Mercurial > hg > nginx-tests
view mail_ssl_conf_command.t @ 1969:3ba1668cea87
Tests: adjusted stream_ssl_alpn.t to handle old SSL libraries.
The "ssl_alpn" directive of the stream module requires an SSL library with
ALPN support, and startup fails if the directive is used in the configuration
but ALPN support is not available (notably, with OpenSSL before 1.0.2).
Restored try_run() to skip the test in this case.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Mon, 06 May 2024 00:03:01 +0300 |
parents | 3cae7b54841e |
children |
line wrap: on
line source
#!/usr/bin/perl # (C) Sergey Kandaurov # (C) Nginx, Inc. # Tests for mail ssl module, ssl_conf_command. ############################################################################### use warnings; use strict; use Test::More; BEGIN { use FindBin; chdir($FindBin::Bin); } use lib 'lib'; use Test::Nginx; use Test::Nginx::IMAP; ############################################################################### select STDERR; $| = 1; select STDOUT; $| = 1; local $SIG{PIPE} = 'IGNORE'; my $t = Test::Nginx->new() ->has(qw/mail mail_ssl imap openssl:1.0.2 socket_ssl_reused/) ->has_daemon('openssl'); plan(skip_all => 'no ssl_conf_command') if $t->has_module('BoringSSL'); $t->write_file_expand('nginx.conf', <<'EOF'); %%TEST_GLOBALS%% daemon off; events { } mail { auth_http http://127.0.0.1:8080; # unused server { listen 127.0.0.1:8993 ssl; protocol imap; ssl_protocols TLSv1.2; ssl_session_tickets off; ssl_conf_command Options SessionTicket; ssl_prefer_server_ciphers on; ssl_conf_command Options -ServerPreference; ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256; ssl_certificate localhost.crt; ssl_certificate_key localhost.key; ssl_conf_command Certificate override.crt; ssl_conf_command PrivateKey override.key; } } EOF $t->write_file('openssl.conf', <<EOF); [ req ] default_bits = 2048 encrypt_key = no distinguished_name = req_distinguished_name [ req_distinguished_name ] EOF my $d = $t->testdir(); foreach my $name ('localhost', 'override') { system('openssl req -x509 -new ' . "-config $d/openssl.conf -subj /CN=$name/ " . "-out $d/$name.crt -keyout $d/$name.key " . ">>$d/openssl.out 2>&1") == 0 or die "Can't create certificate for $name: $!\n"; } $t->run()->plan(3); ############################################################################### my $s; $s = Test::Nginx::IMAP->new( SSL => 1, SSL_session_cache_size => 100 ); $s->read(); like($s->socket()->dump_peer_certificate(), qr/CN=override/, 'Certificate'); $s = Test::Nginx::IMAP->new( SSL => 1, SSL_reuse_ctx => $s->socket() ); ok($s->socket()->get_session_reused(), 'SessionTicket'); $s->socket()->close(SSL_no_shutdown => 1); $s = Test::Nginx::IMAP->new( SSL => 1, SSL_cipher_list => 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384' ); is($s->socket()->get_cipher(), 'ECDHE-RSA-AES128-GCM-SHA256', 'ServerPreference'); ###############################################################################