Mercurial > hg > nginx-tests

comparison proxy_ssl.t @ 1839:ebc6e5afe597

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: fixed proxy_ssl.t with LibreSSL and TLSv1.3. LibreSSL does not support session reuse with TLSv1.3.
author Maxim Dounin <mdounin@mdounin.ru>
date Thu, 23 Mar 2023 19:50:08 +0300
parents 5a55da6aed13
children cdcd75657e52
comparison
equal deleted inserted replaced
1838:a68d1313c3fc 1839:ebc6e5afe597
44 ssl_certificate localhost.crt; 44 ssl_certificate localhost.crt;
45 ssl_session_cache builtin; 45 ssl_session_cache builtin;
46 46
47 location / { 47 location / {
48 add_header X-Session $ssl_session_reused; 48 add_header X-Session $ssl_session_reused;
49 add_header X-Protocol $ssl_protocol;
49 } 50 }
50 } 51 }
51 52
52 server { 53 server {
53 listen 127.0.0.1:8080; 54 listen 127.0.0.1:8080;
107 ############################################################################### 108 ###############################################################################
108 109
109 like(http_get('/ssl'), qr/200 OK.*X-Session: \./s, 'ssl'); 110 like(http_get('/ssl'), qr/200 OK.*X-Session: \./s, 'ssl');
110 like(http_get('/ssl'), qr/200 OK.*X-Session: \./s, 'ssl 2'); 111 like(http_get('/ssl'), qr/200 OK.*X-Session: \./s, 'ssl 2');
111 like(http_get('/ssl_reuse'), qr/200 OK.*X-Session: \./s, 'ssl session new'); 112 like(http_get('/ssl_reuse'), qr/200 OK.*X-Session: \./s, 'ssl session new');
113
114 TODO: {
115 local $TODO = 'no TLS 1.3 sessions in LibreSSL'
116 if $t->has_module('LibreSSL') && http_get('/ssl') =~ /TLSv1.3/;
117
112 like(http_get('/ssl_reuse'), qr/200 OK.*X-Session: r/s, 'ssl session reused'); 118 like(http_get('/ssl_reuse'), qr/200 OK.*X-Session: r/s, 'ssl session reused');
113 like(http_get('/ssl_reuse'), qr/200 OK.*X-Session: r/s, 'ssl session reused 2'); 119 like(http_get('/ssl_reuse'), qr/200 OK.*X-Session: r/s, 'ssl session reused 2');
120
121 }
114 122
115 SKIP: { 123 SKIP: {
116 skip 'long test', 1 unless $ENV{TEST_NGINX_UNSAFE}; 124 skip 'long test', 1 unless $ENV{TEST_NGINX_UNSAFE};
117 125
118 like(http_get('/timeout'), qr/200 OK/, 'proxy connect timeout'); 126 like(http_get('/timeout'), qr/200 OK/, 'proxy connect timeout');