nginx-tests: mail_imap_ssl.t annotate

annotate mail_imap_ssl.t @ 797:55ca38e1a3d9

Tests: TODO 'phantom event' alerts in mail_imap_ssl.t on Solaris. See 153969b53780 for details.

author	Sergey Kandaurov <pluknet@nginx.com>
date	Wed, 09 Dec 2015 13:52:37 +0300
parents	63d1b7cb974a
children	a07734ecb988

rev	line source
541 53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	1 #!/usr/bin/perl
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	2
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	3 # (C) Maxim Dounin
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	4 # (C) Sergey Kandaurov
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	5 # (C) Nginx, Inc.
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	6
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	7 # Tests for nginx mail imap module with ssl.
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	8
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	9 ###############################################################################
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	10
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	11 use warnings;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	12 use strict;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	13
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	14 use Test::More;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	15
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	16 use MIME::Base64;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	17
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	18 BEGIN { use FindBin; chdir($FindBin::Bin); }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	19
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	20 use lib 'lib';
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	21 use Test::Nginx;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	22 use Test::Nginx::IMAP;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	23
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	24 ###############################################################################
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	25
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	26 select STDERR; $\| = 1;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	27 select STDOUT; $\| = 1;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	28
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	29 eval { require IO::Socket::SSL; };
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	30 plan(skip_all => 'IO::Socket::SSL not installed') if $@;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	31 eval { IO::Socket::SSL::SSL_VERIFY_NONE(); };
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	32 plan(skip_all => 'IO::Socket::SSL too old') if $@;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	33
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	34 local $SIG{PIPE} = 'IGNORE';
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	35
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	36 my $t = Test::Nginx->new()
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	37 ->has(qw/mail mail_ssl imap http rewrite/)->has_daemon('openssl')
797 55ca38e1a3d9 Tests: TODO 'phantom event' alerts in mail_imap_ssl.t on Solaris. Sergey Kandaurov <pluknet@nginx.com> parents: 753 diff changeset	38 ->run_daemon(\&Test::Nginx::IMAP::imap_test_daemon)->plan(12);
55ca38e1a3d9 Tests: TODO 'phantom event' alerts in mail_imap_ssl.t on Solaris. Sergey Kandaurov <pluknet@nginx.com> parents: 753 diff changeset	39
55ca38e1a3d9 Tests: TODO 'phantom event' alerts in mail_imap_ssl.t on Solaris. Sergey Kandaurov <pluknet@nginx.com> parents: 753 diff changeset	40 $t->todo_alerts() if $^O eq 'solaris';
55ca38e1a3d9 Tests: TODO 'phantom event' alerts in mail_imap_ssl.t on Solaris. Sergey Kandaurov <pluknet@nginx.com> parents: 753 diff changeset	41
55ca38e1a3d9 Tests: TODO 'phantom event' alerts in mail_imap_ssl.t on Solaris. Sergey Kandaurov <pluknet@nginx.com> parents: 753 diff changeset	42 $t->write_file_expand('nginx.conf', <<'EOF');
541 53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	43
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	44 %%TEST_GLOBALS%%
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	45
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	46 daemon off;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	47
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	48 events {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	49 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	50
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	51 mail {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	52 proxy_pass_error_message on;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	53 auth_http http://127.0.0.1:8080/mail/auth;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	54 auth_http_pass_client_cert on;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	55
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	56 ssl_certificate_key 1.example.com.key;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	57 ssl_certificate 1.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	58
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	59 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	60 listen 127.0.0.1:8142;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	61 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	62 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	63
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	64 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	65 listen 127.0.0.1:8143 ssl;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	66 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	67
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	68 ssl_verify_client on;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	69 ssl_client_certificate 2.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	70 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	71
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	72 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	73 listen 127.0.0.1:8145 ssl;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	74 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	75
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	76 ssl_verify_client optional;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	77 ssl_client_certificate 2.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	78 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	79
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	80 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	81 listen 127.0.0.1:8146 ssl;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	82 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	83
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	84 ssl_verify_client optional;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	85 ssl_client_certificate 2.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	86 ssl_trusted_certificate 3.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	87 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	88
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	89 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	90 listen 127.0.0.1:8147 ssl;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	91 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	92
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	93 ssl_verify_client optional_no_ca;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	94 ssl_client_certificate 2.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	95 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	96 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	97
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	98 http {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	99 %%TEST_GLOBALS_HTTP%%
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	100
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	101 log_format test '$http_auth_ssl:$http_auth_ssl_verify:'
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	102 '$http_auth_ssl_subject:$http_auth_ssl_issuer:'
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	103 '$http_auth_ssl_serial:$http_auth_ssl_fingerprint:'
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	104 '$http_auth_ssl_cert';
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	105
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	106 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	107 listen 127.0.0.1:8080;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	108 server_name localhost;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	109
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	110 location = /mail/auth {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	111 access_log auth.log test;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	112
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	113 add_header Auth-Status OK;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	114 add_header Auth-Server 127.0.0.1;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	115 add_header Auth-Port 8144;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	116 add_header Auth-Wait 1;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	117 return 204;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	118 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	119 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	120 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	121
