Mercurial > hg > nginx-tests
view ssl_client_escaped_cert.t @ 1994:e9235c647f45
Tests: better binary path handling on Windows.
The ".exe" extension is no longer required, and testing is allowed if
it is omitted.
Additionally, forward slashes in the binary path are automatically replaced
with reverse slashes, since CMD cannot properly handle relative paths with
forward slashes, and such paths previously resulted in various issues,
including non-working $t->has() and $t->has_version().
In particular, with these changes the default binary path, which is
"../nginx/objs/nginx", works properly, and testing can be done without
any additional options.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Fri, 09 Aug 2024 05:18:51 +0300 |
parents | a797d7428fa5 |
children |
line wrap: on
line source
#!/usr/bin/perl # (C) Sergey Kandaurov # (C) Nginx, Inc. # Tests for http ssl module, $ssl_client_escaped_cert variable. ############################################################################### use warnings; use strict; use Test::More; BEGIN { use FindBin; chdir($FindBin::Bin); } use lib 'lib'; use Test::Nginx; ############################################################################### select STDERR; $| = 1; select STDOUT; $| = 1; my $t = Test::Nginx->new()->has(qw/http http_ssl rewrite socket_ssl/) ->has_daemon('openssl')->plan(3); $t->write_file_expand('nginx.conf', <<'EOF'); %%TEST_GLOBALS%% daemon off; events { } http { %%TEST_GLOBALS_HTTP%% ssl_certificate_key localhost.key; ssl_certificate localhost.crt; ssl_verify_client optional_no_ca; server { listen 127.0.0.1:8443 ssl; server_name localhost; location /cert { return 200 $ssl_client_raw_cert; } location /escaped { return 200 $ssl_client_escaped_cert; } } } EOF $t->write_file('openssl.conf', <<EOF); [ req ] default_bits = 2048 encrypt_key = no distinguished_name = req_distinguished_name [ req_distinguished_name ] EOF my $d = $t->testdir(); foreach my $name ('localhost') { system('openssl req -x509 -new ' . "-config $d/openssl.conf -subj /CN=$name/ " . "-out $d/$name.crt -keyout $d/$name.key " . ">>$d/openssl.out 2>&1") == 0 or die "Can't create certificate for $name: $!\n"; } $t->run(); ############################################################################### my ($cert) = cert('/cert') =~ /\x0d\x0a?\x0d\x0a?(.*)/ms; my ($escaped) = cert('/escaped') =~ /\x0d\x0a?\x0d\x0a?(.*)/ms; ok($cert, 'ssl_client_raw_cert'); ok($escaped, 'ssl_client_escaped_cert'); $escaped =~ s/%([0-9A-Fa-f]{2})/chr(hex($1))/eg; is($escaped, $cert, 'ssl_client_escaped_cert unescape match'); ############################################################################### sub cert { my ($uri) = @_; return http_get( $uri, SSL => 1, SSL_cert_file => "$d/localhost.crt", SSL_key_file => "$d/localhost.key" ); } ###############################################################################