Use 1024-bit DSA keys with TLS_DHE_DSS_AES_128_CBC_SHA1

Author: mrc0mmand

gnutls/Interoperability/renegotiation-with-OpenSSL/runtest.sh

@@ -44,29 +44,35 @@ rlJournalStart
         rlRun "x509KeyGen -t ecdsa ecdsa-ca"
         rlRun "x509KeyGen rsa-server"
         rlRun "x509KeyGen -t dsa dsa-server"
+        rlRun "x509KeyGen -t dsa -s 1024 dsa-server-1024"
         rlRun "x509KeyGen -t ecdsa ecdsa-server"
         rlRun "x509KeyGen rsa-client"
         rlRun "x509KeyGen -t dsa dsa-client"
+        rlRun "x509KeyGen -t dsa -s 1024 dsa-client-1024"
         rlRun "x509KeyGen -t ecdsa ecdsa-client"
         rlRun "x509SelfSign ca"
         rlRun "x509CertSign --CA ca -t ca --DN 'CN=RSA CA' rsa-ca"
         rlRun "x509CertSign --CA ca -t ca --DN 'CN=DSA CA' dsa-ca"
         rlRun "x509CertSign --CA ca -t ca --DN 'CN=ECDSA CA' ecdsa-ca"
         rlRun "x509CertSign --CA rsa-ca rsa-server"
         rlRun "x509CertSign --CA dsa-ca dsa-server"
+        rlRun "x509CertSign --CA dsa-ca dsa-server-1024"
         rlRun "x509CertSign --CA ecdsa-ca ecdsa-server"
         rlRun "x509CertSign --CA rsa-ca -t webclient rsa-client"
         rlRun "x509CertSign --CA dsa-ca -t webclient dsa-client"
+        rlRun "x509CertSign --CA dsa-ca -t webclient dsa-client-1024"
         rlRun "x509CertSign --CA ecdsa-ca -t webclient ecdsa-client"
         rlRun "x509DumpCert ca" 0 "Root CA"
         rlRun "x509DumpCert rsa-ca" 0 "Intermediate RSA CA"
         rlRun "x509DumpCert dsa-ca" 0 "Intermediate DSA CA"
         rlRun "x509DumpCert ecdsa-ca" 0 "Intermediate ECDSA CA"
         rlRun "x509DumpCert rsa-server" 0 "Server RSA certificate"
         rlRun "x509DumpCert dsa-server" 0 "Server DSA certificate"
+        rlRun "x509DumpCert dsa-server-1024" 0 "Server DSA certificate (1024-bit)"
         rlRun "x509DumpCert ecdsa-server" 0 "Server ECDSA certificate"
         rlRun "x509DumpCert rsa-client" 0 "Client RSA certificate"
         rlRun "x509DumpCert dsa-client" 0 "Client DSA certificate"
+        rlRun "x509DumpCert dsa-client-1024" 0 "Client DSA certificate (1024-bit)"
         rlRun "x509DumpCert ecdsa-client" 0 "Client ECDSA certificate"
 
         # Tested combinations
@@ -176,10 +182,10 @@ rlJournalStart
         C_GNUTLS[$i]="TLS_DHE_DSS_AES_128_CBC_SHA1"
         C_TLS1_2_ONLY[$i]="False"
         C_SUBCA[$i]="$(x509Cert dsa-ca)"
-        C_CERT[$i]="$(x509Cert dsa-server)"
-        C_KEY[$i]="$(x509Key dsa-server)"
-        C_CLNT_CERT[$i]="$(x509Cert dsa-client)"
-        C_CLNT_KEY[$i]="$(x509Key dsa-client)"
+        C_CERT[$i]="$(x509Cert dsa-server-1024)"
+        C_KEY[$i]="$(x509Key dsa-server-1024)"
+        C_CLNT_CERT[$i]="$(x509Cert dsa-client-1024)"
+        C_CLNT_KEY[$i]="$(x509Key dsa-client-1024)"
         i=$(($i+1))
 
         C_NAME[$i]="TLS_DHE_DSS_WITH_AES_256_CBC_SHA256"