Mercurial > hg > nginx-tests
diff stream_ssl_variables.t @ 1447:e1c64ee44212
Tests: added $ssl_server_name tests with SSL session reuse.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Mon, 04 Mar 2019 13:02:36 +0300 |
parents | 766bcbb632ee |
children | c1b969fc7a23 |
line wrap: on
line diff
--- a/stream_ssl_variables.t +++ b/stream_ssl_variables.t @@ -40,7 +40,7 @@ eval { }; plan(skip_all => 'Net::SSLeay with OpenSSL SNI support required') if $@; -my $t = Test::Nginx->new()->has(qw/stream stream_ssl sni stream_return/) +my $t = Test::Nginx->new()->has(qw/stream stream_ssl stream_return/) ->has_daemon('openssl'); $t->write_file_expand('nginx.conf', <<'EOF'); @@ -55,13 +55,12 @@ events { stream { ssl_certificate_key localhost.key; ssl_certificate localhost.crt; + ssl_session_cache builtin; server { listen 127.0.0.1:8080; listen 127.0.0.1:8081 ssl; return $ssl_session_reused:$ssl_session_id:$ssl_cipher:$ssl_protocol; - - ssl_session_cache builtin; } server { @@ -90,7 +89,7 @@ foreach my $name ('localhost') { or die "Can't create certificate for $name: $!\n"; } -$t->run()->plan(5); +$t->run()->plan(6); ############################################################################### @@ -107,12 +106,27 @@ my $ses = Net::SSLeay::get_session($ssl) like(Net::SSLeay::read($ssl), qr/^r:\w{64}:[\w-]+:(TLS|SSL)v(\d|\.)+$/, 'ssl variables - session reused'); +SKIP: { +skip 'no sni', 3 unless $t->has_module('sni'); + ($s, $ssl) = get_ssl_socket(port(8082), undef, 'example.com'); is(Net::SSLeay::ssl_read_all($ssl), 'example.com', 'ssl server name'); +TODO: { +local $TODO = 'not yet' if $t->has_module('OpenSSL (1.1.1|3)') + && !$t->has_version('1.15.10'); + +my $ses = Net::SSLeay::get_session($ssl); +($s, $ssl) = get_ssl_socket(port(8082), $ses); +is(Net::SSLeay::ssl_read_all($ssl), 'example.com', 'ssl server name - reused'); + +} + ($s, $ssl) = get_ssl_socket(port(8082)); is(Net::SSLeay::ssl_read_all($ssl), '', 'ssl server name empty'); +} + ############################################################################### sub get_ssl_socket {