nginx-tests: mail_ssl.t annotate

annotate mail_ssl.t @ 1974:b5036a0f9ae0

Tests: improved compatibility when using recent "openssl" app. Starting with OpenSSL 3.0, "openssl genrsa" generates encrypted keys in PKCS#8 format instead of previously used PKCS#1 format. Further, since OpenSSL 1.1.0 such keys are using PBKDF2 hmacWithSHA256. Such keys are not supported by old SSL libraries, notably by OpenSSL before 1.0.0 (OpenSSL 0.9.8 only supports hmacWithSHA1) and by BoringSSL before May 21, 2019 (support for hmacWithSHA256 was added in 302a4dee6c), and trying to load such keys into nginx compiled with an old SSL library results in "unsupported prf" errors. To facilitate testing with old SSL libraries, keys are now generated with "openssl genrsa -traditional" if the flag is available.

author	Maxim Dounin <mdounin@mdounin.ru>
date	Mon, 06 May 2024 00:04:26 +0300
parents	2a0a6035a1af
children

rev	line source
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	1 #!/usr/bin/perl
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	2
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	3 # (C) Andrey Zelenkov
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	4 # (C) Nginx, Inc.
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	5
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	6 # Tests for mail ssl module.
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	7
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	8 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	9
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	10 use warnings;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	11 use strict;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	12
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	13 use Test::More;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	14
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	15 BEGIN { use FindBin; chdir($FindBin::Bin); }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	16
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	17 use lib 'lib';
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	18 use Test::Nginx;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	19 use Test::Nginx::IMAP;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	20 use Test::Nginx::POP3;
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	21 use Test::Nginx::SMTP;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	22
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	23 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	24
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	25 select STDERR; $\| = 1;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	26 select STDOUT; $\| = 1;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	27
1856 ce4a06d72256 Tests: SIGPIPE handling in mail tests. Maxim Dounin <mdounin@mdounin.ru> parents: 1831 diff changeset	28 local $SIG{PIPE} = 'IGNORE';
ce4a06d72256 Tests: SIGPIPE handling in mail tests. Maxim Dounin <mdounin@mdounin.ru> parents: 1831 diff changeset	29
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	30 my $t = Test::Nginx->new()->has(qw/mail mail_ssl imap pop3 smtp socket_ssl/)
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	31 ->has_daemon('openssl')->plan(19);
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	32
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	33 $t->write_file_expand('nginx.conf', <<'EOF');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	34
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	35 %%TEST_GLOBALS%%
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	36
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	37 daemon off;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	38
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	39 events {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	40 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	41
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	42 mail {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	43 ssl_certificate_key localhost.key;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	44 ssl_certificate localhost.crt;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	45
1147 796ed08cb215 Tests: simplified ssl_password_file tests in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1145 diff changeset	46 ssl_password_file password;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	47
1145 f193664e06d8 Tests: remove unused http block in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1142 diff changeset	48 auth_http http://127.0.0.1:8080; # unused
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	49
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	50 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	51 listen 127.0.0.1:8143;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	52 listen 127.0.0.1:8145 ssl;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	53 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	54 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	55
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	56 server {
1904 c04134b0290b Tests: removed deprecated "ssl" directive tests. Sergey Kandaurov <pluknet@nginx.com> parents: 1872 diff changeset	57 listen 127.0.0.1:8148 ssl;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	58 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	59
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	60 ssl_certificate_key inherits.key;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	61 ssl_certificate inherits.crt;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	62 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	63
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	64 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	65 listen 127.0.0.1:8149;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	66 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	67
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	68 starttls on;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	69 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	70
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	71 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	72 listen 127.0.0.1:8150;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	73 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	74
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	75 starttls only;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	76 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	77
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	78 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	79 listen 127.0.0.1:8151;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	80 protocol pop3;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	81
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	82 starttls on;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	83 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	84
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	85 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	86 listen 127.0.0.1:8152;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	87 protocol pop3;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	88
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	89 starttls only;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	90 }
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	91
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	92 server {
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	93 listen 127.0.0.1:8153;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	94 protocol smtp;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	95
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	96 starttls on;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	97 }
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	98
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	99 server {
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	100 listen 127.0.0.1:8154;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	101 protocol smtp;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	102
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	103 starttls only;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	104 }
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	105 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	106
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	107 EOF
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	108
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	109 $t->write_file('openssl.conf', <<EOF);
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	110 [ req ]
1488 dbce8fb5f5f8 Tests: align with OpenSSL security level 2. Sergey Kandaurov <pluknet@nginx.com> parents: 1324 diff changeset	111 default_bits = 2048
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	112 encrypt_key = no
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	113 distinguished_name = req_distinguished_name
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	114 [ req_distinguished_name ]
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	115 EOF
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	116
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	117 my $d = $t->testdir();
1974 b5036a0f9ae0 Tests: improved compatibility when using recent "openssl" app. Maxim Dounin <mdounin@mdounin.ru> parents: 1937 diff changeset	118 my $tr = `openssl genrsa -help 2>&1` =~ /-traditional/ ? '-traditional' : '';
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	119
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	120 foreach my $name ('localhost', 'inherits') {
1220 0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	121 system("openssl genrsa -out $d/$name.key -passout pass:localhost "
1974 b5036a0f9ae0 Tests: improved compatibility when using recent "openssl" app. Maxim Dounin <mdounin@mdounin.ru> parents: 1937 diff changeset	122 . "-aes128 $tr 2048 >>$d/openssl.out 2>&1") == 0
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	123 or die "Can't create private key: $!\n";
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	124 system('openssl req -x509 -new '
1220 0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	125 . "-config $d/openssl.conf -subj /CN=$name/ "
0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	126 . "-out $d/$name.crt "
0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	127 . "-key $d/$name.key -passin pass:localhost"
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	128 . ">>$d/openssl.out 2>&1") == 0
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	129 or die "Can't create certificate for $name: $!\n";
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	130 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	131
