nginx-tests: mail_ssl.t annotate

annotate mail_ssl.t @ 1831:f6d1f82f314b

Tests: separate SSL session reuse tests in mail. Instead of being mixed with generic SSL tests, session reuse variants are now tested in a separate file.

author	Maxim Dounin <mdounin@mdounin.ru>
date	Thu, 23 Mar 2023 19:49:51 +0300
parents	1f125771f1a1
children	ce4a06d72256

rev	line source
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	1 #!/usr/bin/perl
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	2
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	3 # (C) Andrey Zelenkov
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	4 # (C) Nginx, Inc.
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	5
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	6 # Tests for mail ssl module.
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	7
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	8 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	9
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	10 use warnings;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	11 use strict;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	12
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	13 use Test::More;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	14
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	15 BEGIN { use FindBin; chdir($FindBin::Bin); }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	16
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	17 use lib 'lib';
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	18 use Test::Nginx;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	19 use Test::Nginx::IMAP;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	20 use Test::Nginx::POP3;
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	21 use Test::Nginx::SMTP;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	22
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	23 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	24
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	25 select STDERR; $\| = 1;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	26 select STDOUT; $\| = 1;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	27
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	28 eval {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	29 require Net::SSLeay;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	30 Net::SSLeay::load_error_strings();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	31 Net::SSLeay::SSLeay_add_ssl_algorithms();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	32 Net::SSLeay::randomize();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	33 };
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	34 plan(skip_all => 'Net::SSLeay not installed') if $@;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	35
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	36 eval { exists &Net::SSLeay::P_alpn_selected or die; };
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	37 plan(skip_all => 'Net::SSLeay with OpenSSL ALPN support required') if $@;
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	38
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	39 my $t = Test::Nginx->new()->has(qw/mail mail_ssl imap pop3 smtp/)
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	40 ->has_daemon('openssl')->plan(18);
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	41
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	42 $t->write_file_expand('nginx.conf', <<'EOF');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	43
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	44 %%TEST_GLOBALS%%
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	45
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	46 daemon off;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	47
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	48 events {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	49 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	50
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	51 mail {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	52 ssl_certificate_key localhost.key;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	53 ssl_certificate localhost.crt;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	54
1147 796ed08cb215 Tests: simplified ssl_password_file tests in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1145 diff changeset	55 ssl_password_file password;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	56
1145 f193664e06d8 Tests: remove unused http block in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1142 diff changeset	57 auth_http http://127.0.0.1:8080; # unused
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	58
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	59 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	60 listen 127.0.0.1:8143;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	61 listen 127.0.0.1:8145 ssl;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	62 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	63 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	64
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	65 server {
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	66 listen 127.0.0.1:8148;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	67 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	68
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	69 # Special case for enabled "ssl" directive.
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	70
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	71 ssl on;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	72
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	73 ssl_certificate_key inherits.key;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	74 ssl_certificate inherits.crt;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	75 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	76
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	77 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	78 listen 127.0.0.1:8149;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	79 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	80
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	81 starttls on;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	82 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	83
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	84 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	85 listen 127.0.0.1:8150;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	86 protocol imap;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	87
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	88 starttls only;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	89 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	90
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	91 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	92 listen 127.0.0.1:8151;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	93 protocol pop3;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	94
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	95 starttls on;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	96 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	97
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	98 server {
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	99 listen 127.0.0.1:8152;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	100 protocol pop3;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	101
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	102 starttls only;
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	103 }
