Mercurial > hg > nginx-tests

annotate uwsgi_ssl_certificate.t @ 1932:b68471aee5ad

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: improved test for a stream initiating QUIC path migration. Previously, the test mostly passed due to a push timer scheduled for an unrelated delayed ACK, and the new path had enough data received to send response back when the push timer fired. Otherwise, the test could fail due to unvalidated address. Now it is fixed to perform path validation.
author Sergey Kandaurov <pluknet@nginx.com>
date Mon, 21 Aug 2023 17:10:57 +0400
parents 31ea330ac360
children b5036a0f9ae0
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1688
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
1 #!/usr/bin/perl
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
2
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
3 # (C) Sergey Kandaurov
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
4 # (C) Nginx, Inc.
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
5
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
6 # Tests for http uwsgi module with client certificate to ssl backend.
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
7 # The uwsgi_ssl_certificate and uwsgi_ssl_password_file directives.
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
8
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
9 ###############################################################################
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
10
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
11 use warnings;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
12 use strict;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
13
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
14 use Test::More;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
15
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
16 BEGIN { use FindBin; chdir($FindBin::Bin); }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
17
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
18 use lib 'lib';
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
19 use Test::Nginx;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
20
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
21 ###############################################################################
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
22
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
23 select STDERR; $| = 1;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
24 select STDOUT; $| = 1;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
25
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
26 my $t = Test::Nginx->new()->has(qw/http http_ssl uwsgi/)
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
27 ->has_daemon('openssl')->plan(5);
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
28
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
29 $t->write_file_expand('nginx.conf', <<'EOF');
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
30
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
31 %%TEST_GLOBALS%%
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
32
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
33 daemon off;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
34
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
35 events {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
36 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
37
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
38 http {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
39 %%TEST_GLOBALS_HTTP%%
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
40
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
41 server {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
42 listen 127.0.0.1:8080;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
43 server_name localhost;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
44
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
45 uwsgi_ssl_session_reuse off;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
46
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
47 location /verify {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
48 uwsgi_pass suwsgi://127.0.0.1:8081;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
49 uwsgi_ssl_certificate 1.example.com.crt;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
50 uwsgi_ssl_certificate_key 1.example.com.key;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
51 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
52
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
53 location /fail {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
54 uwsgi_pass suwsgi://127.0.0.1:8081;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
55 uwsgi_ssl_certificate 2.example.com.crt;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
56 uwsgi_ssl_certificate_key 2.example.com.key;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
57 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
58
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
59 location /encrypted {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
60 uwsgi_pass suwsgi://127.0.0.1:8082;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
61 uwsgi_ssl_certificate 3.example.com.crt;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
62 uwsgi_ssl_certificate_key 3.example.com.key;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
63 uwsgi_ssl_password_file password;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
64 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
65 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
66
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
67 # stub to implement SSL logic for tests
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
68
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
69 server {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
70 listen 127.0.0.1:8081 ssl;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
71 server_name localhost;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
72
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
73 ssl_certificate 2.example.com.crt;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
74 ssl_certificate_key 2.example.com.key;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
75
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
76 ssl_verify_client optional_no_ca;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
77 ssl_trusted_certificate 1.example.com.crt;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
78
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
79 add_header X-Verify $ssl_client_verify always;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
80 add_header X-Name $ssl_client_s_dn always;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
81 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
82
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
83 server {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
84 listen 127.0.0.1:8082 ssl;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
85 server_name localhost;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
86
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
87 ssl_certificate 1.example.com.crt;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
88 ssl_certificate_key 1.example.com.key;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
89
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
90 ssl_verify_client optional_no_ca;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
91 ssl_trusted_certificate 3.example.com.crt;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
92
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
93 add_header X-Verify $ssl_client_verify always;
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
94 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
95 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
96
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
97 EOF
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
98
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
99 $t->write_file('openssl.conf', <<EOF);
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
100 [ req ]
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
101 default_bits = 2048
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
102 encrypt_key = no
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
103 distinguished_name = req_distinguished_name
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
104 [ req_distinguished_name ]
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
105 EOF
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
106
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
107 my $d = $t->testdir();
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
108
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
109 foreach my $name ('1.example.com', '2.example.com') {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
110 system('openssl req -x509 -new '
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
111 . "-config $d/openssl.conf -subj /CN=$name/ "
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
112 . "-out $d/$name.crt -keyout $d/$name.key "
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
113 . ">>$d/openssl.out 2>&1") == 0
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
114 or die "Can't create certificate for $name: $!\n";
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
115 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
116
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
117 foreach my $name ('3.example.com') {
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
118 system("openssl genrsa -out $d/$name.key -passout pass:$name "
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
119 . "-aes128 2048 >>$d/openssl.out 2>&1") == 0
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
120 or die "Can't create private key: $!\n";
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
121 system('openssl req -x509 -new '
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
122 . "-config $d/openssl.conf -subj /CN=$name/ "
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
123 . "-out $d/$name.crt "
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
124 . "-key $d/$name.key -passin pass:$name"
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
125 . ">>$d/openssl.out 2>&1") == 0
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
126 or die "Can't create certificate for $name: $!\n";
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
127 }
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
128
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
129 sleep 1 if $^O eq 'MSWin32';
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
130
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
131 $t->write_file('password', '3.example.com');
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
132 $t->write_file('index.html', '');
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
133
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
134 $t->run();
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
135
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
136 ###############################################################################
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
137
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
138 like(http_get('/verify'), qr/X-Verify: SUCCESS/ms, 'verify certificate');
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
139 like(http_get('/fail'), qr/X-Verify: FAILED/ms, 'fail certificate');
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
140 like(http_get('/encrypted'), qr/X-Verify: SUCCESS/ms, 'with encrypted key');
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
141
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
142 like(http_get('/verify'), qr!X-Name: /?CN=1.example!, 'valid certificate');
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
143 unlike(http_get('/fail'), qr!X-Name: /?CN=1.example!, 'invalid certificate');
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
144
31ea330ac360 Tests: more uwsgi tests with SSL.
Sergey Kandaurov <pluknet@nginx.com>
parents:
diff changeset
145 ###############################################################################