anchor.diff:       %%                dhe_psk_aes_256_ccm,
        %%                dhe_psk_aes_256_ccm_8
        %%           ]},
  -     %% {ecdhe_psk, [], [ecdhe_psk_3des_ede_cbc,                    
  +     %% {ecdhe_psk, [], [ecdhe_psk_3des_ede_cbc,
        %%                 ecdhe_psk_rc4_128,
        %%                 ecdhe_psk_aes_128_cbc,
        %%                 ecdhe_psk_aes_128_ccm,
  
positive.code:      %%            psk_aes_256_ccm,
       %%            psk_aes_256_ccm_8
       %%           ]},
       %% {dhe_psk, [], [dhe_psk_3des_ede_cbc,                    
       %%                dhe_psk_rc4_128,
       %%                dhe_psk_aes_128_cbc,
       %%                dhe_psk_aes_128_ccm,
  
negative.code:      proplists:delete(tls_config, Config)];
  init_certs(rsa, Config) ->
      Ext = x509_test:extensions([{key_usage, [digitalSignature, keyEncipherment]}]),
      {ClientOpts, ServerOpts} = ssl_test_lib:make_rsa_cert_chains([{server_chain,
                                                                     [[ssl_test_lib:digest()],[ssl_test_lib:digest()],
                                                                      [ssl_test_lib:digest(), {extensions, Ext}]]}
                                                                   ],
                                                                   Config, "_peer_keyEncipherment"),
      [{tls_config, #{server_config => ServerOpts,
                      client_config => ClientOpts}} |
       proplists:delete(tls_config, Config)];
  init_certs(dhe_dss, Config) ->
       {ClientOpts, ServerOpts} = ssl_test_lib:make_dsa_cert_chains([{server_chain, ssl_test_lib:default_cert_chain_conf()},
                                                                    {client_chain, ssl_test_lib:default_cert_chain_conf()}],
                                                                    Config, ""),
      [{tls_config, #{server_config => ServerOpts,
                      client_config => ClientOpts}} |
       proplists:delete(tls_config, Config)];
  init_certs(srp_dss, Config) ->
      {ClientOpts, ServerOpts} = ssl_test_lib:make_dsa_cert_chains([{server_chain, ssl_test_lib:default_cert_chain_conf()},
                                                                    {client_chain, ssl_test_lib:default_cert_chain_conf()}],
                                                                   Config, ""),
      [{tls_config, #{server_config => [{user_lookup_fun, {fun ssl_test_lib:user_lookup/3, undefined}} | ServerOpts],
                      client_config => [{srp_identity, {"Test-User", "secret"}} | ClientOpts]}} |
  