key exchange modes extension" \
187             -s "found pre_shared_key extension" \
188             -s "Found PSK_EPHEMERAL KEX MODE" \
189             -s "Found PSK KEX MODE" \
190             -s "Pre shared key found" \
191             -S "No usable PSK or ticket" \
192             -S "key exchange mode: psk$"  \
193             -s "key exchange mode: psk_ephemeral"  \
194             -S "key exchange mode: ephemeral"
199 run_test    "TLS 1.3: G->m: all/psk_ephemeral, fail, key id mismatch" \
201 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
202                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
205             -s "found psk key exchange modes extension" \
206             -s "found pre_shared_key extension" \
207             -s "Found PSK_EPHEMERAL KEX MODE" \
208             -s "Found PSK KEX MODE" \
209             -s "No usable PSK or ticket" \
210             -S "key exchange mode: psk$"  \
211             -S "key exchange mode: psk_ephemeral"  \
212             -S "key exchange mode: ephemeral"
217 run_test    "TLS 1.3: G->m: all/psk_ephemeral, fail, key material mismatch" \
219 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
220                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
223             -s "found psk key exchange modes extension" \
224             -s "found pre_shared_key extension" \
225             -s "Found PSK_EPHEMERAL KEX MODE" \
226             -s "Found PSK KEX MODE" \
227             -s "Invalid binder." \
228             -S "key exchange mode: psk$"  \
229             -S "key exchange mode: psk_ephemeral"  \
230             -S "key exchange mode: ephemeral"
235 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk_ephemeral, fail, no common kex mode" \
237 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
238                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
241             -s "found psk key exchange modes extension" \
242             -s "found pre_shared_key extension" \
243             -S "Found PSK_EPHEMERAL KEX MODE" \
244             -s "Found PSK KEX MODE" \
245             -S "key exchange mode: psk$"  \
246             -S "key exchange mode: psk_ephemeral"  \
247             -S "key exchange mode: ephemeral"
253 run_test    "TLS 1.3: G->m: ephemeral_all/psk_all, good" \
255 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
256                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
259             -s "found psk key exchange modes extension" \
260             -s "found pre_shared_key extension" \
261             -s "Found PSK_EPHEMERAL KEX MODE" \
262             -S "Found PSK KEX MODE" \
263             -s "Pre shared key found" \
264             -S "No usable PSK or ticket" \
265             -S "key exchange mode: psk$"  \
266             -s "key exchange mode: psk_ephemeral"  \
267             -S "key exchange mode: ephemeral"
273 run_test    "TLS 1.3: G->m: ephemeral_all/psk_all, fail, key id mismatch" \
275 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
276                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
279             -s "found psk key exchange modes extension" \
280             -s "found pre_shared_key extension" \
281             -s "Found PSK_EPHEMERAL KEX MODE" \
282             -S "Found PSK KEX MODE" \
283             -s "No usable PSK or ticket" \
284             -S "key exchange mode: psk$"  \
285             -S "key exchange mode: psk_ephemeral"  \
286             -S "key exchange mode: ephemeral"
292 run_test    "TLS 1.3: G->m: ephemeral_all/psk_all, fail, key material mismatch" \
294 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
295                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
298             -s "found psk key exchange modes extension" \
299             -s "found pre_shared_key extension" \
300             -s "Found PSK_EPHEMERAL KEX MODE" \
301             -S "Found PSK KEX MODE" \
302             -s "Invalid binder." \
303             -S "key exchange mode: psk$"  \
304             -S "key exchange mode: psk_ephemeral"  \
305             -S "key exchange mode: ephemeral"
311 run_test    "TLS 1.3: G->m: all/psk_all, good" \
313 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
314                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
317             -s "found psk key exchange modes extension" \
318             -s "found pre_shared_key extension" \
319             -s "Found PSK_EPHEMERAL KEX MODE" \
320             -s "Found PSK KEX MODE" \
321             -s "Pre shared key found" \
322             -S "No usable PSK or ticket" \
323             -S "key exchange mode: psk$"  \
324             -s "key exchange mode: psk_ephemeral"  \
325             -S "key exchange mode: ephemeral"
331 run_test    "TLS 1.3: G->m: all/psk_all, fail, key id mismatch" \
333 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
334                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
337             -s "found psk key exchange modes extension" \
338             -s "found pre_shared_key extension" \
339             -s "Found PSK_EPHEMERAL KEX MODE" \
340             -s "Found PSK KEX MODE" \
341             -s "No usable PSK or ticket" \
342             -S "key exchange mode: psk$"  \
343             -S "key exchange mode: psk_ephemeral"  \
344             -S "key exchange mode: ephemeral"
350 run_test    "TLS 1.3: G->m: all/psk_all, fail, key material mismatch" \
352 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
353                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
356             -s "found psk key exchange modes extension" \
357             -s "found pre_shared_key extension" \
358             -s "Found PSK_EPHEMERAL KEX MODE" \
359             -s "Found PSK KEX MODE" \
360             -s "Invalid binder." \
361             -S "key exchange mode: psk$"  \
362             -S "key exchange mode: psk_ephemeral"  \
363             -S "key exchange mode: ephemeral"
369 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk_all, good" \
371 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
372                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
375             -s "found psk key exchange modes extension" \
376             -s "found pre_shared_key extension" \
377             -S "Found PSK_EPHEMERAL KEX MODE" \
378             -s "Found PSK KEX MODE" \
379             -s "Pre shared key found" \
380             -S "No usable PSK or ticket" \
381             -s "key exchange mode: psk$"  \
382             -S "key exchange mode: psk_ephemeral"  \
383             -S "key exchange mode: ephemeral"
389 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk_all, fail, key id mismatch" \
391 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
392                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
395             -s "found psk key exchange modes extension" \
396             -s "found pre_shared_key extension" \
397             -S "Found PSK_EPHEMERAL KEX MODE" \
398             -s "Found PSK KEX MODE" \
399             -s "No usable PSK or ticket" \
400             -S "key exchange mode: psk$"  \
401             -S "key exchange mode: psk_ephemeral"  \
402             -S "key exchange mode: ephemeral"
408 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk_all, fail, key material mismatch" \
410 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
411                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
414             -s "found psk key exchange modes extension" \
415             -s "found pre_shared_key extension" \
416             -S "Found PSK_EPHEMERAL KEX MODE" \
417             -s "Found PSK KEX MODE" \
418             -s "Invalid binder." \
419             -S "key exchange mode: psk$"  \
420             -S "key exchange mode: psk_ephemeral"  \
421             -S "key exchange mode: ephemeral"
427 run_test    "TLS 1.3: G->m: ephemeral_all/ephemeral_all, good" \
429 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
430                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
433             -s "found psk key exchange modes extension" \
434             -s "found pre_shared_key extension" \
435             -s "Found PSK_EPHEMERAL KEX MODE" \
436             -S "Found PSK KEX MODE" \
437             -s "Pre shared key found" \
438             -S "No usable PSK or ticket" \
439             -S "key exchange mode: psk$"  \
440             -s "key exchange mode: psk_ephemeral"  \
441             -S "key exchange mode: ephemeral"
447 run_test    "TLS 1.3: G->m: ephemeral_all/ephemeral_all, good, key id mismatch, dhe." \
449 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
450                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
453             -s "found psk key exchange modes extension" \
454             -s "found pre_shared_key extension" \
455             -s "Found PSK_EPHEMERAL KEX MODE" \
456             -S "Found PSK KEX MODE" \
457             -s "No usable PSK or ticket" \
458             -S "key exchange mode: psk$"  \
459             -S "key exchange mode: psk_ephemeral"  \
460             -s "key exchange mode: ephemeral"
466 run_test    "TLS 1.3: G->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
468 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
469                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
472             -s "found psk key exchange modes extension" \
473             -s "found pre_shared_key extension" \
474             -s "Found PSK_EPHEMERAL KEX MODE" \
475             -S "Found PSK KEX MODE" \
476             -s "Invalid binder." \
477             -S "key exchange mode: psk$"  \
478             -S "key exchange mode: psk_ephemeral"  \
479             -S "key exchange mode: ephemeral"
485 run_test    "TLS 1.3: G->m: all/ephemeral_all, good" \
487 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
488                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
491             -s "found psk key exchange modes extension" \
492             -s "found pre_shared_key extension" \
493             -s "Found PSK_EPHEMERAL KEX MODE" \
494             -s "Found PSK KEX MODE" \
495             -s "Pre shared key found" \
496             -S "No usable PSK or ticket" \
497             -S "key exchange mode: psk$"  \
498             -s "key exchange mode: psk_ephemeral"  \
499             -S "key exchange mode: ephemeral"
505 run_test    "TLS 1.3: G->m: all/ephemeral_all, good, key id mismatch, dhe." \