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	122 EOF
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	123
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	124 $t->write_file('openssl.conf', <<EOF);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	125 [ req ]
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	126 default_bits = 1024
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	127 encrypt_key = no
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	128 distinguished_name = req_distinguished_name
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	129 [ req_distinguished_name ]
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	130 EOF
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	131
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	132 my $d = $t->testdir();
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	133
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	134 foreach my $name ('1.example.com', '2.example.com', '3.example.com') {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	135 system('openssl req -x509 -new '
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	136 . "-config '$d/openssl.conf' -subj '/CN=$name/' "
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	137 . "-out '$d/$name.crt' -keyout '$d/$name.key' "
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	138 . ">>$d/openssl.out 2>&1") == 0
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	139 or die "Can't create certificate for $name: $!\n";
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	140 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	141
568 907e89fba9c3 Tests: removed TODO and try_run() checks for legacy versions. Sergey Kandaurov <pluknet@nginx.com> parents: 541 diff changeset	142 $t->run();
541 53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	143
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	144 ###############################################################################
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	145
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	146 my $cred = encode_base64("\0test\@example.com\0secret", '');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	147 my %ssl = (
753 63d1b7cb974a Tests: fixed IO::Socket::SSL options in mail_imap_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 623 diff changeset	148 SSL => 1,
63d1b7cb974a Tests: fixed IO::Socket::SSL options in mail_imap_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 623 diff changeset	149 SSL_verify_mode => IO::Socket::SSL::SSL_VERIFY_NONE(),
63d1b7cb974a Tests: fixed IO::Socket::SSL options in mail_imap_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 623 diff changeset	150 SSL_error_trap => sub { die $_[1] },
541 53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	151 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	152
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	153 # no ssl connection
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	154
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	155 my $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:8142');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	156 $s->ok('plain connection');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	157 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	158
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	159 # no cert
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	160
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	161 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:8143', %ssl);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	162 $s->check(qr/BYE No required SSL certificate/, 'no cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	163
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	164 # no cert with ssl_verify_client optional
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	165
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	166 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:8145', %ssl);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	167 $s->ok('no optional cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	168 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	169
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	170 # wrong cert with ssl_verify_client optional
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	171
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	172 $s = Test::Nginx::IMAP->new(
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	173 PeerAddr => '127.0.0.1:8145',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	174 SSL_cert_file => "$d/1.example.com.crt",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	175 SSL_key_file => "$d/1.example.com.key",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	176 %ssl,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	177 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	178 $s->check(qr/BYE SSL certificate error/, 'bad optional cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	179
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	180 # wrong cert with ssl_verify_client optional_no_ca
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	181
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	182 $s = Test::Nginx::IMAP->new(
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	183 PeerAddr => '127.0.0.1:8147',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	184 SSL_cert_file => "$d/1.example.com.crt",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	185 SSL_key_file => "$d/1.example.com.key",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	186 %ssl,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	187 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	188 $s->ok('bad optional_no_ca cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	189 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	190
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	191 # matching cert with ssl_verify_client optional
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	192
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	193 $s = Test::Nginx::IMAP->new(
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	194 PeerAddr => '127.0.0.1:8145',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	195 SSL_cert_file => "$d/2.example.com.crt",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	196 SSL_key_file => "$d/2.example.com.key",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	197 %ssl,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	198 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	199 $s->ok('good cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	200 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	201
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	202 # trusted cert with ssl_verify_client optional
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	203
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	204 $s = Test::Nginx::IMAP->new(
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	205 PeerAddr => '127.0.0.1:8146',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	206 SSL_cert_file => "$d/3.example.com.crt",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	207 SSL_key_file => "$d/3.example.com.key",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	208 %ssl,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	209 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	210 $s->ok('trusted cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	211 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	212 $s->read();
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	213
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	214 # test auth_http request header fields with access_log
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	215
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	216 $t->stop();
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	217
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	218 open my $f, '<', $t->testdir() . '/' . 'auth.log'
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	219 or die "Can't open auth.log: $!";
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	220
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	221 like($f->getline(), qr/^-:-:-:-:-:-:-\x0d?\x0a?$/, 'log - plain connection');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	222 like($f->getline(), qr/^on:NONE:-:-:-:-:-\x0d?\x0a?$/,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	223 'log - no cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	224 like($f->getline(),
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	225 qr!^on:FAILED:/CN=1.example.com:/CN=1.example.com:\w+:\w+:[^:]+$!,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	226 'log - bad cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	227 like($f->getline(),
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	228 qr!^on:SUCCESS:/CN=2.example.com:/CN=2.example.com:\w+:\w+:[^:]+$!,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	229 'log - good cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	230 like($f->getline(),
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	231 qr!^on:SUCCESS:/CN=3.example.com:/CN=3.example.com:\w+:\w+:[^:]+$!,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	232 'log - trusted cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	233
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	234 ###############################################################################

Mercurial > hg > nginx-tests

annotate mail_imap_ssl.t @ 797:55ca38e1a3d9