nginx-tests: mail_ssl.t annotate

annotate mail_ssl.t @ 1861:7b7b64569f55

Tests: reworked mail SSL tests to use IO::Socket::SSL. Relevant infrastructure is provided in Test::Nginx::IMAP (and also POP3 and SMTP for completeness). This also ensures that SSL handshake and various read operations are guarded with timeouts.

author	Maxim Dounin <mdounin@mdounin.ru>
date	Thu, 18 May 2023 18:07:08 +0300
parents	58951cf933e1
children	7a27a4e4fdae

rev	line source
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	1 #!/usr/bin/perl
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	2
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	3 # (C) Andrey Zelenkov
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	4 # (C) Nginx, Inc.
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	5
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	6 # Tests for mail ssl module.
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	7
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	8 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	9
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	10 use warnings;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	11 use strict;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	12
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	13 use Test::More;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	14
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	15 BEGIN { use FindBin; chdir($FindBin::Bin); }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	16
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	17 use lib 'lib';
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	18 use Test::Nginx;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	19 use Test::Nginx::IMAP;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	20 use Test::Nginx::POP3;
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	21 use Test::Nginx::SMTP;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	22
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	23 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	24
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	25 select STDERR; $\| = 1;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	26 select STDOUT; $\| = 1;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	27
1856 ce4a06d72256 Tests: SIGPIPE handling in mail tests. Maxim Dounin <mdounin@mdounin.ru> parents: 1831 diff changeset	28 local $SIG{PIPE} = 'IGNORE';
ce4a06d72256 Tests: SIGPIPE handling in mail tests. Maxim Dounin <mdounin@mdounin.ru> parents: 1831 diff changeset	29
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	30 my $t = Test::Nginx->new()->has(qw/mail mail_ssl imap pop3 smtp socket_ssl/)
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	31 ->has_daemon('openssl')->plan(19);
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	32
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	33 $t->write_file_expand('nginx.conf', <<'EOF');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	34
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	35 %%TEST_GLOBALS%%
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	36
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	37 daemon off;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	38
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	39 events {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	40 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	41
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	42 mail {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	43 ssl_certificate_key localhost.key;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	44 ssl_certificate localhost.crt;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	45
1147 796ed08cb215 Tests: simplified ssl_password_file tests in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1145 diff changeset	46 ssl_password_file password;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	47
1145 f193664e06d8 Tests: remove unused http block in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1142 diff changeset	48 auth_http http://127.0.0.1:8080; # unused
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	49
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	50 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	51 listen 127.0.0.1:8143;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	52 listen 127.0.0.1:8145 ssl;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	53 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	54 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	55
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	56 server {
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	57 listen 127.0.0.1:8148;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	58 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	59
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	60 # Special case for enabled "ssl" directive.
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	61
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	62 ssl on;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	63
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	64 ssl_certificate_key inherits.key;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	65 ssl_certificate inherits.crt;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	66 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	67
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	68 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	69 listen 127.0.0.1:8149;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	70 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	71
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	72 starttls on;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	73 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	74
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	75 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	76 listen 127.0.0.1:8150;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	77 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	78
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	79 starttls only;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	80 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	81
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	82 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	83 listen 127.0.0.1:8151;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	84 protocol pop3;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	85
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	86 starttls on;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	87 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	88
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	89 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	90 listen 127.0.0.1:8152;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	91 protocol pop3;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	92
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	93 starttls only;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	94 }
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	95
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	96 server {
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	97 listen 127.0.0.1:8153;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	98 protocol smtp;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	99
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	100 starttls on;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	101 }
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	102
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	103 server {
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	104 listen 127.0.0.1:8154;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	105 protocol smtp;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	106
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	107 starttls only;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	108 }
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	109 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	110
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	111 EOF
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	112
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	113 $t->write_file('openssl.conf', <<EOF);
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	114 [ req ]
1488 dbce8fb5f5f8 Tests: align with OpenSSL security level 2. Sergey Kandaurov <pluknet@nginx.com> parents: 1324 diff changeset	115 default_bits = 2048
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	116 encrypt_key = no
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	117 distinguished_name = req_distinguished_name
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	118 [ req_distinguished_name ]
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	119 EOF
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	120
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	121 my $d = $t->testdir();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	122
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	123 foreach my $name ('localhost', 'inherits') {
1220 0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	124 system("openssl genrsa -out $d/$name.key -passout pass:localhost "
1488 dbce8fb5f5f8 Tests: align with OpenSSL security level 2. Sergey Kandaurov <pluknet@nginx.com> parents: 1324 diff changeset	125 . "-aes128 2048 >>$d/openssl.out 2>&1") == 0
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	126 or die "Can't create private key: $!\n";
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	127 system('openssl req -x509 -new '
1220 0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	128 . "-config $d/openssl.conf -subj /CN=$name/ "
0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	129 . "-out $d/$name.crt "
0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	130 . "-key $d/$name.key -passin pass:localhost"
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	131 . ">>$d/openssl.out 2>&1") == 0
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	132 or die "Can't create certificate for $name: $!\n";
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	133 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	134
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	135 $t->write_file('password', 'localhost');
1324 918bf90466e0 Tests: hide startup warnings about deprecated ssl. Sergey Kandaurov <pluknet@nginx.com> parents: 1220 diff changeset	136
918bf90466e0 Tests: hide startup warnings about deprecated ssl. Sergey Kandaurov <pluknet@nginx.com> parents: 1220 diff changeset	137 open OLDERR, ">&", \*STDERR; close STDERR;
1145 f193664e06d8 Tests: remove unused http block in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1142 diff changeset	138 $t->run();