507 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
508                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
511             -s "found psk key exchange modes extension" \
512             -s "found pre_shared_key extension" \
513             -s "Found PSK_EPHEMERAL KEX MODE" \
514             -s "Found PSK KEX MODE" \
515             -s "No usable PSK or ticket" \
516             -S "key exchange mode: psk$"  \
517             -S "key exchange mode: psk_ephemeral"  \
518             -s "key exchange mode: ephemeral"
524 run_test    "TLS 1.3: G->m: all/ephemeral_all, fail, key material mismatch" \
526 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
527                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
530             -s "found psk key exchange modes extension" \
531             -s "found pre_shared_key extension" \
532             -s "Found PSK_EPHEMERAL KEX MODE" \
533             -s "Found PSK KEX MODE" \
534             -s "Invalid binder." \
535             -S "key exchange mode: psk$"  \
536             -S "key exchange mode: psk_ephemeral"  \
537             -S "key exchange mode: ephemeral"
543 run_test    "TLS 1.3: G->m: psk_or_ephemeral/ephemeral_all, good" \
545 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
546                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
549             -s "found psk key exchange modes extension" \
550             -s "found pre_shared_key extension" \
551             -S "Found PSK_EPHEMERAL KEX MODE" \
552             -s "Found PSK KEX MODE" \
553             -s "No suitable PSK key exchange mode" \
554             -S "Pre shared key found" \
555             -s "No usable PSK or ticket" \
556             -S "key exchange mode: psk$"  \
557             -S "key exchange mode: psk_ephemeral"  \
558             -s "key exchange mode: ephemeral"
565 run_test    "TLS 1.3: G->m: ephemeral_all/all, good" \
567 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
568                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
571             -s "found psk key exchange modes extension" \
572             -s "found pre_shared_key extension" \
573             -s "Found PSK_EPHEMERAL KEX MODE" \
574             -S "Found PSK KEX MODE" \
575             -s "Pre shared key found" \
576             -S "No usable PSK or ticket" \
577             -S "key exchange mode: psk$"  \
578             -s "key exchange mode: psk_ephemeral"  \
579             -S "key exchange mode: ephemeral"
586 run_test    "TLS 1.3: G->m: ephemeral_all/all, good, key id mismatch, dhe." \
588 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
589                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
592             -s "found psk key exchange modes extension" \
593             -s "found pre_shared_key extension" \
594             -s "Found PSK_EPHEMERAL KEX MODE" \
595             -S "Found PSK KEX MODE" \
596             -s "No usable PSK or ticket" \
597             -S "key exchange mode: psk$"  \
598             -S "key exchange mode: psk_ephemeral"  \
599             -s "key exchange mode: ephemeral"
606 run_test    "TLS 1.3: G->m: ephemeral_all/all, fail, key material mismatch" \
608 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
609                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
612             -s "found psk key exchange modes extension" \
613             -s "found pre_shared_key extension" \
614             -s "Found PSK_EPHEMERAL KEX MODE" \
615             -S "Found PSK KEX MODE" \
616             -s "Invalid binder." \
617             -S "key exchange mode: psk$"  \
618             -S "key exchange mode: psk_ephemeral"  \
619             -S "key exchange mode: ephemeral"
626 run_test    "TLS 1.3: G->m: all/all, good" \
628 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
629                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
632             -s "found psk key exchange modes extension" \
633             -s "found pre_shared_key extension" \
634             -s "Found PSK_EPHEMERAL KEX MODE" \
635             -s "Found PSK KEX MODE" \
636             -s "Pre shared key found" \
637             -S "No usable PSK or ticket" \
638             -S "key exchange mode: psk$"  \
639             -s "key exchange mode: psk_ephemeral"  \
640             -S "key exchange mode: ephemeral"
647 run_test    "TLS 1.3: G->m: all/all, good, key id mismatch, dhe." \
649 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
650                          --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
653             -s "found psk key exchange modes extension" \
654             -s "found pre_shared_key extension" \
655             -s "Found PSK_EPHEMERAL KEX MODE" \
656             -s "Found PSK KEX MODE" \
657             -s "No usable PSK or ticket" \
658             -S "key exchange mode: psk$"  \
659             -S "key exchange mode: psk_ephemeral"  \
660             -s "key exchange mode: ephemeral"
667 run_test    "TLS 1.3: G->m: all/all, fail, key material mismatch" \
669 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
670                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
673             -s "found psk key exchange modes extension" \
674             -s "found pre_shared_key extension" \
675             -s "Found PSK_EPHEMERAL KEX MODE" \
676             -s "Found PSK KEX MODE" \
677             -s "Invalid binder." \
678             -S "key exchange mode: psk$"  \
679             -S "key exchange mode: psk_ephemeral"  \
680             -S "key exchange mode: ephemeral"
687 run_test    "TLS 1.3: G->m: psk_or_ephemeral/all, good" \
689 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
690                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
693             -s "found psk key exchange modes extension" \
694             -s "found pre_shared_key extension" \
695             -S "Found PSK_EPHEMERAL KEX MODE" \
696             -s "Found PSK KEX MODE" \
697             -s "Pre shared key found" \
698             -S "No usable PSK or ticket" \
699             -S "key exchange mode: psk$"  \
700             -S "key exchange mode: psk_ephemeral"  \
701             -s "key exchange mode: ephemeral"
708 run_test    "TLS 1.3: G->m: psk_or_ephemeral/all, fail, key material mismatch" \
710 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
711                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
714             -s "found psk key exchange modes extension" \
715             -s "found pre_shared_key extension" \
716             -S "Found PSK_EPHEMERAL KEX MODE" \
717             -s "Found PSK KEX MODE" \
718             -s "Invalid binder." \
719             -S "key exchange mode: psk$"  \
720             -S "key exchange mode: psk_ephemeral"  \
721             -S "key exchange mode: ephemeral"
727 run_test    "TLS 1.3: G->m: ephemeral_all/psk_or_ephemeral, good" \
729 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
730                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
733             -s "found psk key exchange modes extension" \
734             -s "found pre_shared_key extension" \
735             -s "Found PSK_EPHEMERAL KEX MODE" \
736             -S "Found PSK KEX MODE" \
737             -s "No suitable PSK key exchange mode" \
738             -S "Pre shared key found" \
739             -s "No usable PSK or ticket" \
740             -S "key exchange mode: psk$"  \
741             -S "key exchange mode: psk_ephemeral"  \
742             -s "key exchange mode: ephemeral"
748 run_test    "TLS 1.3: G->m: all/psk_or_ephemeral, good" \
750 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
751                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
754             -s "found psk key exchange modes extension" \
755             -s "found pre_shared_key extension" \
756             -s "Found PSK_EPHEMERAL KEX MODE" \
757             -s "Found PSK KEX MODE" \
758             -s "Pre shared key found" \
759             -S "No usable PSK or ticket" \
760             -S "key exchange mode: psk$"  \
761             -S "key exchange mode: psk_ephemeral"  \
762             -s "key exchange mode: ephemeral"
768 run_test    "TLS 1.3: G->m: all/psk_or_ephemeral, fail, key material mismatch" \
770 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
771                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
774             -s "found psk key exchange modes extension" \
775             -s "found pre_shared_key extension" \
776             -s "Found PSK_EPHEMERAL KEX MODE" \
777             -s "Found PSK KEX MODE" \
778             -s "Invalid binder." \
779             -S "key exchange mode: psk$"  \
780             -S "key exchange mode: psk_ephemeral"  \
781             -S "key exchange mode: ephemeral"
787 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, good" \
789 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
790                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
793             -s "found psk key exchange modes extension" \
794             -s "found pre_shared_key extension" \
795             -S "Found PSK_EPHEMERAL KEX MODE" \
796             -s "Found PSK KEX MODE" \
797             -s "Pre shared key found" \
798             -S "No usable PSK or ticket" \
799             -S "key exchange mode: psk$"  \
800             -S "key exchange mode: psk_ephemeral"  \
801             -s "key exchange mode: ephemeral"
807 run_test    "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, fail, key material mismatch" \
809 …     "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
810                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
813             -s "found psk key exchange modes extension" \
814             -s "found pre_shared_key extension" \
815             -S "Found PSK_EPHEMERAL KEX MODE" \
816             -s "Found PSK KEX MODE" \
817             -s "Invalid binder." \
818             -S "key exchange mode: psk$"  \
819             -S "key exchange mode: psk_ephemeral"  \
820             -S "key exchange mode: ephemeral"
826 run_test    "TLS 1.3: G->m: psk_ephemeral group(secp256r1) check, good" \
828 …"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROU…
829                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
832             -s "write selected_group: secp256r1" \
833             -S "key exchange mode: psk$"  \
834             -s "key exchange mode: psk_ephemeral"  \
835             -S "key exchange mode: ephemeral"
