rustls 0.10.0

Rustls is a modern TLS library written in Rust.
Documentation
{
  "DisabledTests": {
    "SendV2ClientHello-*": "only support TLS1.2",
    "*SSL3*": "",
    "*SSLv3*": "",
    "*TLS1-*": "",
    "*-TLS1": "",
    "*TLS11-*": "",
    "*-TLS11": "",
    "Downgrade-TLS12-*": "",
    "MinorVersionTolerance": "",
    "MajorVersionTolerance": "",
    "FragmentedClientVersion": "",
    "ConflictingVersionNegotiation": "",
    "ConflictingVersionNegotiation-2": "",
    "PointFormat-Server-Missing": "we require ecc",
    "ECDSAKeyUsage-*": "TODO: we don't do anything with key usages",
    "CheckRecordVersion-*": "we don't look at record version",
    "TLS13-WrongOuterRecord": "we're lax on this",
    "*DTLS*": "not supported",
    "MTU*": "dtls only",
    "DisableEverything": "not useful",
    "SendEmptyRecords": "non-standard openssl/boringssl behaviour",
    "SendEmptyRecords-Async": "",
    "SendWarningAlerts": "",
    "SendWarningAlerts-Async": "",
    "Peek-*": "",
    "CBCRecordSplitting*": "insane ciphersuites",
    "*CBCPadding*": "",
    "RSAEphemeralKey": "",
    "BadRSAClientKeyExchange-*": "",
    "SendClientVersion-RSA": "",
    "SillyDH": "",
    "WeakDH": "",
    "DHPublicValuePadded": "",
    "Basic-Server-RSA-*": "",
    "*-RC4-*": "",
    "*-3DES-*": "",
    "*-DHE-*": "",
    "ServerAuth-SHA1-Fallback": "",
    "*-AES128-SHA*": "",
    "*-AES256-SHA*": "",
    "*-ECDSA-SHA1-*": "no ecdsa-sha1",
    "*-Sign-RSA-PKCS1-SHA1-*": "no sha1",
    "*-P521-*": "no p521",
    "*-P-521": "",
    "CurveTest-Client-P-521-TLS13": "",
    "CurveTest-Server-P-521-TLS13": "",
    "GREASE-*": "not implemented",
    "LargeMessage-Reject": "",
    "*-ShortHeader": "",
    "ShortHeader-*": "",
    "SkipEarlyData*": "no 0rtt support",
    "TLS13-DuplicateTicketEarlyDataInfo": "",
    "NoCommonCurves": "nothing to fall back to",
    "ClientHelloPadding": "hello padding extension not implemented",
    "TLS13-HelloRetryRequest-Client-Sync*": "we remember the server's preference and don't need a second HRR",
    "TLS13-HelloRetryRequest-Client-Async*": "",
    "SendHelloRetryRequest-2": "",
    "Resume-Client-CipherMismatch": "tries to vary to unimplemented CBC-mode cs",
    "*Auth-SHA1-Fallback*": "",
    "RSA-PSS-Large": "",
    "TLS12-AES128-GCM-*": "no pfs",
    "TLS12-AES256-GCM-*": "",
    "*-CHACHA20-POLY1305-OLD-*": "",
    "*-ECDSA-*-server": "ECDSA signing not yet implemented",
    "ClientAuth-Sign-ECDSA-*": "",
    "ServerAuth-Sign-ECDSA-*": "",
    "*-Client-ClientAuth-ECDSA": "",
    "Basic-Server-*-ECDSA-*": "",
    "FallbackSCSV*": "fallback countermeasure not yet implemented",
