nginx-tests: mail_imap_ssl.t annotate

annotate mail_imap_ssl.t @ 623:b70df6924290

Tests: removed unnecessary imports, lifted up skip condition. No functional changes.

author	Andrey Zelenkov <zelenkov@nginx.com>
date	Mon, 06 Jul 2015 21:50:11 +0300
parents	907e89fba9c3
children	63d1b7cb974a

rev	line source
541 53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	1 #!/usr/bin/perl
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	2
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	3 # (C) Maxim Dounin
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	4 # (C) Sergey Kandaurov
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	5 # (C) Nginx, Inc.
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	6
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	7 # Tests for nginx mail imap module with ssl.
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	8
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	9 ###############################################################################
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	10
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	11 use warnings;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	12 use strict;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	13
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	14 use Test::More;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	15
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	16 use MIME::Base64;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	17
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	18 BEGIN { use FindBin; chdir($FindBin::Bin); }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	19
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	20 use lib 'lib';
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	21 use Test::Nginx;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	22 use Test::Nginx::IMAP;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	23
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	24 ###############################################################################
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	25
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	26 select STDERR; $\| = 1;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	27 select STDOUT; $\| = 1;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	28
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	29 eval { require IO::Socket::SSL; };
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	30 plan(skip_all => 'IO::Socket::SSL not installed') if $@;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	31 eval { IO::Socket::SSL::SSL_VERIFY_NONE(); };
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	32 plan(skip_all => 'IO::Socket::SSL too old') if $@;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	33
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	34 local $SIG{PIPE} = 'IGNORE';
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	35
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	36 my $t = Test::Nginx->new()
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	37 ->has(qw/mail mail_ssl imap http rewrite/)->has_daemon('openssl')
568 907e89fba9c3 Tests: removed TODO and try_run() checks for legacy versions. Sergey Kandaurov <pluknet@nginx.com> parents: 541 diff changeset	38 ->run_daemon(\&Test::Nginx::IMAP::imap_test_daemon)->plan(12)
541 53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	39 ->write_file_expand('nginx.conf', <<'EOF');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	40
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	41 %%TEST_GLOBALS%%
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	42
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	43 daemon off;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	44
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	45 events {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	46 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	47
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	48 mail {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	49 proxy_pass_error_message on;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	50 auth_http http://127.0.0.1:8080/mail/auth;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	51 auth_http_pass_client_cert on;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	52
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	53 ssl_certificate_key 1.example.com.key;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	54 ssl_certificate 1.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	55
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	56 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	57 listen 127.0.0.1:8142;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	58 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	59 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	60
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	61 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	62 listen 127.0.0.1:8143 ssl;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	63 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	64
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	65 ssl_verify_client on;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	66 ssl_client_certificate 2.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	67 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	68
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	69 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	70 listen 127.0.0.1:8145 ssl;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	71 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	72
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	73 ssl_verify_client optional;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	74 ssl_client_certificate 2.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	75 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	76
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	77 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	78 listen 127.0.0.1:8146 ssl;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	79 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	80
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	81 ssl_verify_client optional;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	82 ssl_client_certificate 2.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	83 ssl_trusted_certificate 3.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	84 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	85
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	86 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	87 listen 127.0.0.1:8147 ssl;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	88 protocol imap;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	89
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	90 ssl_verify_client optional_no_ca;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	91 ssl_client_certificate 2.example.com.crt;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	92 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	93 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	94
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	95 http {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	96 %%TEST_GLOBALS_HTTP%%
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	97
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	98 log_format test '$http_auth_ssl:$http_auth_ssl_verify:'
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	99 '$http_auth_ssl_subject:$http_auth_ssl_issuer:'
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	100 '$http_auth_ssl_serial:$http_auth_ssl_fingerprint:'
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	101 '$http_auth_ssl_cert';
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	102
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	103 server {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	104 listen 127.0.0.1:8080;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	105 server_name localhost;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	106
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	107 location = /mail/auth {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	108 access_log auth.log test;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	109
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	110 add_header Auth-Status OK;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	111 add_header Auth-Server 127.0.0.1;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	112 add_header Auth-Port 8144;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	113 add_header Auth-Wait 1;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	114 return 204;
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	115 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	116 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	117 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	118
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	119 EOF
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	120
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	121 $t->write_file('openssl.conf', <<EOF);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	122 [ req ]