841 run_test    "TLS 1.3: G->m: psk_ephemeral group(secp384r1) check, good" \
843 …"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROU…
844                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
847             -s "write selected_group: secp384r1" \
848             -S "key exchange mode: psk$"  \
849             -s "key exchange mode: psk_ephemeral"  \
850             -S "key exchange mode: ephemeral"
856 run_test    "TLS 1.3: G->m: psk_ephemeral group(secp521r1) check, good" \
858 …"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROU…
859                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
862             -s "write selected_group: secp521r1" \
863             -S "key exchange mode: psk$"  \
864             -s "key exchange mode: psk_ephemeral"  \
865             -S "key exchange mode: ephemeral"
871 run_test    "TLS 1.3: G->m: psk_ephemeral group(x25519) check, good" \
873 …"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROU…
874                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
877             -s "write selected_group: x25519" \
878             -S "key exchange mode: psk$"  \
879             -s "key exchange mode: psk_ephemeral"  \
880             -S "key exchange mode: ephemeral"
886 run_test    "TLS 1.3: G->m: psk_ephemeral group(x448) check, good" \
888 …"$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROU…
889                          --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
892             -s "write selected_group: x448" \
893             -S "key exchange mode: psk$"  \
894             -s "key exchange mode: psk_ephemeral"  \
895             -S "key exchange mode: ephemeral"
900 run_test    "TLS 1.3: O->m: ephemeral_all/psk, fail, no common kex mode" \
902             "$O_NEXT_CLI -tls1_3 -msg   \
903                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
905             -s "found psk key exchange modes extension" \
906             -s "found pre_shared_key extension" \
907             -s "Found PSK_EPHEMERAL KEX MODE" \
908             -S "Found PSK KEX MODE" \
909             -S "key exchange mode: psk$"  \
910             -S "key exchange mode: psk_ephemeral"  \
911             -S "key exchange mode: ephemeral"
916 run_test    "TLS 1.3: O->m: all/psk, good" \
918             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
919                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
921             -s "found psk key exchange modes extension" \
922             -s "found pre_shared_key extension" \
923             -s "Found PSK_EPHEMERAL KEX MODE" \
924             -s "Found PSK KEX MODE" \
925             -s "Pre shared key found" \
926             -S "No usable PSK or ticket" \
927             -s "key exchange mode: psk$"  \
928             -S "key exchange mode: psk_ephemeral"  \
929             -S "key exchange mode: ephemeral"
934 run_test    "TLS 1.3: O->m: all/psk, fail, key id mismatch" \
936             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
937                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
939             -s "found psk key exchange modes extension" \
940             -s "found pre_shared_key extension" \
941             -s "Found PSK_EPHEMERAL KEX MODE" \
942             -s "Found PSK KEX MODE" \
943             -s "No usable PSK or ticket" \
944             -S "key exchange mode: psk$"  \
945             -S "key exchange mode: psk_ephemeral"  \
946             -S "key exchange mode: ephemeral"
951 run_test    "TLS 1.3: O->m: all/psk, fail, key material mismatch" \
953             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
954                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
956             -s "found psk key exchange modes extension" \
957             -s "found pre_shared_key extension" \
958             -s "Found PSK_EPHEMERAL KEX MODE" \
959             -s "Found PSK KEX MODE" \
960             -s "Invalid binder." \
961             -S "key exchange mode: psk$"  \
962             -S "key exchange mode: psk_ephemeral"  \
963             -S "key exchange mode: ephemeral"
968 run_test    "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, good" \
970             "$O_NEXT_CLI -tls1_3 -msg   \
971                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
973             -s "found psk key exchange modes extension" \
974             -s "found pre_shared_key extension" \
975             -s "Found PSK_EPHEMERAL KEX MODE" \
976             -S "Found PSK KEX MODE" \
977             -s "Pre shared key found" \
978             -S "No usable PSK or ticket" \
979             -S "key exchange mode: psk$"  \
980             -s "key exchange mode: psk_ephemeral"  \
981             -S "key exchange mode: ephemeral"
986 run_test    "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
988             "$O_NEXT_CLI -tls1_3 -msg   \
989                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
991             -s "found psk key exchange modes extension" \
992             -s "found pre_shared_key extension" \
993             -s "Found PSK_EPHEMERAL KEX MODE" \
994             -S "Found PSK KEX MODE" \
995             -s "No usable PSK or ticket" \
996             -S "key exchange mode: psk$"  \
997             -S "key exchange mode: psk_ephemeral"  \
998             -S "key exchange mode: ephemeral"
1003 run_test    "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
1005             "$O_NEXT_CLI -tls1_3 -msg   \
1006                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1008             -s "found psk key exchange modes extension" \
1009             -s "found pre_shared_key extension" \
1010             -s "Found PSK_EPHEMERAL KEX MODE" \
1011             -S "Found PSK KEX MODE" \
1012             -s "Invalid binder." \
1013             -S "key exchange mode: psk$"  \
1014             -S "key exchange mode: psk_ephemeral"  \
1015             -S "key exchange mode: ephemeral"
1020 run_test    "TLS 1.3: O->m: all/psk_ephemeral, good" \
1022             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1023                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1025             -s "found psk key exchange modes extension" \
1026             -s "found pre_shared_key extension" \
1027             -s "Found PSK_EPHEMERAL KEX MODE" \
1028             -s "Found PSK KEX MODE" \
1029             -s "Pre shared key found" \
1030             -S "No usable PSK or ticket" \
1031             -S "key exchange mode: psk$"  \
1032             -s "key exchange mode: psk_ephemeral"  \
1033             -S "key exchange mode: ephemeral"
1038 run_test    "TLS 1.3: O->m: all/psk_ephemeral, fail, key id mismatch" \
1040             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1041                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1043             -s "found psk key exchange modes extension" \
1044             -s "found pre_shared_key extension" \
1045             -s "Found PSK_EPHEMERAL KEX MODE" \
1046             -s "Found PSK KEX MODE" \
1047             -s "No usable PSK or ticket" \
1048             -S "key exchange mode: psk$"  \
1049             -S "key exchange mode: psk_ephemeral"  \
1050             -S "key exchange mode: ephemeral"
1055 run_test    "TLS 1.3: O->m: all/psk_ephemeral, fail, key material mismatch" \
1057             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1058                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1060             -s "found psk key exchange modes extension" \
1061             -s "found pre_shared_key extension" \
1062             -s "Found PSK_EPHEMERAL KEX MODE" \
1063             -s "Found PSK KEX MODE" \
1064             -s "Invalid binder." \
1065             -S "key exchange mode: psk$"  \
1066             -S "key exchange mode: psk_ephemeral"  \
1067             -S "key exchange mode: ephemeral"
1073 run_test    "TLS 1.3: O->m: ephemeral_all/psk_all, good" \
1075             "$O_NEXT_CLI -tls1_3 -msg   \
1076                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1078             -s "found psk key exchange modes extension" \
1079             -s "found pre_shared_key extension" \
1080             -s "Found PSK_EPHEMERAL KEX MODE" \
1081             -S "Found PSK KEX MODE" \
1082             -s "Pre shared key found" \
1083             -S "No usable PSK or ticket" \
1084             -S "key exchange mode: psk$"  \
1085             -s "key exchange mode: psk_ephemeral"  \
1086             -S "key exchange mode: ephemeral"
1092 run_test    "TLS 1.3: O->m: ephemeral_all/psk_all, fail, key id mismatch" \
1094             "$O_NEXT_CLI -tls1_3 -msg   \
1095                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1097             -s "found psk key exchange modes extension" \
1098             -s "found pre_shared_key extension" \
1099             -s "Found PSK_EPHEMERAL KEX MODE" \
1100             -S "Found PSK KEX MODE" \
1101             -s "No usable PSK or ticket" \
1102             -S "key exchange mode: psk$"  \
1103             -S "key exchange mode: psk_ephemeral"  \
1104             -S "key exchange mode: ephemeral"
1110 run_test    "TLS 1.3: O->m: ephemeral_all/psk_all, fail, key material mismatch" \
1112             "$O_NEXT_CLI -tls1_3 -msg   \
1113                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1115             -s "found psk key exchange modes extension" \
1116             -s "found pre_shared_key extension" \
1117             -s "Found PSK_EPHEMERAL KEX MODE" \
1118             -S "Found PSK KEX MODE" \
1119             -s "Invalid binder." \
1120             -S "key exchange mode: psk$"  \
1121             -S "key exchange mode: psk_ephemeral"  \
1122             -S "key exchange mode: ephemeral"
1128 run_test    "TLS 1.3: O->m: all/psk_all, good" \
1130             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1131                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1133             -s "found psk key exchange modes extension" \
1134             -s "found pre_shared_key extension" \
1135             -s "Found PSK_EPHEMERAL KEX MODE" \
1136             -s "Found PSK KEX MODE" \
1137             -s "Pre shared key found" \
1138             -S "No usable PSK or ticket" \
1139             -S "key exchange mode: psk$"  \
1140             -s "key exchange mode: psk_ephemeral"  \
1141             -S "key exchange mode: ephemeral"
1147 run_test    "TLS 1.3: O->m: all/psk_all, fail, key id mismatch" \