    "RequireAnyClientCertificate-TLS12": "we don't send an alert in this case",
    "TooManyKeyUpdates": "no limit implemented",
    "Renegotiate-Client-*": "no reneg",
    "Renegotiate-Server-*": "",
    "SendHalfHelloRequest-*": "",
    "RetainOnlySHA256-*": "",
    "ExtendedMasterSecret-Renego-*": ""
  },
  "ErrorMap": {
    ":HTTP_REQUEST:": ":GARBAGE:",
    ":HTTPS_PROXY_REQUEST:": ":GARBAGE:",
    ":WRONG_VERSION_NUMBER:": ":GARBAGE:",
    ":PEER_DID_NOT_RETURN_A_CERTIFICATE:": ":NO_CERTS:",
    ":UNEXPECTED_RECORD:": ":UNEXPECTED_MESSAGE:",
    ":NO_RENEGOTIATION:": ":UNEXPECTED_MESSAGE:",
    ":DIGEST_CHECK_FAILED:": ":DECRYPTION_FAILED_OR_BAD_RECORD_MAC:",
    ":ENCRYPTED_LENGTH_TOO_LONG:": ":GARBAGE:"
  },
  "TestErrorMap": {
    "EmptyCertificateList": ":NO_CERTS:",
    "SendInvalidRecordType": ":GARBAGE:",
    "NoSharedCipher": ":HANDSHAKE_FAILURE:",
    "NoSharedCipher-TLS13": ":HANDSHAKE_FAILURE:",
    "InvalidECDHPoint-Client": ":PEER_MISBEHAVIOUR:",
    "InvalidECDHPoint-Server": ":PEER_MISBEHAVIOUR:",
    "TrailingMessageData-ClientHello": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-ServerHello": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-ServerCertificate": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-CertificateRequest": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-ClientCertificate": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-CertificateVerify": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-NewSessionTicket": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-ServerHelloDone": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-ServerKeyExchange": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-ClientKeyExchange": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-CertificateStatus": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-TLS13-ClientHello": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-TLS13-ServerHello": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-TLS13-EncryptedExtensions": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-TLS13-CertificateRequest": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-TLS13-ServerCertificate": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-TLS13-ServerCertificateVerify": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-TLS13-ServerFinished": ":DECRYPTION_FAILED_OR_BAD_RECORD_MAC:",
    "TrailingMessageData-TLS13-ClientCertificate": ":BAD_HANDSHAKE_MSG:",
    "TrailingMessageData-TLS13-ClientCertificateVerify": ":BAD_HANDSHAKE_MSG:",
    "MissingKeyShare-Client": ":PEER_MISBEHAVIOUR:",
    "MissingKeyShare-Server": ":INCOMPATIBLE:",