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	123 default_bits = 1024
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	124 encrypt_key = no
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	125 distinguished_name = req_distinguished_name
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	126 [ req_distinguished_name ]
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	127 EOF
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	128
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	129 my $d = $t->testdir();
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	130
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	131 foreach my $name ('1.example.com', '2.example.com', '3.example.com') {
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	132 system('openssl req -x509 -new '
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	133 . "-config '$d/openssl.conf' -subj '/CN=$name/' "
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	134 . "-out '$d/$name.crt' -keyout '$d/$name.key' "
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	135 . ">>$d/openssl.out 2>&1") == 0
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	136 or die "Can't create certificate for $name: $!\n";
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	137 }
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	138
568 907e89fba9c3 Tests: removed TODO and try_run() checks for legacy versions. Sergey Kandaurov <pluknet@nginx.com> parents: 541 diff changeset	139 $t->run();
541 53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	140
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	141 ###############################################################################
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	142
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	143 my $cred = encode_base64("\0test\@example.com\0secret", '');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	144 my %ssl = (
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	145 'SSL' => 1,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	146 'SSL_verify_mode' => 'IO::Socket::SSL::SSL_VERIFY_NONE()',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	147 'SSL_error_trap' => 'sub { die $_[1] }',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	148 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	149
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	150 # no ssl connection
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	151
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	152 my $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:8142');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	153 $s->ok('plain connection');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	154 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	155
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	156 # no cert
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	157
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	158 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:8143', %ssl);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	159 $s->check(qr/BYE No required SSL certificate/, 'no cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	160
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	161 # no cert with ssl_verify_client optional
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	162
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	163 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:8145', %ssl);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	164 $s->ok('no optional cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	165 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	166
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	167 # wrong cert with ssl_verify_client optional
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	168
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	169 $s = Test::Nginx::IMAP->new(
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	170 PeerAddr => '127.0.0.1:8145',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	171 SSL_cert_file => "$d/1.example.com.crt",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	172 SSL_key_file => "$d/1.example.com.key",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	173 %ssl,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	174 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	175 $s->check(qr/BYE SSL certificate error/, 'bad optional cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	176
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	177 # wrong cert with ssl_verify_client optional_no_ca
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	178
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	179 $s = Test::Nginx::IMAP->new(
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	180 PeerAddr => '127.0.0.1:8147',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	181 SSL_cert_file => "$d/1.example.com.crt",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	182 SSL_key_file => "$d/1.example.com.key",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	183 %ssl,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	184 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	185 $s->ok('bad optional_no_ca cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	186 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	187
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	188 # matching cert with ssl_verify_client optional
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	189
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	190 $s = Test::Nginx::IMAP->new(
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	191 PeerAddr => '127.0.0.1:8145',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	192 SSL_cert_file => "$d/2.example.com.crt",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	193 SSL_key_file => "$d/2.example.com.key",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	194 %ssl,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	195 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	196 $s->ok('good cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	197 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	198
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	199 # trusted cert with ssl_verify_client optional
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	200
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	201 $s = Test::Nginx::IMAP->new(
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	202 PeerAddr => '127.0.0.1:8146',
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	203 SSL_cert_file => "$d/3.example.com.crt",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	204 SSL_key_file => "$d/3.example.com.key",
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	205 %ssl,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	206 );
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	207 $s->ok('trusted cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	208 $s->send('1 AUTHENTICATE PLAIN ' . $cred);
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	209 $s->read();
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	210
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	211 # test auth_http request header fields with access_log
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	212
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	213 $t->stop();
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	214
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	215 open my $f, '<', $t->testdir() . '/' . 'auth.log'
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	216 or die "Can't open auth.log: $!";
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	217
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	218 like($f->getline(), qr/^-:-:-:-:-:-:-\x0d?\x0a?$/, 'log - plain connection');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	219 like($f->getline(), qr/^on:NONE:-:-:-:-:-\x0d?\x0a?$/,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	220 'log - no cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	221 like($f->getline(),
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	222 qr!^on:FAILED:/CN=1.example.com:/CN=1.example.com:\w+:\w+:[^:]+$!,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	223 'log - bad cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	224 like($f->getline(),
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	225 qr!^on:SUCCESS:/CN=2.example.com:/CN=2.example.com:\w+:\w+:[^:]+$!,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	226 'log - good cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	227 like($f->getline(),
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	228 qr!^on:SUCCESS:/CN=3.example.com:/CN=3.example.com:\w+:\w+:[^:]+$!,
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	229 'log - trusted cert');
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	230
53d0d963eb40 Tests: basic imap ssl tests. Sergey Kandaurov <pluknet@nginx.com> parents: diff changeset	231 ###############################################################################

Mercurial > hg > nginx-tests

annotate mail_imap_ssl.t @ 623:b70df6924290