1324 918bf90466e0 Tests: hide startup warnings about deprecated ssl. Sergey Kandaurov <pluknet@nginx.com> parents: 1220 diff changeset	139 open STDERR, ">&", \*OLDERR;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	140
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	141 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	142
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	143 my ($s, $ssl);
f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	144
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	145 # simple tests to ensure that nothing broke with ssl_password_file directive
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	146
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	147 $s = Test::Nginx::IMAP->new();
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	148 $s->ok('greeting');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	149
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	150 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	151 $s->check(qr/\+ VXNlcm5hbWU6/, 'login');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	152
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	153 # ssl_certificate inheritance
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	154
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	155 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8145), SSL => 1);
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	156 $s->ok('greeting ssl');
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	157
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	158 like($s->socket()->dump_peer_certificate(), qr/CN=localhost/, 'CN');
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	159
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	160 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8148), SSL => 1);
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	161 $s->read();
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	162
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	163 like($s->socket()->dump_peer_certificate(), qr/CN=inherits/, 'CN inner');
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	164
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	165 # alpn
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	166
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	167 $s = Test::Nginx::IMAP->new(
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	168 PeerAddr => '127.0.0.1:' . port(8148),
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	169 SSL => 1,
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	170 SSL_alpn_protocols => [ 'imap' ]
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	171 );
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	172 $s->ok('alpn');
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	173
1743 2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	174 SKIP: {
1860 58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1856 diff changeset	175 skip 'LibreSSL too old', 1
58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1856 diff changeset	176 if $t->has_module('LibreSSL')
58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1856 diff changeset	177 and not $t->has_feature('libressl:3.4.0');
58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1856 diff changeset	178 skip 'OpenSSL too old', 1
58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1856 diff changeset	179 if $t->has_module('OpenSSL')
58951cf933e1 Tests: added has_feature() test for SSL libraries. Maxim Dounin <mdounin@mdounin.ru> parents: 1856 diff changeset	180 and not $t->has_feature('openssl:1.1.0');
1743 2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	181
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	182 TODO: {
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	183 local $TODO = 'not yet' unless $t->has_version('1.21.4');
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	184 local $TODO = 'no ALPN support in IO::Socket::SSL'
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	185 unless $t->has_feature('socket_ssl_alpn');
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	186
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	187 $s = Test::Nginx::IMAP->new(
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	188 PeerAddr => '127.0.0.1:' . port(8148),
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	189 SSL => 1,
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	190 SSL_alpn_protocols => [ 'unknown' ]
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	191 );
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	192 ok(!$s->read(), 'alpn rejected');
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	193
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	194 }
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	195
1743 2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	196 }
2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	197
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	198 # starttls imap
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	199
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	200 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8149));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	201 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	202
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	203 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	204 $s->check(qr/\+ VXNlcm5hbWU6/, 'imap auth before startls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	205
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	206 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8149));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	207 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	208
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	209 $s->send('1 STARTTLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	210 $s->ok('imap starttls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	211
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	212 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8150));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	213 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	214
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	215 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	216 $s->check(qr/^\S+ BAD/, 'imap auth before startls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	217
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	218 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8150));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	219 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	220
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	221 $s->send('1 STARTTLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	222 $s->ok('imap starttls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	223
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	224 # starttls pop3
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	225
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	226 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8151));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	227 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	228
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	229 $s->send('AUTH LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	230 $s->check(qr/\+ VXNlcm5hbWU6/, 'pop3 auth before startls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	231
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	232 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8151));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	233 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	234
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	235 $s->send('STLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	236 $s->ok('pop3 starttls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	237
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	238 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8152));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	239 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	240
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	241 $s->send('AUTH LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	242 $s->check(qr/^-ERR/, 'pop3 auth before startls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	243
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	244 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8152));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	245 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	246
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	247 $s->send('STLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	248 $s->ok('pop3 starttls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	249
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	250 # starttls smtp
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	251
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	252 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8153));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	253 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	254
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	255 $s->send('AUTH LOGIN');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	256 $s->check(qr/^334 VXNlcm5hbWU6/, 'smtp auth before startls on');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	257
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	258 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8153));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	259 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	260
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	261 $s->send('STARTTLS');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	262 $s->ok('smtp starttls on');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	263
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	264 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8154));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	265 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	266
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	267 $s->send('AUTH LOGIN');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	268 $s->check(qr/^5.. /, 'smtp auth before startls only');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	269
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	270 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8154));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	271 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	272
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	273 $s->send('STARTTLS');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	274 $s->ok('smtp starttls only');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	275
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	276 ###############################################################################

Mercurial > hg > nginx-tests

annotate mail_ssl.t @ 1861:7b7b64569f55