comparison stream_ssl_preread.t @ 1858:cdcd75657e52

Tests: added has_feature() tests for IO::Socket::SSL. The following distinct features supported: - "socket_ssl", which requires IO::Socket::SSL and also implies existance of the IO::Socket::SSL::SSL_VERIFY_NONE() symbol. It is used by most of the tests. - "socket_ssl_sni", which requires IO::Socket::SSL with the can_client_sni() function (1.84), and SNI support available in Net::SSLeay and the OpenSSL library being used. Used by ssl_sni.t, ssl_sni_sessions.t, stream_ssl_preread.t. Additional Net::SSLeay testing is believed to be unneeded and was removed. - "socket_ssl_alpn", which requires IO::Socket::SSL with ALPN support (2.009), and ALPN support in Net::SSLeay and the OpenSSL library being used. Used by h2_ssl.t, h2_ssl_verify_client.t, stream_ssl_alpn.t, stream_ssl_preread_alpn.t. - "socket_ssl_sslversion", which requires IO::Socket::SSL with the get_sslversion() and get_sslversion_int() methods (1.964). Used by mail_imap_ssl.t. - "socket_ssl_reused", which requires IO::Socket::SSL with the get_session_reused() method (2.057). To be used in the following patches. This makes it possible to simplify and unify various SSL tests.
author Maxim Dounin <mdounin@mdounin.ru>
date Thu, 18 May 2023 18:07:02 +0300
parents f3ba4c74de31
children 46351d990aee
comparison
equal deleted inserted replaced
1857:da3889ba0b96 1858:cdcd75657e52
22 22
23 select STDERR; $| = 1; 23 select STDERR; $| = 1;
24 select STDOUT; $| = 1; 24 select STDOUT; $| = 1;
25 25
26 my $t = Test::Nginx->new()->has(qw/stream stream_map stream_ssl_preread/) 26 my $t = Test::Nginx->new()->has(qw/stream stream_map stream_ssl_preread/)
27 ->has(qw/stream_ssl stream_return/)->has_daemon('openssl') 27 ->has(qw/stream_ssl stream_return socket_ssl_sni/)
28 ->has_daemon('openssl')->plan(13)
28 ->write_file_expand('nginx.conf', <<'EOF'); 29 ->write_file_expand('nginx.conf', <<'EOF');
29 30
30 %%TEST_GLOBALS%% 31 %%TEST_GLOBALS%%
31 32
32 daemon off; 33 daemon off;
104 return $server_port; 105 return $server_port;
105 } 106 }
106 } 107 }
107 108
108 EOF 109 EOF
109
110 eval { require IO::Socket::SSL; die if $IO::Socket::SSL::VERSION < 1.56; };
111 plan(skip_all => 'IO::Socket::SSL version >= 1.56 required') if $@;
112
113 eval {
114 if (IO::Socket::SSL->can('can_client_sni')) {
115 IO::Socket::SSL->can_client_sni() or die;
116 }
117 };
118 plan(skip_all => 'IO::Socket::SSL with OpenSSL SNI support required') if $@;
119
120 eval {
121 my $ctx = Net::SSLeay::CTX_new() or die;
122 my $ssl = Net::SSLeay::new($ctx) or die;
123 Net::SSLeay::set_tlsext_host_name($ssl, 'example.org') == 1 or die;
124 };
125 plan(skip_all => 'Net::SSLeay with OpenSSL SNI support required') if $@;
126
127 $t->plan(13);
128 110
129 $t->write_file('openssl.conf', <<EOF); 111 $t->write_file('openssl.conf', <<EOF);
130 [ req ] 112 [ req ]
131 default_bits = 2048 113 default_bits = 2048
132 encrypt_key = no 114 encrypt_key = no