badssl.toml 2.3 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768
  1. # Untrusted certificates
  2. [[cmd]]
  3. name = "Using a DNS-over-HTTPS server with an expired certificate"
  4. shell = "dog --https @https://expired.badssl.com/ lookup.dog"
  5. stdout = { empty = true }
  6. stderr = { string = "Error [tls]: The certificate was not trusted." }
  7. status = 1
  8. tags = [ 'live', 'badssl', 'https' ]
  9. [[cmd]]
  10. name = "Using a DNS-over-HTTPS server with the wrong host in the certificate"
  11. shell = "dog --https @https://wrong.host.badssl.com/ lookup.dog"
  12. stdout = { empty = true }
  13. stderr = { string = "Error [tls]: The certificate was not trusted." }
  14. status = 1
  15. tags = [ 'live', 'badssl', 'https' ]
  16. [[cmd]]
  17. name = "Using a DNS-over-HTTPS server with a self-signed certificate"
  18. shell = "dog --https @https://self-signed.badssl.com/ lookup.dog"
  19. stdout = { empty = true }
  20. stderr = { string = "Error [tls]: The certificate was not trusted." }
  21. status = 1
  22. tags = [ 'live', 'badssl', 'https' ]
  23. [[cmd]]
  24. name = "Using a DNS-over-HTTPS server with an untrusted root certificate"
  25. shell = "dog --https @https://untrusted-root.badssl.com/ lookup.dog"
  26. stdout = { empty = true }
  27. stderr = { string = "Error [tls]: The certificate was not trusted." }
  28. status = 1
  29. tags = [ 'live', 'badssl', 'https' ]
  30. [[cmd]]
  31. name = "Using a DNS-over-HTTPS server with a revoked certificate"
  32. shell = "dog --https @https://revoked.badssl.com/ lookup.dog"
  33. stdout = { empty = true }
  34. stderr = { string = "Error [tls]: The certificate was not trusted." }
  35. status = 1
  36. tags = [ 'live', 'badssl', 'https' ]
  37. [[cmd]]
  38. name = "Using a DNS-over-HTTPS server with a known bad certificate"
  39. shell = "dog --https @https://superfish.badssl.com/ lookup.dog"
  40. stdout = { empty = true }
  41. stderr = { string = "Error [tls]: The certificate was not trusted." }
  42. status = 1
  43. tags = [ 'live', 'badssl', 'https' ]
  44. # Handshake failures
  45. [[cmd]]
  46. name = "Using a DNS-over-HTTPS server that accepts the null cipher"
  47. shell = "dog --https @https://null.badssl.com/ lookup.dog"
  48. stdout = { empty = true }
  49. stderr = { string = "Error [tls]: handshake failure" }
  50. status = 1
  51. tags = [ 'live', 'badssl', 'https' ]
  52. [[cmd]]
  53. name = "Using a DNS-over-HTTPS server that accepts the rc4-md5 cipher"
  54. shell = "dog --https @https://rc4-md5.badssl.com/ lookup.dog"
  55. stdout = { empty = true }
  56. stderr = { string = "Error [tls]: handshake failure" }
  57. status = 1
  58. tags = [ 'live', 'badssl', 'https' ]