1149             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1150                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1152             -s "found psk key exchange modes extension" \
1153             -s "found pre_shared_key extension" \
1154             -s "Found PSK_EPHEMERAL KEX MODE" \
1155             -s "Found PSK KEX MODE" \
1156             -s "No usable PSK or ticket" \
1157             -S "key exchange mode: psk$"  \
1158             -S "key exchange mode: psk_ephemeral"  \
1159             -S "key exchange mode: ephemeral"
1165 run_test    "TLS 1.3: O->m: all/psk_all, fail, key material mismatch" \
1167             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1168                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1170             -s "found psk key exchange modes extension" \
1171             -s "found pre_shared_key extension" \
1172             -s "Found PSK_EPHEMERAL KEX MODE" \
1173             -s "Found PSK KEX MODE" \
1174             -s "Invalid binder." \
1175             -S "key exchange mode: psk$"  \
1176             -S "key exchange mode: psk_ephemeral"  \
1177             -S "key exchange mode: ephemeral"
1183 run_test    "TLS 1.3: O->m: ephemeral_all/ephemeral_all, good" \
1185             "$O_NEXT_CLI -tls1_3 -msg   \
1186                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1188             -s "found psk key exchange modes extension" \
1189             -s "found pre_shared_key extension" \
1190             -s "Found PSK_EPHEMERAL KEX MODE" \
1191             -S "Found PSK KEX MODE" \
1192             -s "Pre shared key found" \
1193             -S "No usable PSK or ticket" \
1194             -S "key exchange mode: psk$"  \
1195             -s "key exchange mode: psk_ephemeral"  \
1196             -S "key exchange mode: ephemeral"
1202 run_test    "TLS 1.3: O->m: ephemeral_all/ephemeral_all, good, key id mismatch, dhe." \
1204             "$O_NEXT_CLI -tls1_3 -msg   \
1205                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1207             -s "found psk key exchange modes extension" \
1208             -s "found pre_shared_key extension" \
1209             -s "Found PSK_EPHEMERAL KEX MODE" \
1210             -S "Found PSK KEX MODE" \
1211             -s "No usable PSK or ticket" \
1212             -S "key exchange mode: psk$"  \
1213             -S "key exchange mode: psk_ephemeral"  \
1214             -s "key exchange mode: ephemeral"
1220 run_test    "TLS 1.3: O->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
1222             "$O_NEXT_CLI -tls1_3 -msg   \
1223                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1225             -s "found psk key exchange modes extension" \
1226             -s "found pre_shared_key extension" \
1227             -s "Found PSK_EPHEMERAL KEX MODE" \
1228             -S "Found PSK KEX MODE" \
1229             -s "Invalid binder." \
1230             -S "key exchange mode: psk$"  \
1231             -S "key exchange mode: psk_ephemeral"  \
1232             -S "key exchange mode: ephemeral"
1238 run_test    "TLS 1.3: O->m: all/ephemeral_all, good" \
1240             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1241                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1243             -s "found psk key exchange modes extension" \
1244             -s "found pre_shared_key extension" \
1245             -s "Found PSK_EPHEMERAL KEX MODE" \
1246             -s "Found PSK KEX MODE" \
1247             -s "Pre shared key found" \
1248             -S "No usable PSK or ticket" \
1249             -S "key exchange mode: psk$"  \
1250             -s "key exchange mode: psk_ephemeral"  \
1251             -S "key exchange mode: ephemeral"
1257 run_test    "TLS 1.3: O->m: all/ephemeral_all, good, key id mismatch, dhe." \
1259             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1260                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1262             -s "found psk key exchange modes extension" \
1263             -s "found pre_shared_key extension" \
1264             -s "Found PSK_EPHEMERAL KEX MODE" \
1265             -s "Found PSK KEX MODE" \
1266             -s "No usable PSK or ticket" \
1267             -S "key exchange mode: psk$"  \
1268             -S "key exchange mode: psk_ephemeral"  \
1269             -s "key exchange mode: ephemeral"
1275 run_test    "TLS 1.3: O->m: all/ephemeral_all, fail, key material mismatch" \
1277             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1278                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1280             -s "found psk key exchange modes extension" \
1281             -s "found pre_shared_key extension" \
1282             -s "Found PSK_EPHEMERAL KEX MODE" \
1283             -s "Found PSK KEX MODE" \
1284             -s "Invalid binder." \
1285             -S "key exchange mode: psk$"  \
1286             -S "key exchange mode: psk_ephemeral"  \
1287             -S "key exchange mode: ephemeral"
1294 run_test    "TLS 1.3: O->m: ephemeral_all/all, good" \
1296             "$O_NEXT_CLI -tls1_3 -msg   \
1297                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1299             -s "found psk key exchange modes extension" \
1300             -s "found pre_shared_key extension" \
1301             -s "Found PSK_EPHEMERAL KEX MODE" \
1302             -S "Found PSK KEX MODE" \
1303             -s "Pre shared key found" \
1304             -S "No usable PSK or ticket" \
1305             -S "key exchange mode: psk$"  \
1306             -s "key exchange mode: psk_ephemeral"  \
1307             -S "key exchange mode: ephemeral"
1314 run_test    "TLS 1.3: O->m: ephemeral_all/all, good, key id mismatch, dhe." \
1316             "$O_NEXT_CLI -tls1_3 -msg   \
1317                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1319             -s "found psk key exchange modes extension" \
1320             -s "found pre_shared_key extension" \
1321             -s "Found PSK_EPHEMERAL KEX MODE" \
1322             -S "Found PSK KEX MODE" \
1323             -s "No usable PSK or ticket" \
1324             -S "key exchange mode: psk$"  \
1325             -S "key exchange mode: psk_ephemeral"  \
1326             -s "key exchange mode: ephemeral"
1333 run_test    "TLS 1.3: O->m: ephemeral_all/all, fail, key material mismatch" \
1335             "$O_NEXT_CLI -tls1_3 -msg   \
1336                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1338             -s "found psk key exchange modes extension" \
1339             -s "found pre_shared_key extension" \
1340             -s "Found PSK_EPHEMERAL KEX MODE" \
1341             -S "Found PSK KEX MODE" \
1342             -s "Invalid binder." \
1343             -S "key exchange mode: psk$"  \
1344             -S "key exchange mode: psk_ephemeral"  \
1345             -S "key exchange mode: ephemeral"
1352 run_test    "TLS 1.3: O->m: all/all, good" \
1354             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1355                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1357             -s "found psk key exchange modes extension" \
1358             -s "found pre_shared_key extension" \
1359             -s "Found PSK_EPHEMERAL KEX MODE" \
1360             -s "Found PSK KEX MODE" \
1361             -s "Pre shared key found" \
1362             -S "No usable PSK or ticket" \
1363             -S "key exchange mode: psk$"  \
1364             -s "key exchange mode: psk_ephemeral"  \
1365             -S "key exchange mode: ephemeral"
1372 run_test    "TLS 1.3: O->m: all/all, good, key id mismatch, dhe." \
1374             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1375                          -psk_identity wrong_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1377             -s "found psk key exchange modes extension" \
1378             -s "found pre_shared_key extension" \
1379             -s "Found PSK_EPHEMERAL KEX MODE" \
1380             -s "Found PSK KEX MODE" \
1381             -s "No usable PSK or ticket" \
1382             -S "key exchange mode: psk$"  \
1383             -S "key exchange mode: psk_ephemeral"  \
1384             -s "key exchange mode: ephemeral"
1391 run_test    "TLS 1.3: O->m: all/all, fail, key material mismatch" \
1393             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1394                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1396             -s "found psk key exchange modes extension" \
1397             -s "found pre_shared_key extension" \
1398             -s "Found PSK_EPHEMERAL KEX MODE" \
1399             -s "Found PSK KEX MODE" \
1400             -s "Invalid binder." \
1401             -S "key exchange mode: psk$"  \
1402             -S "key exchange mode: psk_ephemeral"  \
1403             -S "key exchange mode: ephemeral"
1409 run_test    "TLS 1.3: O->m: ephemeral_all/psk_or_ephemeral, good" \
1411             "$O_NEXT_CLI -tls1_3 -msg   \
1412                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1414             -s "found psk key exchange modes extension" \
1415             -s "found pre_shared_key extension" \
1416             -s "Found PSK_EPHEMERAL KEX MODE" \
1417             -S "Found PSK KEX MODE" \
1418             -s "No suitable PSK key exchange mode" \
1419             -S "Pre shared key found" \
1420             -s "No usable PSK or ticket" \
1421             -S "key exchange mode: psk$"  \
1422             -S "key exchange mode: psk_ephemeral"  \
1423             -s "key exchange mode: ephemeral"
1429 run_test    "TLS 1.3: O->m: all/psk_or_ephemeral, good" \
1431             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1432                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1434             -s "found psk key exchange modes extension" \
1435             -s "found pre_shared_key extension" \
1436             -s "Found PSK_EPHEMERAL KEX MODE" \
1437             -s "Found PSK KEX MODE" \
1438             -s "Pre shared key found" \
1439             -S "No usable PSK or ticket" \
1440             -S "key exchange mode: psk$"  \
1441             -S "key exchange mode: psk_ephemeral"  \
1442             -s "key exchange mode: ephemeral"
1448 run_test    "TLS 1.3: O->m: all/psk_or_ephemeral, fail, key material mismatch" \
1450             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex \
1451                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f71" \
1453             -s "found psk key exchange modes extension" \
1454             -s "found pre_shared_key extension" \
