Mercurial > hg > nginx-tests

comparison stream_ssl_certificate.t @ 1851:0351dee227a8

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: unbreak tests with dynamic certificates on stable. In 74cffa9d4c43, ticket based session reuse is enabled in addition to using a shared SSL session cache. This changed how a session can be resumed in a different server: - for a session ID based resumption, it is resumed in the same context - when using session tickets, a key name is also checked for matching - with a ticket callback, this is skipped in favor of callback's logic This makes 'session id context match' tests fail with session tickets on stable since ticket key names are unique in distinct SSL contexts. On the other hand, tests pass on 1.23.2+ due to automatic ticket keys rotation that installs ticket callback, and using a common shared SSL session cache.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 28 Mar 2023 01:36:32 +0400
parents 74cffa9d4c43
children 58951cf933e1
comparison
equal deleted inserted replaced
1850:2a7fc70900a5 1851:0351dee227a8
159 159
160 my ($s, $ssl) = get('default', 8080); 160 my ($s, $ssl) = get('default', 8080);
161 my $ses = Net::SSLeay::get_session($ssl); 161 my $ses = Net::SSLeay::get_session($ssl);
162 162
163 like(get('default', 8080, $ses), qr/default:r/, 'session reused'); 163 like(get('default', 8080, $ses), qr/default:r/, 'session reused');
164
165 TODO: {
166 # ticket key name mismatch prevents session resumption
167 local $TODO = 'not yet' unless $t->has_version('1.23.2');
168
164 like(get('default', 8081, $ses), qr/default:r/, 'session id context match'); 169 like(get('default', 8081, $ses), qr/default:r/, 'session id context match');
170
171 }
172
165 like(get('default', 8082, $ses), qr/default:\./, 'session id context distinct'); 173 like(get('default', 8082, $ses), qr/default:\./, 'session id context distinct');
166 174
167 # errors 175 # errors
168 176
169 Net::SSLeay::ERR_clear_error(); 177 Net::SSLeay::ERR_clear_error();