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	104
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	105 server {
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	106 listen 127.0.0.1:8153;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	107 protocol smtp;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	108
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	109 starttls on;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	110 }
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	111
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	112 server {
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	113 listen 127.0.0.1:8154;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	114 protocol smtp;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	115
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	116 starttls only;
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	117 }
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	118 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	119
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	120 EOF
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	121
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	122 $t->write_file('openssl.conf', <<EOF);
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	123 [ req ]
1488 dbce8fb5f5f8 Tests: align with OpenSSL security level 2. Sergey Kandaurov <pluknet@nginx.com> parents: 1324 diff changeset	124 default_bits = 2048
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	125 encrypt_key = no
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	126 distinguished_name = req_distinguished_name
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	127 [ req_distinguished_name ]
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	128 EOF
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	129
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	130 my $d = $t->testdir();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	131
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	132 foreach my $name ('localhost', 'inherits') {
1220 0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	133 system("openssl genrsa -out $d/$name.key -passout pass:localhost "
1488 dbce8fb5f5f8 Tests: align with OpenSSL security level 2. Sergey Kandaurov <pluknet@nginx.com> parents: 1324 diff changeset	134 . "-aes128 2048 >>$d/openssl.out 2>&1") == 0
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	135 or die "Can't create private key: $!\n";
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	136 system('openssl req -x509 -new '
1220 0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	137 . "-config $d/openssl.conf -subj /CN=$name/ "
0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	138 . "-out $d/$name.crt "
0af58b78df35 Tests: removed single quotes from system() calls. Sergey Kandaurov <pluknet@nginx.com> parents: 1148 diff changeset	139 . "-key $d/$name.key -passin pass:localhost"
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	140 . ">>$d/openssl.out 2>&1") == 0
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	141 or die "Can't create certificate for $name: $!\n";
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	142 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	143
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	144 my $ctx = Net::SSLeay::CTX_new() or die("Failed to create SSL_CTX $!");
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	145 $t->write_file('password', 'localhost');
1324 918bf90466e0 Tests: hide startup warnings about deprecated ssl. Sergey Kandaurov <pluknet@nginx.com> parents: 1220 diff changeset	146
918bf90466e0 Tests: hide startup warnings about deprecated ssl. Sergey Kandaurov <pluknet@nginx.com> parents: 1220 diff changeset	147 open OLDERR, ">&", \*STDERR; close STDERR;
1145 f193664e06d8 Tests: remove unused http block in mail_ssl.t. Andrey Zelenkov <zelenkov@nginx.com> parents: 1142 diff changeset	148 $t->run();
1324 918bf90466e0 Tests: hide startup warnings about deprecated ssl. Sergey Kandaurov <pluknet@nginx.com> parents: 1220 diff changeset	149 open STDERR, ">&", \*OLDERR;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	150
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	151 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	152
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	153 my ($s, $ssl);
f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	154
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	155 # simple tests to ensure that nothing broke with ssl_password_file directive
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	156
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	157 $s = Test::Nginx::IMAP->new();
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	158 $s->ok('greeting');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	159
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	160 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	161 $s->check(qr/\+ VXNlcm5hbWU6/, 'login');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	162
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	163 # ssl_certificate inheritance
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	164
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	165 ($s, $ssl) = get_ssl_socket(8145);
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	166 like(Net::SSLeay::dump_peer_certificate($ssl), qr/CN=localhost/, 'CN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	167
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	168 ($s, $ssl) = get_ssl_socket(8148);
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	169 like(Net::SSLeay::dump_peer_certificate($ssl), qr/CN=inherits/, 'CN inner');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	170
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	171 # alpn
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	172
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	173 ok(get_ssl_socket(8148, ['imap']), 'alpn');
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	174
1743 2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	175 SKIP: {
2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	176 $t->{_configure_args} =~ /LibreSSL ([\d\.]+)/;
2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	177 skip 'LibreSSL too old', 1 if defined $1 and $1 lt '3.4.0';
1744 38bd7e75fe69 Tests: skip ALPN rejection tests with OpenSSL < 1.1.0. Sergey Kandaurov <pluknet@nginx.com> parents: 1743 diff changeset	178 $t->{_configure_args} =~ /OpenSSL ([\d\.]+)/;
38bd7e75fe69 Tests: skip ALPN rejection tests with OpenSSL < 1.1.0. Sergey Kandaurov <pluknet@nginx.com> parents: 1743 diff changeset	179 skip 'OpenSSL too old', 1 if defined $1 and $1 lt '1.1.0';
1743 2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	180
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	181 TODO: {
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	182 local $TODO = 'not yet' unless $t->has_version('1.21.4');
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	183
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	184 ok(!get_ssl_socket(8148, ['unknown']), 'alpn rejected');
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	185
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	186 }
7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	187
1743 2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	188 }
2318ed01ce53 Tests: skip ALPN rejection tests with too old LibreSSL. Sergey Kandaurov <pluknet@nginx.com> parents: 1742 diff changeset	189
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	190 # starttls imap