1455             -s "Found PSK_EPHEMERAL KEX MODE" \
1456             -s "Found PSK KEX MODE" \
1457             -s "Invalid binder." \
1458             -S "key exchange mode: psk$"  \
1459             -S "key exchange mode: psk_ephemeral"  \
1460             -S "key exchange mode: ephemeral"
1465 run_test    "TLS 1.3: O->m: psk_ephemeral group(secp256r1) check, good" \
1467             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex -groups P-256 \
1468                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1470             -s "write selected_group: secp256r1" \
1471             -S "key exchange mode: psk$"  \
1472             -s "key exchange mode: psk_ephemeral"  \
1473             -S "key exchange mode: ephemeral"
1478 run_test    "TLS 1.3: O->m: psk_ephemeral group(secp384r1) check, good" \
1480             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex -groups secp384r1 \
1481                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1483             -s "write selected_group: secp384r1" \
1484             -S "key exchange mode: psk$"  \
1485             -s "key exchange mode: psk_ephemeral"  \
1486             -S "key exchange mode: ephemeral"
1491 run_test    "TLS 1.3: O->m: psk_ephemeral group(secp521r1) check, good" \
1493             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex -groups secp521r1 \
1494                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1496             -s "write selected_group: secp521r1" \
1497             -S "key exchange mode: psk$"  \
1498             -s "key exchange mode: psk_ephemeral"  \
1499             -S "key exchange mode: ephemeral"
1504 run_test    "TLS 1.3: O->m: psk_ephemeral group(x25519) check, good" \
1506             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex -groups X25519 \
1507                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1509             -s "write selected_group: x25519" \
1510             -S "key exchange mode: psk$"  \
1511             -s "key exchange mode: psk_ephemeral"  \
1512             -S "key exchange mode: ephemeral"
1517 run_test    "TLS 1.3: O->m: psk_ephemeral group(x448) check, good" \
1519             "$O_NEXT_CLI -tls1_3 -msg  -allow_no_dhe_kex -groups X448 \
1520                          -psk_identity Client_identity  -psk 6162636465666768696a6b6c6d6e6f70" \
1522             -s "write selected_group: x448" \
1523             -S "key exchange mode: psk$"  \
1524             -s "key exchange mode: psk_ephemeral"  \
1525             -S "key exchange mode: ephemeral"
1530 run_test "TLS 1.3 O->m: psk_ephemeral group(secp256r1->secp384r1) check, good" \
1532 …O_NEXT_CLI_NO_CERT -tls1_3 -msg -allow_no_dhe_kex -psk_identity Client_identity -psk 6162636465666…
1534          -s "write selected_group: secp384r1" \
1535          -s "HRR selected_group: secp384r1" \
1536          -S "key exchange mode: psk$" \
1537          -s "key exchange mode: psk_ephemeral" \
1538          -S "key exchange mode: ephemeral"
1546 run_test "TLS 1.3 G->m: psk_ephemeral group(secp256r1->secp384r1) check, good" \
1548 …--debug=4 --single-key-share --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TL…
1550          -s "write selected_group: secp384r1" \
1551          -s "HRR selected_group: secp384r1" \
1552          -S "key exchange mode: psk$" \
1553          -s "key exchange mode: psk_ephemeral" \
1554          -S "key exchange mode: ephemeral"
1559 # MbedTls->MbedTLS kinds of tls13_kex_modes
1565 run_test    "TLS 1.3: m->m: psk/psk, good" \
1569             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1570             -c "client hello, adding psk_key_exchange_modes extension" \
1571             -c "client hello, adding PSK binder list" \
1572             -c "Selected key exchange mode: psk$" \
1573             -c "HTTP/1.0 200 OK"
1579 run_test    "TLS 1.3: m->m: psk/psk, fail, key id mismatch" \
1583             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1584             -c "client hello, adding psk_key_exchange_modes extension" \
1585             -c "client hello, adding PSK binder list" \
1586             -s "No usable PSK or ticket"
1592 run_test    "TLS 1.3: m->m: psk/psk, fail, key material mismatch" \
1596             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1597             -c "client hello, adding psk_key_exchange_modes extension" \
1598             -c "client hello, adding PSK binder list" \
1599             -s "Invalid binder."
1606 run_test    "TLS 1.3: m->m: psk/psk_ephemeral, fail - no common kex mode" \
1610             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1611             -c "client hello, adding psk_key_exchange_modes extension" \
1612             -c "client hello, adding PSK binder list" \
1613             -s "ClientHello message misses mandatory extensions."
1620 run_test    "TLS 1.3: m->m: psk/ephemeral, fail - no common kex mode" \
1624             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1625             -c "client hello, adding psk_key_exchange_modes extension" \
1626             -c "client hello, adding PSK binder list" \
1627             -s "ClientHello message misses mandatory extensions."
1635 run_test    "TLS 1.3: m->m: psk/ephemeral_all, fail - no common kex mode" \
1639             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1640             -c "client hello, adding psk_key_exchange_modes extension" \
1641             -c "client hello, adding PSK binder list" \
1642             -s "ClientHello message misses mandatory extensions."
1649 run_test    "TLS 1.3: m->m: psk/psk_all, good" \
1653             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1654             -c "client hello, adding psk_key_exchange_modes extension" \
1655             -c "client hello, adding PSK binder list" \
1656             -c "Selected key exchange mode: psk$" \
1657             -c "HTTP/1.0 200 OK"
1664 run_test    "TLS 1.3: m->m: psk/psk_all, fail, key id mismatch" \
1668             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1669             -c "client hello, adding psk_key_exchange_modes extension" \
1670             -c "client hello, adding PSK binder list" \
1671             -s "No usable PSK or ticket" \
1672             -s "ClientHello message misses mandatory extensions."
1679 run_test    "TLS 1.3: m->m: psk/psk_all, fail, key material mismatch" \
1683             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1684             -c "client hello, adding psk_key_exchange_modes extension" \
1685             -c "client hello, adding PSK binder list" \
1686             -s "Invalid binder."
1694 run_test    "TLS 1.3: m->m: psk/all, good" \
1698             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1699             -c "client hello, adding psk_key_exchange_modes extension" \
1700             -c "client hello, adding PSK binder list" \
1701             -c "Selected key exchange mode: psk$" \
1702             -c "HTTP/1.0 200 OK"
1710 run_test    "TLS 1.3: m->m: psk/all, fail, key id mismatch" \
1714             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1715             -c "client hello, adding psk_key_exchange_modes extension" \
1716             -c "client hello, adding PSK binder list" \
1717             -s "No usable PSK or ticket" \
1718             -s "ClientHello message misses mandatory extensions."
1726 run_test    "TLS 1.3: m->m: psk/all, fail, key material mismatch" \
1730             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1731             -c "client hello, adding psk_key_exchange_modes extension" \
1732             -c "client hello, adding PSK binder list" \
1733             -s "Invalid binder."
1741 run_test    "TLS 1.3: m->m: psk_ephemeral/psk, fail - no common kex mode" \
1745             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1746             -c "client hello, adding psk_key_exchange_modes extension" \
1747             -c "client hello, adding PSK binder list" \
1748             -s "ClientHello message misses mandatory extensions."
1754 run_test    "TLS 1.3: m->m: psk_ephemeral/psk_ephemeral, good" \
1758             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1759             -c "client hello, adding psk_key_exchange_modes extension" \
1760             -c "client hello, adding PSK binder list" \
1761             -c "Selected key exchange mode: psk_ephemeral" \
1762             -c "HTTP/1.0 200 OK"
1768 run_test    "TLS 1.3: m->m: psk_ephemeral/psk_ephemeral, fail, key id mismatch" \
1772             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1773             -c "client hello, adding psk_key_exchange_modes extension" \
1774             -c "client hello, adding PSK binder list" \
1775             -s "No usable PSK or ticket" \
1776             -s "ClientHello message misses mandatory extensions."
1782 run_test    "TLS 1.3: m->m: psk_ephemeral/psk_ephemeral, fail, key material mismatch" \
1786             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1787             -c "client hello, adding psk_key_exchange_modes extension" \
1788             -c "client hello, adding PSK binder list" \
1789             -s "Invalid binder."
1797 run_test    "TLS 1.3: m->m: psk_ephemeral/ephemeral, fail - no common kex mode" \
1801             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1802             -c "client hello, adding psk_key_exchange_modes extension" \
1803             -c "client hello, adding PSK binder list"
1810 run_test    "TLS 1.3: m->m: psk_ephemeral/ephemeral_all, good" \
1814             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1815             -c "client hello, adding psk_key_exchange_modes extension" \
1816             -c "client hello, adding PSK binder list" \
1817             -c "Selected key exchange mode: psk_ephemeral" \
1818             -c "HTTP/1.0 200 OK"
1826 run_test    "TLS 1.3: m->m: psk_ephemeral/ephemeral_all, fail, key id mismatch" \
1830             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1831             -c "client hello, adding psk_key_exchange_modes extension" \
1832             -c "client hello, adding PSK binder list" \
1833             -s "No usable PSK or ticket"
1840 run_test    "TLS 1.3: m->m: psk_ephemeral/ephemeral_all, fail, key material mismatch" \
1844             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1845             -c "client hello, adding psk_key_exchange_modes extension" \
1846             -c "client hello, adding PSK binder list" \
1847             -s "Invalid binder."