    "EmptyEncryptedExtensions": ":BAD_HANDSHAKE_MSG:",
    "NoSupportedCurves": ":INCOMPATIBLE:",
    "BadECDHECurve": ":PEER_MISBEHAVIOUR:",
    "VersionTooLow": ":INCOMPATIBLE:",
    "CertMismatchRSA": ":PEER_MISBEHAVIOUR:",
    "CertMismatchECDSA": ":PEER_MISBEHAVIOUR:",
    "UnofferedExtension-Client": ":PEER_MISBEHAVIOUR:",
    "ServerHelloBogusCipher": ":PEER_MISBEHAVIOUR:",
    "ServerHelloBogusCipher-TLS13": ":PEER_MISBEHAVIOUR:",
    "ALPNClient-Mismatch-TLS12": ":PEER_MISBEHAVIOUR:",
    "ALPNClient-EmptyProtocolName-TLS12": ":PEER_MISBEHAVIOUR:",
    "ALPNServer-EmptyProtocolName-TLS12": ":PEER_MISBEHAVIOUR:",
    "Verify-ServerAuth-SignatureType": ":PEER_MISBEHAVIOUR:",
    "ClientAuth-Enforced": ":PEER_MISBEHAVIOUR:",
    "ServerAuth-Enforced": ":PEER_MISBEHAVIOUR:",
    "UnofferedExtension-Client": ":PEER_MISBEHAVIOUR:",
    "UnknownExtension-Client": ":PEER_MISBEHAVIOUR:",
    "OversizedSessionId-TLS12": ":BAD_HANDSHAKE_MSG:",
    "KeyUpdate-InvalidRequestMode": ":BAD_HANDSHAKE_MSG:",
    "ExtraCompressionMethods-TLS13": ":PEER_MISBEHAVIOUR:",
    "NoNullCompression-TLS12": ":INCOMPATIBLE:",
    "NoNullCompression-TLS13": ":INCOMPATIBLE:",
    "TLS13-AES128-GCM-server": ":INCOMPATIBLE:",
    "TLS13-AES128-GCM-client": ":PEER_MISBEHAVIOUR:",
    "TLS13-AES256-GCM-server": ":INCOMPATIBLE:",
    "TLS13-AES256-GCM-client": ":PEER_MISBEHAVIOUR:",
    "TLS13-ECDHE-ECDSA-AES128-GCM-client": ":PEER_MISBEHAVIOUR:",
    "TLS13-ECDHE-ECDSA-AES256-GCM-client": ":PEER_MISBEHAVIOUR:",
    "TLS13-ECDHE-ECDSA-CHACHA20-POLY1305-client": ":PEER_MISBEHAVIOUR:",
    "TLS13-ECDHE-RSA-AES128-GCM-server": ":INCOMPATIBLE:",
    "TLS13-ECDHE-RSA-AES128-GCM-client": ":PEER_MISBEHAVIOUR:",
    "TLS13-ECDHE-RSA-AES256-GCM-server": ":INCOMPATIBLE:",
    "TLS13-ECDHE-RSA-AES256-GCM-client": ":PEER_MISBEHAVIOUR:",
    "TLS13-ECDHE-RSA-CHACHA20-POLY1305-server": ":INCOMPATIBLE:",
    "TLS13-ECDHE-RSA-CHACHA20-POLY1305-client": ":PEER_MISBEHAVIOUR:",
    "TLS12-AEAD-CHACHA20-POLY1305-server": ":INCOMPATIBLE:",
    "TLS12-AEAD-CHACHA20-POLY1305-client": ":PEER_MISBEHAVIOUR:",
    "TLS12-AEAD-AES128-GCM-SHA256-server": ":INCOMPATIBLE:",
    "TLS12-AEAD-AES128-GCM-SHA256-client": ":PEER_MISBEHAVIOUR:",
    "TLS12-AEAD-AES256-GCM-SHA384-server": ":INCOMPATIBLE:",
    "TLS12-AEAD-AES256-GCM-SHA384-client": ":PEER_MISBEHAVIOUR:",
    "SkipHelloRetryRequest": ":PEER_MISBEHAVIOUR:",
    "NoSupportedVersions": ":INCOMPATIBLE:",
    "ClientAuth-Verify-RSA-PKCS1-SHA1-TLS13": ":PEER_MISBEHAVIOUR:",
    "ServerAuth-Verify-RSA-PKCS1-SHA1-TLS13": ":PEER_MISBEHAVIOUR:",
    "ClientAuth-Verify-RSA-PKCS1-SHA256-TLS13": ":PEER_MISBEHAVIOUR:",