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	132 $t->write_file('password', 'localhost');
1145 f193664e06d8 Tests: remove unused http block in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1142 diff changeset	133 $t->run();
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	134
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	135 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	136
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	137 my ($s, $ssl);
f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	138
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	139 # simple tests to ensure that nothing broke with ssl_password_file directive
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	140
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	141 $s = Test::Nginx::IMAP->new();
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	142 $s->ok('greeting');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	143
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	144 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	145 $s->check(qr/\+ VXNlcm5hbWU6/, 'login');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	146
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	147 # ssl_certificate inheritance
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	148
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	149 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8145), SSL => 1);
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	150 $s->ok('greeting ssl');
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	151
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	152 like($s->socket()->dump_peer_certificate(), qr/CN=localhost/, 'CN');
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	153
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	154 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8148), SSL => 1);
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	155 $s->read();
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	156
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	157 like($s->socket()->dump_peer_certificate(), qr/CN=inherits/, 'CN inner');
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	158
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	159 # alpn
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	160
1872 7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	161 SKIP: {
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	162 skip 'LibreSSL too old', 2
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	163 if $t->has_module('LibreSSL')
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	164 and not $t->has_feature('libressl:3.4.0');
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	165 skip 'OpenSSL too old', 2
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	166 if $t->has_module('OpenSSL')
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	167 and not $t->has_feature('openssl:1.1.0');
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	168 skip 'no ALPN support in IO::Socket::SSL', 2
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	169 unless $t->has_feature('socket_ssl_alpn');
7a27a4e4fdae Tests: extended check for ALPN in mail_ssl.t. Sergey Kandaurov <pluknet@nginx.com> parents: 1861 diff changeset	170
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	171 $s = Test::Nginx::IMAP->new(
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	172 PeerAddr => '127.0.0.1:' . port(8148),
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	173 SSL => 1,
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	174 SSL_alpn_protocols => [ 'imap' ]
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	175 );
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	176 $s->ok('alpn');
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	177
1861 7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	178 $s = Test::Nginx::IMAP->new(
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	179 PeerAddr => '127.0.0.1:' . port(8148),
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	180 SSL => 1,
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	181 SSL_alpn_protocols => [ 'unknown' ]
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	182 );
7b7b64569f55 Tests: reworked mail SSL tests to use IO::Socket::SSL. Maxim Dounin <mdounin@mdounin.ru> parents: 1860 diff changeset	183 ok(!$s->read(), 'alpn rejected');
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	184
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	185 }
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	186
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	187 # starttls imap
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	188
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	189 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8149));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	190 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	191
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	192 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	193 $s->check(qr/\+ VXNlcm5hbWU6/, 'imap auth before startls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	194
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	195 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8149));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	196 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	197
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	198 $s->send('1 STARTTLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	199 $s->ok('imap starttls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	200
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	201 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8150));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	202 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	203
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	204 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	205 $s->check(qr/^\S+ BAD/, 'imap auth before startls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	206
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	207 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8150));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	208 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	209
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	210 $s->send('1 STARTTLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	211 $s->ok('imap starttls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	212
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	213 # starttls pop3
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	214
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	215 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8151));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	216 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	217
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	218 $s->send('AUTH LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	219 $s->check(qr/\+ VXNlcm5hbWU6/, 'pop3 auth before startls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	220
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	221 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8151));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	222 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	223
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	224 $s->send('STLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	225 $s->ok('pop3 starttls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	226
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	227 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8152));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	228 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	229
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	230 $s->send('AUTH LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	231 $s->check(qr/^-ERR/, 'pop3 auth before startls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	232
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	233 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8152));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	234 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	235
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	236 $s->send('STLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	237 $s->ok('pop3 starttls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	238
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	239 # starttls smtp
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	240
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	241 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8153));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	242 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	243
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	244 $s->send('AUTH LOGIN');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	245 $s->check(qr/^334 VXNlcm5hbWU6/, 'smtp auth before startls on');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	246
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	247 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8153));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	248 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	249
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	250 $s->send('STARTTLS');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	251 $s->ok('smtp starttls on');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	252
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	253 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8154));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	254 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	255
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	256 $s->send('AUTH LOGIN');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	257 $s->check(qr/^5.. /, 'smtp auth before startls only');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	258
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	259 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8154));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	260 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	261
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	262 $s->send('STARTTLS');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	263 $s->ok('smtp starttls only');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	264
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	265 ###############################################################################

Mercurial > hg > nginx-tests

annotate mail_ssl.t @ 1974:b5036a0f9ae0