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	191
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	192 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8149));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	193 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	194
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	195 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	196 $s->check(qr/\+ VXNlcm5hbWU6/, 'imap auth before startls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	197
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	198 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8149));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	199 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	200
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	201 $s->send('1 STARTTLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	202 $s->ok('imap starttls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	203
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	204 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8150));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	205 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	206
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	207 $s->send('1 AUTHENTICATE LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	208 $s->check(qr/^\S+ BAD/, 'imap auth before startls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	209
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	210 $s = Test::Nginx::IMAP->new(PeerAddr => '127.0.0.1:' . port(8150));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	211 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	212
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	213 $s->send('1 STARTTLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	214 $s->ok('imap starttls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	215
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	216 # starttls pop3
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	217
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	218 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8151));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	219 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	220
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	221 $s->send('AUTH LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	222 $s->check(qr/\+ VXNlcm5hbWU6/, 'pop3 auth before startls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	223
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	224 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8151));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	225 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	226
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	227 $s->send('STLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	228 $s->ok('pop3 starttls on');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	229
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	230 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8152));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	231 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	232
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	233 $s->send('AUTH LOGIN');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	234 $s->check(qr/^-ERR/, 'pop3 auth before startls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	235
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	236 $s = Test::Nginx::POP3->new(PeerAddr => '127.0.0.1:' . port(8152));
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	237 $s->read();
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	238
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	239 $s->send('STLS');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	240 $s->ok('pop3 starttls only');
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	241
1148 44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	242 # starttls smtp
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	243
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	244 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8153));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	245 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	246
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	247 $s->send('AUTH LOGIN');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	248 $s->check(qr/^334 VXNlcm5hbWU6/, 'smtp auth before startls on');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	249
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	250 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8153));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	251 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	252
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	253 $s->send('STARTTLS');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	254 $s->ok('smtp starttls on');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	255
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	256 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8154));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	257 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	258
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	259 $s->send('AUTH LOGIN');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	260 $s->check(qr/^5.. /, 'smtp auth before startls only');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	261
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	262 $s = Test::Nginx::SMTP->new(PeerAddr => '127.0.0.1:' . port(8154));
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	263 $s->read();
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	264
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	265 $s->send('STARTTLS');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	266 $s->ok('smtp starttls only');
44620036fedf Tests: added starttls tests for smtp. Andrey Zelenkov <zelenkov@nginx.com> parents: 1147 diff changeset	267
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	268 ###############################################################################
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	269
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	270 sub get_ssl_socket {
1831 f6d1f82f314b Tests: separate SSL session reuse tests in mail. Maxim Dounin <mdounin@mdounin.ru> parents: 1826 diff changeset	271 my ($port, $alpn) = @_;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	272
1621 fd440d324700 Tests: simplified get_ssl_socket() functions that use Net::SSLeay. Sergey Kandaurov <pluknet@nginx.com> parents: 1488 diff changeset	273 my $s = IO::Socket::INET->new('127.0.0.1:' . port($port));
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	274 my $ssl = Net::SSLeay::new($ctx) or die("Failed to create SSL $!");
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	275 Net::SSLeay::set_alpn_protos($ssl, $alpn) if defined $alpn;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	276 Net::SSLeay::set_fd($ssl, fileno($s));
1742 7bfa47410cc0 Tests: basic ALPN tests in the mail module. Sergey Kandaurov <pluknet@nginx.com> parents: 1621 diff changeset	277 Net::SSLeay::connect($ssl) == 1 or return;
1142 baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	278 return ($s, $ssl);
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	279 }
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	280
baeebac35a2e Tests: basic mail ssl tests. Andrey Zelenkov <zelenkov@nginx.com> parents: diff changeset	281 ###############################################################################

Mercurial > hg > nginx-tests

annotate mail_ssl.t @ 1831:f6d1f82f314b