    "ServerAuth-Verify-RSA-PKCS1-SHA256-TLS13": ":PEER_MISBEHAVIOUR:",
    "ClientAuth-Verify-RSA-PKCS1-SHA384-TLS13": ":PEER_MISBEHAVIOUR:",
    "ServerAuth-Verify-RSA-PKCS1-SHA384-TLS13": ":PEER_MISBEHAVIOUR:",
    "ClientAuth-Verify-RSA-PKCS1-SHA512-TLS13": ":PEER_MISBEHAVIOUR:",
    "ServerAuth-Verify-RSA-PKCS1-SHA512-TLS13": ":PEER_MISBEHAVIOUR:",
    "ServerAuth-Sign-RSA-PKCS1-SHA256-TLS13": ":INCOMPATIBLE:",
    "ServerAuth-Sign-RSA-PKCS1-SHA384-TLS13": ":INCOMPATIBLE:",
    "ServerAuth-Sign-RSA-PKCS1-SHA512-TLS13": ":INCOMPATIBLE:",
    "ClientAuth-Sign-RSA-PKCS1-SHA256-TLS13": ":INCOMPATIBLE:",
    "ClientAuth-Sign-RSA-PKCS1-SHA384-TLS13": ":INCOMPATIBLE:",
    "ClientAuth-Sign-RSA-PKCS1-SHA512-TLS13": ":INCOMPATIBLE:",
    "ALPNClient-Mismatch-TLS13": ":PEER_MISBEHAVIOUR:",
    "ALPNClient-EmptyProtocolName-TLS13": ":PEER_MISBEHAVIOUR:",
    "ALPNServer-EmptyProtocolName-TLS13": ":PEER_MISBEHAVIOUR:",
    "ClientAuth-NoFallback-TLS13": ":INCOMPATIBLE:",
    "ServerAuth-NoFallback-TLS13": ":INCOMPATIBLE:",
    "ClientAuth-Enforced-TLS13": ":PEER_MISBEHAVIOUR:",
    "ServerAuth-Enforced-TLS13": ":PEER_MISBEHAVIOUR:",
    "SecondClientHelloWrongCurve": ":PEER_MISBEHAVIOUR:",
    "SecondClientHelloMissingKeyShare": ":INCOMPATIBLE:",
    "Resume-Server-BinderWrongLength": ":PEER_MISBEHAVIOUR:",
    "Resume-Server-NoPSKBinder": ":PEER_MISBEHAVIOUR:",
    "Resume-Server-ExtraPSKBinder": ":PEER_MISBEHAVIOUR:",
    "Resume-Server-ExtraIdentityNoBinder": ":PEER_MISBEHAVIOUR:",
    "Resume-Server-InvalidPSKBinder": ":PEER_MISBEHAVIOUR:",
    "Resume-Server-PSKBinderFirstExtension": ":PEER_MISBEHAVIOUR:",
    "Resume-Server-UnofferedCipher": ":PEER_MISBEHAVIOUR:",
    "Resume-Server-UnofferedCipher-TLS13": ":PEER_MISBEHAVIOUR:",
    "Resume-Client-CipherMismatch-TLS13": ":PEER_MISBEHAVIOUR:",
    "Resume-Client-PRFMismatch-TLS13": ":PEER_MISBEHAVIOUR:",
    "Resume-Client-Mismatch-TLS12-TLS13": ":PEER_MISBEHAVIOUR:",
    "Resume-Client-Mismatch-TLS13-TLS12": ":PEER_MISBEHAVIOUR:",
    "TLS13-EmptyRecords": ":PEER_MISBEHAVIOUR:",
    "TLS13-OnlyPadding": ":PEER_MISBEHAVIOUR:",
    "NoSupportedCurves-TLS13": ":INCOMPATIBLE:",
    "BadECDHECurve-TLS13": ":PEER_MISBEHAVIOUR:",
    "InvalidECDHPoint-Client-TLS13": ":PEER_MISBEHAVIOUR:",
    "InvalidECDHPoint-Server-TLS13": ":PEER_MISBEHAVIOUR:",
    "TLS13-InvalidPSKIdentity": ":PEER_MISBEHAVIOUR:",
    "TLS13-AlwaysSelectPSKIdentity": ":PEER_MISBEHAVIOUR:",
    "TLS13-TrailingKeyShareData": ":BAD_HANDSHAKE_MSG:",
    "HelloRetryRequestCurveMismatch": ":PEER_MISBEHAVIOUR:",
    "HelloRetryRequestVersionMismatch": ":BAD_HANDSHAKE_MSG:",