1854 run_test    "TLS 1.3: m->m: psk_ephemeral/psk_all, good" \
1858             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1859             -c "client hello, adding psk_key_exchange_modes extension" \
1860             -c "client hello, adding PSK binder list" \
1861             -c "Selected key exchange mode: psk_ephemeral" \
1862             -c "HTTP/1.0 200 OK"
1869 run_test    "TLS 1.3: m->m: psk_ephemeral/psk_all, fail, key id mismatch" \
1873             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1874             -c "client hello, adding psk_key_exchange_modes extension" \
1875             -c "client hello, adding PSK binder list" \
1876             -s "No usable PSK or ticket" \
1877             -s "ClientHello message misses mandatory extensions."
1884 run_test    "TLS 1.3: m->m: psk_ephemeral/psk_all, fail, key material mismatch" \
1888             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1889             -c "client hello, adding psk_key_exchange_modes extension" \
1890             -c "client hello, adding PSK binder list" \
1891             -s "Invalid binder."
1899 run_test    "TLS 1.3: m->m: psk_ephemeral/all, good" \
1903             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1904             -c "client hello, adding psk_key_exchange_modes extension" \
1905             -c "client hello, adding PSK binder list" \
1906             -c "Selected key exchange mode: psk_ephemeral" \
1907             -c "HTTP/1.0 200 OK"
1915 run_test    "TLS 1.3: m->m: psk_ephemeral/all, fail, key id mismatch" \
1919             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1920             -c "client hello, adding psk_key_exchange_modes extension" \
1921             -c "client hello, adding PSK binder list" \
1922             -s "No usable PSK or ticket" \
1930 run_test    "TLS 1.3: m->m: psk_ephemeral/all, fail, key material mismatch" \
1934             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1935             -c "client hello, adding psk_key_exchange_modes extension" \
1936             -c "client hello, adding PSK binder list" \
1937             -s "Invalid binder."
1945 run_test    "TLS 1.3: m->m: ephemeral/psk, fail - no common kex mode" \
1949             -s "ClientHello message misses mandatory extensions."
1956 run_test    "TLS 1.3: m->m: ephemeral/psk_ephemeral, fail - no common kex mode" \
1960             -s "ClientHello message misses mandatory extensions."
1966 run_test    "TLS 1.3: m->m: ephemeral/ephemeral, good" \
1970             -c "Selected key exchange mode: ephemeral" \
1971             -c "HTTP/1.0 200 OK"
1978 run_test    "TLS 1.3: m->m: ephemeral/ephemeral_all, good" \
1982             -c "Selected key exchange mode: ephemeral" \
1983             -c "HTTP/1.0 200 OK"
1991 run_test    "TLS 1.3: m->m: ephemeral/psk_all, fail - no common kex mode" \
1995             -s "ClientHello message misses mandatory extensions."
2003 run_test    "TLS 1.3: m->m: ephemeral/all, good" \
2007             -c "Selected key exchange mode: ephemeral" \
2008             -c "HTTP/1.0 200 OK"
2017 run_test    "TLS 1.3: m->m: ephemeral_all/psk, fail - no common kex mode" \
2021             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2022             -c "client hello, adding psk_key_exchange_modes extension" \
2023             -c "client hello, adding PSK binder list" \
2024             -s "ClientHello message misses mandatory extensions."
2031 run_test    "TLS 1.3: m->m: ephemeral_all/psk_ephemeral, good" \
2035             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2036             -c "client hello, adding psk_key_exchange_modes extension" \
2037             -c "client hello, adding PSK binder list" \
2038             -c "Selected key exchange mode: psk_ephemeral" \
2039             -c "HTTP/1.0 200 OK"
2046 run_test    "TLS 1.3: m->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
2050             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2051             -c "client hello, adding psk_key_exchange_modes extension" \
2052             -c "client hello, adding PSK binder list" \
2053             -s "No usable PSK or ticket"
2060 run_test    "TLS 1.3: m->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
2064             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2065             -c "client hello, adding psk_key_exchange_modes extension" \
2066             -c "client hello, adding PSK binder list" \
2067             -s "Invalid binder."
2074 run_test    "TLS 1.3: m->m: ephemeral_all/ephemeral, good" \
2078             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2079             -c "client hello, adding psk_key_exchange_modes extension" \
2080             -c "client hello, adding PSK binder list" \
2081             -s "key exchange mode: ephemeral" \
2082             -c "Selected key exchange mode: ephemeral" \
2083             -c "HTTP/1.0 200 OK"
2090 run_test    "TLS 1.3: m->m: ephemeral_all/ephemeral_all, good" \
2094             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2095             -c "client hello, adding psk_key_exchange_modes extension" \
2096             -c "client hello, adding PSK binder list" \
2097             -c "Selected key exchange mode: psk_ephemeral" \
2098             -c "HTTP/1.0 200 OK"
2105 run_test    "TLS 1.3: m->m: ephemeral_all/ephemeral_all,good,key id mismatch,fallback" \
2109             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2110             -c "client hello, adding psk_key_exchange_modes extension" \
2111             -c "client hello, adding PSK binder list" \
2112             -s "No usable PSK or ticket" \
2113             -s "key exchange mode: ephemeral"
2120 run_test    "TLS 1.3: m->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
2124             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2125             -c "client hello, adding psk_key_exchange_modes extension" \
2126             -c "client hello, adding PSK binder list" \
2127             -s "Invalid binder."
2135 run_test    "TLS 1.3: m->m: ephemeral_all/psk_all, good" \
2139             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2140             -c "client hello, adding psk_key_exchange_modes extension" \
2141             -c "client hello, adding PSK binder list" \
2142             -c "Selected key exchange mode: psk_ephemeral" \
2143             -c "HTTP/1.0 200 OK"
2151 run_test    "TLS 1.3: m->m: ephemeral_all/psk_all, fail, key id mismatch" \
2155             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2156             -c "client hello, adding psk_key_exchange_modes extension" \
2157             -c "client hello, adding PSK binder list" \
2158             -s "No usable PSK or ticket" \
2159             -s "ClientHello message misses mandatory extensions."
2167 run_test    "TLS 1.3: m->m: ephemeral_all/psk_all, fail, key material mismatch" \
2171             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2172             -c "client hello, adding psk_key_exchange_modes extension" \
2173             -c "client hello, adding PSK binder list" \
2174             -s "Invalid binder."
2182 run_test    "TLS 1.3: m->m: ephemeral_all/all, good" \
2186             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2187             -c "client hello, adding psk_key_exchange_modes extension" \
2188             -c "client hello, adding PSK binder list" \
2189             -c "Selected key exchange mode: psk_ephemeral" \
2190             -c "HTTP/1.0 200 OK"
2198 run_test    "TLS 1.3: m->m: ephemeral_all/all, good, key id mismatch, fallback" \
2202             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2203             -c "client hello, adding psk_key_exchange_modes extension" \
2204             -c "client hello, adding PSK binder list" \
2205             -s "No usable PSK or ticket" \
2206             -s "key exchange mode: ephemeral"
2214 run_test    "TLS 1.3: m->m: ephemeral_all/all, fail, key material mismatch" \
2218             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2219             -c "client hello, adding psk_key_exchange_modes extension" \
2220             -c "client hello, adding PSK binder list" \
2221             -s "Invalid binder."
2229 run_test    "TLS 1.3: m->m: psk_all/psk, good" \
2233             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2234             -c "client hello, adding psk_key_exchange_modes extension" \
2235             -c "client hello, adding PSK binder list" \
2236             -c "Selected key exchange mode: psk$" \
2237             -c "HTTP/1.0 200 OK"
2244 run_test    "TLS 1.3: m->m: psk_all/psk, fail, key id mismatch" \
2248             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2249             -c "client hello, adding psk_key_exchange_modes extension" \
2250             -c "client hello, adding PSK binder list" \
2251             -s "ClientHello message misses mandatory extensions."
2258 run_test    "TLS 1.3: m->m: psk_all/psk, fail, key material mismatch" \
2262             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2263             -c "client hello, adding psk_key_exchange_modes extension" \
2264             -c "client hello, adding PSK binder list" \
2265             -s "Invalid binder."
2272 run_test    "TLS 1.3: m->m: psk_all/psk_ephemeral, good" \
2276             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2277             -c "client hello, adding psk_key_exchange_modes extension" \
2278             -c "client hello, adding PSK binder list" \
2279             -c "Selected key exchange mode: psk_ephemeral" \
2280             -c "HTTP/1.0 200 OK"
2287 run_test    "TLS 1.3: m->m: psk_all/psk_ephemeral, fail, key id mismatch" \
2291             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2292             -c "client hello, adding psk_key_exchange_modes extension" \
2293             -c "client hello, adding PSK binder list" \
2294             -s "No usable PSK or ticket" \
2295             -s "ClientHello message misses mandatory extensions."
2302 run_test    "TLS 1.3: m->m: psk_all/psk_ephemeral, fail, key material mismatch" \
2306             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2307             -c "client hello, adding psk_key_exchange_modes extension" \
2308             -c "client hello, adding PSK binder list" \
2309             -s "Invalid binder."