    "HelloRetryRequest-DuplicateCookie": ":PEER_MISBEHAVIOUR:",
    "HelloRetryRequest-DuplicateCurve": ":PEER_MISBEHAVIOUR:",
    "UnknownUnencryptedExtension-Client-TLS13": ":PEER_MISBEHAVIOUR:",
    "UnexpectedUnencryptedExtension-Client-TLS13": ":PEER_MISBEHAVIOUR:",
    "UnofferedExtension-Client-TLS13": ":PEER_MISBEHAVIOUR:",
    "RenegotiationInfo-Forbidden-TLS13": ":PEER_MISBEHAVIOUR:",
    "UnknownExtension-Client-TLS13": ":PEER_MISBEHAVIOUR:",
    "TLS13-RequestContextInHandshake": ":BAD_HANDSHAKE_MSG:",
    "UnnecessaryHelloRetryRequest": ":PEER_MISBEHAVIOUR:",
    "UnknownCurve-HelloRetryRequest": ":PEER_MISBEHAVIOUR:",
    "DisabledCurve-HelloRetryRequest": ":PEER_MISBEHAVIOUR:",
    "HelloRetryRequest-Empty": ":PEER_MISBEHAVIOUR:",
    "HelloRetryRequest-EmptyCookie": ":PEER_MISBEHAVIOUR:",
    "HelloRetryRequest-Unknown": ":INCOMPATIBLE:",
    "ServerBogusVersion": ":BAD_HANDSHAKE_MSG:",
    "MinimumVersion-Client-TLS13-TLS12": ":INCOMPATIBLE:",
    "MinimumVersion-Client2-TLS13-TLS12": ":INCOMPATIBLE:",
    "MinimumVersion-Server-TLS13-TLS12": ":INCOMPATIBLE:",
    "MinimumVersion-Server2-TLS13-TLS12": ":INCOMPATIBLE:",
    "DuplicateKeyShares": ":PEER_MISBEHAVIOUR:",
    "PartialEncryptedExtensionsWithServerHello": ":PEER_MISBEHAVIOUR:",
    "PartialClientFinishedWithClientHello": ":PEER_MISBEHAVIOUR:",
    "PointFormat-EncryptedExtensions-TLS13": ":PEER_MISBEHAVIOUR:",
    "Ticket-Forbidden-TLS13": ":PEER_MISBEHAVIOUR:",
    "PointFormat-Server-MissingUncompressed": ":INCOMPATIBLE:",
    "NegotiatePSKResumption-TLS13": ":PEER_MISBEHAVIOUR:",
    "PointFormat-Client-MissingUncompressed": ":PEER_MISBEHAVIOUR:",
    "SendUnsolicitedOCSPOnCertificate-TLS13": ":PEER_MISBEHAVIOUR:",
    "SendUnsolicitedSCTOnCertificate-TLS13": ":PEER_MISBEHAVIOUR:",
    "SendUnknownExtensionOnCertificate-TLS13": ":PEER_MISBEHAVIOUR:",
    "LargePlaintext": ":PEER_MISBEHAVIOUR:",
    "SendDuplicateExtensionsOnCerts-TLS13": ":PEER_MISBEHAVIOUR:",
    "SignedCertificateTimestampListEmpty-Client-TLS12": ":PEER_MISBEHAVIOUR:",
    "SignedCertificateTimestampListEmpty-Client-TLS13": ":PEER_MISBEHAVIOUR:",
    "SignedCertificateTimestampListEmptySCT-Client-TLS12": ":PEER_MISBEHAVIOUR:",
    "SignedCertificateTimestampListEmptySCT-Client-TLS13": ":PEER_MISBEHAVIOUR:",
    "EMS-Forbidden-TLS13": ":PEER_MISBEHAVIOUR:",
    "SendExtensionOnClientCertificate-TLS13": ":PEER_MISBEHAVIOUR:",
    "ExtendedMasterSecret-NoToYes-Client": ":PEER_MISBEHAVIOUR:",
    "ExtendedMasterSecret-YesToNo-Server": ":PEER_MISBEHAVIOUR:",
    "ExtendedMasterSecret-YesToNo-Client": ":PEER_MISBEHAVIOUR:"
  }
}