2317 run_test    "TLS 1.3: m->m: psk_all/ephemeral, fail - no common kex mode" \
2321             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2322             -c "client hello, adding psk_key_exchange_modes extension" \
2323             -c "client hello, adding PSK binder list"
2331 run_test    "TLS 1.3: m->m: psk_all/ephemeral_all, good" \
2335             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2336             -c "client hello, adding psk_key_exchange_modes extension" \
2337             -c "client hello, adding PSK binder list" \
2338             -c "Selected key exchange mode: psk_ephemeral" \
2339             -c "HTTP/1.0 200 OK"
2347 run_test    "TLS 1.3: m->m: psk_all/ephemeral_all, fail, key id mismatch" \
2351             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2352             -c "client hello, adding psk_key_exchange_modes extension" \
2353             -c "client hello, adding PSK binder list" \
2354             -s "No usable PSK or ticket"
2362 run_test    "TLS 1.3: m->m: psk_all/ephemeral_all, fail, key material mismatch" \
2366             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2367             -c "client hello, adding psk_key_exchange_modes extension" \
2368             -c "client hello, adding PSK binder list" \
2369             -s "Invalid binder."
2376 run_test    "TLS 1.3: m->m: psk_all/psk_all, good" \
2380             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2381             -c "client hello, adding psk_key_exchange_modes extension" \
2382             -c "client hello, adding PSK binder list" \
2383             -c "Selected key exchange mode: psk_ephemeral" \
2384             -c "HTTP/1.0 200 OK"
2391 run_test    "TLS 1.3: m->m: psk_all/psk_all, fail, key id mismatch" \
2395             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2396             -c "client hello, adding psk_key_exchange_modes extension" \
2397             -c "client hello, adding PSK binder list" \
2398             -s "No usable PSK or ticket" \
2399             -s "ClientHello message misses mandatory extensions."
2406 run_test    "TLS 1.3: m->m: psk_all/psk_all, fail, key material mismatch" \
2410             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2411             -c "client hello, adding psk_key_exchange_modes extension" \
2412             -c "client hello, adding PSK binder list" \
2413             -s "Invalid binder."
2421 run_test    "TLS 1.3: m->m: psk_all/all, good" \
2425             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2426             -c "client hello, adding psk_key_exchange_modes extension" \
2427             -c "client hello, adding PSK binder list" \
2428             -c "Selected key exchange mode: psk_ephemeral" \
2429             -c "HTTP/1.0 200 OK"
2437 run_test    "TLS 1.3: m->m: psk_all/all, fail, key id mismatch" \
2441             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2442             -c "client hello, adding psk_key_exchange_modes extension" \
2443             -c "client hello, adding PSK binder list" \
2444             -s "No usable PSK or ticket"
2452 run_test    "TLS 1.3: m->m: psk_all/all, fail, key material mismatch" \
2456             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2457             -c "client hello, adding psk_key_exchange_modes extension" \
2458             -c "client hello, adding PSK binder list" \
2459             -s "Invalid binder."
2468 run_test    "TLS 1.3: m->m: all/psk, good" \
2472             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2473             -c "client hello, adding psk_key_exchange_modes extension" \
2474             -c "client hello, adding PSK binder list" \
2475             -c "Selected key exchange mode: psk$" \
2476             -c "HTTP/1.0 200 OK"
2484 run_test    "TLS 1.3: m->m: all/psk, fail, key id mismatch" \
2488             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2489             -c "client hello, adding psk_key_exchange_modes extension" \
2490             -c "client hello, adding PSK binder list" \
2491             -s "No usable PSK or ticket" \
2492             -s "ClientHello message misses mandatory extensions."
2500 run_test    "TLS 1.3: m->m: all/psk, fail, key material mismatch" \
2504             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2505             -c "client hello, adding psk_key_exchange_modes extension" \
2506             -c "client hello, adding PSK binder list" \
2507             -s "Invalid binder."
2515 run_test    "TLS 1.3: m->m: all/psk_ephemeral, good" \
2519             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2520             -c "client hello, adding psk_key_exchange_modes extension" \
2521             -c "client hello, adding PSK binder list" \
2522             -c "Selected key exchange mode: psk_ephemeral" \
2523             -c "HTTP/1.0 200 OK"
2531 run_test    "TLS 1.3: m->m: all/psk_ephemeral, fail, key id mismatch" \
2535             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2536             -c "client hello, adding psk_key_exchange_modes extension" \
2537             -c "client hello, adding PSK binder list" \
2538             -s "No usable PSK or ticket" \
2539             -s "ClientHello message misses mandatory extensions."
2547 run_test    "TLS 1.3: m->m: all/psk_ephemeral, fail, key material mismatch" \
2551             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2552             -c "client hello, adding psk_key_exchange_modes extension" \
2553             -c "client hello, adding PSK binder list" \
2554             -s "Invalid binder."
2562 run_test    "TLS 1.3: m->m: all/ephemeral, good" \
2566             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2567             -c "client hello, adding psk_key_exchange_modes extension" \
2568             -c "client hello, adding PSK binder list" \
2569             -c "Selected key exchange mode: ephemeral" \
2570             -c "HTTP/1.0 200 OK"
2578 run_test    "TLS 1.3: m->m: all/ephemeral_all, good" \
2582             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2583             -c "client hello, adding psk_key_exchange_modes extension" \
2584             -c "client hello, adding PSK binder list" \
2585             -c "Selected key exchange mode: psk_ephemeral" \
2586             -c "HTTP/1.0 200 OK"
2594 run_test    "TLS 1.3: m->m: all/ephemeral_all, good, key id mismatch, fallback" \
2598             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2599             -c "client hello, adding psk_key_exchange_modes extension" \
2600             -c "client hello, adding PSK binder list" \
2601             -s "No usable PSK or ticket" \
2602             -c "Selected key exchange mode: ephemeral" \
2603             -c "HTTP/1.0 200 OK"
2611 run_test    "TLS 1.3: m->m: all/ephemeral_all, fail, key material mismatch" \
2615             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2616             -c "client hello, adding psk_key_exchange_modes extension" \
2617             -c "client hello, adding PSK binder list" \
2618             -s "Invalid binder."
2626 run_test    "TLS 1.3: m->m: all/psk_all, good" \
2630             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2631             -c "client hello, adding psk_key_exchange_modes extension" \
2632             -c "client hello, adding PSK binder list" \
2633             -c "Selected key exchange mode: psk_ephemeral" \
2634             -c "HTTP/1.0 200 OK"
2642 run_test    "TLS 1.3: m->m: all/psk_all, fail, key id mismatch" \
2646             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2647             -c "client hello, adding psk_key_exchange_modes extension" \
2648             -c "client hello, adding PSK binder list" \
2649             -s "No usable PSK or ticket" \
2650             -s "ClientHello message misses mandatory extensions."
2658 run_test    "TLS 1.3: m->m: all/psk_all, fail, key material mismatch" \
2662             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2663             -c "client hello, adding psk_key_exchange_modes extension" \
2664             -c "client hello, adding PSK binder list" \
2665             -s "Invalid binder."
2673 run_test    "TLS 1.3: m->m: all/all, good" \
2677             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2678             -c "client hello, adding psk_key_exchange_modes extension" \
2679             -c "client hello, adding PSK binder list" \
2680             -c "Selected key exchange mode: psk_ephemeral" \
2681             -c "HTTP/1.0 200 OK"
2689 run_test    "TLS 1.3: m->m: all/all, good, key id mismatch, fallback" \
2693             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2694             -c "client hello, adding psk_key_exchange_modes extension" \
2695             -c "client hello, adding PSK binder list" \
2696             -s "No usable PSK or ticket" \
2697             -s "key exchange mode: ephemeral"
2705 run_test    "TLS 1.3: m->m: all/all, fail, key material mismatch" \
2709             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2710             -c "client hello, adding psk_key_exchange_modes extension" \
2711             -c "client hello, adding PSK binder list" \
2712             -s "Invalid binder."
2714 #OPENSSL-SERVER psk mode
2721 run_test    "TLS 1.3: m->O: psk/all, good" \
2722 …     "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
2725             -c "=> write client hello" \
2726             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2727             -c "client hello, adding psk_key_exchange_modes extension" \
2728             -c "client hello, adding PSK binder list" \
2729             -c "<= write client hello" \
2730             -c "Selected key exchange mode: psk$" \
2731             -c "HTTP/1.0 200 ok"
2739 run_test    "TLS 1.3: m->O: psk/ephemeral_all, fail - no common kex mode" \
2740             "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2743             -c "=> write client hello" \
2744             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2745             -c "client hello, adding psk_key_exchange_modes extension" \
2746             -c "client hello, adding PSK binder list" \
2747             -c "<= write client hello" \
2748             -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
2750 #OPENSSL-SERVER psk_all mode
2758 run_test    "TLS 1.3: m->O: psk_all/all, good" \
2759 …     "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
2762             -c "=> write client hello" \
2763             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2764             -c "client hello, adding psk_key_exchange_modes extension" \
2765             -c "client hello, adding PSK binder list" \
2766             -c "<= write client hello" \
2767             -c "Selected key exchange mode: psk_ephemeral" \
2768             -c "HTTP/1.0 200 ok"
2777 run_test    "TLS 1.3: m->O: psk_all/ephemeral_all, good" \
2778             "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2781             -c "=> write client hello" \
2782             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2783             -c "client hello, adding psk_key_exchange_modes extension" \
2784             -c "client hello, adding PSK binder list" \
2785             -c "<= write client hello" \
2786             -c "Selected key exchange mode: psk_ephemeral" \
2787             -c "HTTP/1.0 200 ok"
2789 #OPENSSL-SERVER psk_ephemeral mode
2796 run_test    "TLS 1.3: m->O: psk_ephemeral/all, good" \
2797 …     "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
2800             -c "=> write client hello" \
2801             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2802             -c "client hello, adding psk_key_exchange_modes extension" \
2803             -c "client hello, adding PSK binder list" \
2804             -c "<= write client hello" \
2805             -c "Selected key exchange mode: psk_ephemeral" \
2806             -c "HTTP/1.0 200 ok"
2814 run_test    "TLS 1.3: m->O: psk_ephemeral/ephemeral_all, good" \
2815             "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2818             -c "=> write client hello" \
2819             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2820             -c "client hello, adding psk_key_exchange_modes extension" \
2821             -c "client hello, adding PSK binder list" \
2822             -c "<= write client hello" \
2823             -c "Selected key exchange mode: psk_ephemeral" \
2824             -c "HTTP/1.0 200 ok"
2826 #OPENSSL-SERVER ephemeral mode
2833 run_test    "TLS 1.3: m->O: ephemeral/all, good" \
2834             "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex" \
2837             -c "Selected key exchange mode: ephemeral" \
2838             -c "HTTP/1.0 200 ok"
2846 run_test    "TLS 1.3: m->O: ephemeral/ephemeral_all, good" \
2847             "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2850             -c "Selected key exchange mode: ephemeral" \
2851             -c "HTTP/1.0 200 ok"
2853 #OPENSSL-SERVER ephemeral_all mode
2861 run_test    "TLS 1.3: m->O: ephemeral_all/all, good" \
2862 …     "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
2865             -c "=> write client hello" \
2866             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2867             -c "client hello, adding psk_key_exchange_modes extension" \
2868             -c "client hello, adding PSK binder list" \
2869             -c "Selected key exchange mode: psk_ephemeral" \
2870             -c "<= write client hello" \
2871             -c "HTTP/1.0 200 ok"
2880 run_test    "TLS 1.3: m->O: ephemeral_all/ephemeral_all, good" \
2881             "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2884             -c "=> write client hello" \
2885             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2886             -c "client hello, adding psk_key_exchange_modes extension" \
2887             -c "client hello, adding PSK binder list" \
2888             -c "Selected key exchange mode: psk_ephemeral" \
2889             -c "<= write client hello" \
2890             -c "HTTP/1.0 200 ok"
2892 #OPENSSL-SERVER all mode
2901 run_test    "TLS 1.3: m->O: all/all, good" \
2902 …     "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
2905             -c "=> write client hello" \
2906             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2907             -c "client hello, adding psk_key_exchange_modes extension" \
2908             -c "client hello, adding PSK binder list" \
2909             -c "Selected key exchange mode: psk_ephemeral" \
2910             -c "<= write client hello" \
2911             -c "HTTP/1.0 200 ok"
2921 run_test    "TLS 1.3: m->O: all/ephemeral_all, good" \
2922             "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2925             -c "=> write client hello" \
2926             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2927             -c "client hello, adding psk_key_exchange_modes extension" \
2928             -c "client hello, adding PSK binder list" \
2929             -c "Selected key exchange mode: psk_ephemeral" \
2930             -c "<= write client hello" \
2931             -c "HTTP/1.0 200 ok"
2933 #GNUTLS-SERVER psk mode
2940 run_test    "TLS 1.3: m->G: psk/all, good" \
2941 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskp…
2944             -c "=> write client hello" \
2945             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2946             -c "client hello, adding psk_key_exchange_modes extension" \
2947             -c "client hello, adding PSK binder list" \
2948             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2949             -s "Parsing extension 'Pre Shared Key/41'" \
2950             -c "<= write client hello" \
2951             -c "Selected key exchange mode: psk$" \
2952             -c "HTTP/1.0 200 OK"
2960 run_test    "TLS 1.3: m->G: psk/ephemeral_all, fail - no common kex mode" \
2961 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskp…
2964             -c "=> write client hello" \
2965             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2966             -c "client hello, adding psk_key_exchange_modes extension" \
2967             -c "client hello, adding PSK binder list" \
2968             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2969             -s "Parsing extension 'Pre Shared Key/41'" \
2970             -c "<= write client hello" \
2971             -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
2973 #GNUTLS-SERVER psk_all mode
2981 run_test    "TLS 1.3: m->G: psk_all/all, good" \
2982 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskp…
2985             -c "=> write client hello" \
2986             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2987             -c "client hello, adding psk_key_exchange_modes extension" \
2988             -c "client hello, adding PSK binder list" \
2989             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2990             -s "Parsing extension 'Pre Shared Key/41'" \
2991             -c "<= write client hello" \
2992             -c "Selected key exchange mode: psk_ephemeral" \
2993             -c "HTTP/1.0 200 OK"
3002 run_test    "TLS 1.3: m->G: psk_all/ephemeral_all, good" \
3003 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskp…
3006             -c "=> write client hello" \
3007             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3008             -c "client hello, adding psk_key_exchange_modes extension" \
3009             -c "client hello, adding PSK binder list" \
3010             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3011             -s "Parsing extension 'Pre Shared Key/41'" \
3012             -c "<= write client hello" \
3013             -c "Selected key exchange mode: psk_ephemeral" \
3014             -c "HTTP/1.0 200 OK"
3016 #GNUTLS-SERVER psk_ephemeral mode
3023 run_test    "TLS 1.3: m->G: psk_ephemeral/all, good" \
3024 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskp…
3027             -c "=> write client hello" \
3028             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3029             -c "client hello, adding psk_key_exchange_modes extension" \
3030             -c "client hello, adding PSK binder list" \
3031             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3032             -s "Parsing extension 'Pre Shared Key/41'" \
3033             -c "<= write client hello" \
3034             -c "Selected key exchange mode: psk_ephemeral" \
3035             -c "HTTP/1.0 200 OK"
3043 run_test    "TLS 1.3: m->G: psk_ephemeral/ephemeral_all, good" \
3044 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskp…
3047             -c "=> write client hello" \
3048             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3049             -c "client hello, adding psk_key_exchange_modes extension" \
3050             -c "client hello, adding PSK binder list" \
3051             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3052             -s "Parsing extension 'Pre Shared Key/41'" \
3053             -c "<= write client hello" \
3054             -c "Selected key exchange mode: psk_ephemeral" \
3055             -c "HTTP/1.0 200 OK"
3057 #GNUTLS-SERVER ephemeral mode
3064 run_test    "TLS 1.3: m->G: ephemeral/all, good" \
3065 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskp…
3068             -c "Selected key exchange mode: ephemeral" \
3069             -c "HTTP/1.0 200 OK"
3077 run_test    "TLS 1.3: m->G: ephemeral/ephemeral_all, good" \
3078 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskp…
3081             -c "Selected key exchange mode: ephemeral" \
3082             -c "HTTP/1.0 200 OK"
3084 #GNUTLS-SERVER ephemeral_all mode
3092 run_test    "TLS 1.3: m->G: ephemeral_all/all, good" \
3093 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskp…
3096             -c "=> write client hello" \
3097             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3098             -c "client hello, adding psk_key_exchange_modes extension" \
3099             -c "client hello, adding PSK binder list" \
3100             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3101             -s "Parsing extension 'Pre Shared Key/41'" \
3102             -c "<= write client hello" \
3103             -c "Selected key exchange mode: psk_ephemeral" \
3104             -c "HTTP/1.0 200 OK"
3113 run_test    "TLS 1.3: m->G: ephemeral_all/ephemeral_all, good" \
3114 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskp…
3117             -c "=> write client hello" \
3118             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3119             -c "client hello, adding psk_key_exchange_modes extension" \
3120             -c "client hello, adding PSK binder list" \
3121             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3122             -s "Parsing extension 'Pre Shared Key/41'" \
3123             -c "<= write client hello" \
3124             -c "Selected key exchange mode: psk_ephemeral" \
3125             -c "HTTP/1.0 200 OK"
3127 #GNUTLS-SERVER all mode
3136 run_test    "TLS 1.3: m->G: all/all, good" \
3137 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK --pskp…
3140             -c "=> write client hello" \
3141             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3142             -c "client hello, adding psk_key_exchange_modes extension" \
3143             -c "client hello, adding PSK binder list" \
3144             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3145             -s "Parsing extension 'Pre Shared Key/41'" \
3146             -c "<= write client hello" \
3147             -c "Selected key exchange mode: psk_ephemeral" \
3148             -c "HTTP/1.0 200 OK"
3158 run_test    "TLS 1.3: m->G: all/ephemeral_all, good" \
3159 …"$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK --pskp…
3162             -c "=> write client hello" \
3163             -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3164             -c "client hello, adding psk_key_exchange_modes extension" \
3165             -c "client hello, adding PSK binder list" \
3166             -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3167             -s "Parsing extension 'Pre Shared Key/41'" \
3168             -c "<= write client hello" \
3169             -c "Selected key exchange mode: psk_ephemeral" \
3170             -c "HTTP/1.0 200 OK"